Researcher reproduces full RCE exploit chain against Telegram-iOS from public source
OwariDa · x · 2026-11-12
A security researcher says he reproduced a full RCE exploit chain against the Telegram iOS client in the simulator using newly public sources on GitHub. The repo lacks a 13.2.1 tag (only 13.2), so the bug may be fixed in 13.2.1 with some source kept private; he'll verify once it's tagged.
More from Safety
- GitHub Ships gh-actions-lock to Pin Every Action to Verified Commits — DanielLockyer · 2026-11-12
- Hugging Face CEO vows to fight harder than ever for open-source AI after bad day — ariG23498 · 2026-11-12
- Eligible ChatGPT users can grab a Yubico bundle at 46% off — paw_lean · 2026-11-12
- Zero-click RCE in Telegram Desktop: pressing /start on a bot can hack you — zebird0 · 2026-11-12
- Viral comic: elite AI-risk discourse rests on the shaky assumption that offline evals predict the real world — joshua_saxe · 2026-11-12
- Anthropic's anti-deceptive-campaign policy takes effect Nov 12, Claude-SEO sites on watch — lilyraynyc · 2026-11-12