If you use #Telegram or know someone who does – there seems to be a remote code execution vulnerability in Telegram:
https://nitter.catsarch.com/v12sec/status/2120471754166415821
It is apparently being actively exploited.
The vulnerability is *bad*, it can lead to account take over or worse as it apparently provides the attacker with a way to run code directly on the device, outside of the sandbox.
Apparently it has now been patched, so install updates as soon as possible!
It relates to the new "widgets".
@rysiek ...there are widgets now? fucksake. let me just go turn those off because I BET you ANYTHING they're an "opt out" shit.