Telegram Desktop fixed a flaw that let bot messages embed JavaScript in HTML exports to read or alter messages; old exports ...

Обычная кнопка под сообщением Telegram могла превратить сохранённую переписку в страницу с вредоносным JavaScript. Исследователи ExPatch обнаружили уязвимость в HTML-экспорте Telegram Desktop: ...

Explore the latest news, real-world incidents, expert analysis, and trends in Telegram — only on The Hacker News, the leading ...

Dans Telegram, le message avait l’air normal. Le code malveillant ne s’exécutait pas non plus dans l’application. Il pouvait rester dormant pendant des mois dans l’historique, jusqu’au jour où un util ...

A few days ago I saw a screenshot on X of someone talking to what looks like a McDonald's support chatbot.They wanted to ...

A high-severity Telegram Desktop flaw allowed malicious JavaScript in bot-created buttons to steal chat content when conversations were exported as HTML.

Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ...

A flaw in Telegram Desktop allowed specially crafted bot messages to execute JavaScript in HTML chat exports and expose ...

A Telegram Desktop flaw lets bots inject JavaScript into exported chats, enabling data theft and page manipulation.

Die Bedrohungslage wird durch Kampagnen wie BigBear 2.0 verschärft. Dieses Phishing-as-a-Service-Modell (PhaaS), basierend ...

Falha no Telegram Desktop permite XSS em exportações HTML. Veja versões afetadas, riscos para backups antigos e como se proteger.

An Evilginx2-based phishing-as-a-service (PhaaS) campaign known as BigBear 2.0 has compromised the Microsoft 365 accounts of ...