SoftwareThe Hacker News

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

Source summary

What the curated feed stores

A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12. In Telegram, the message looked ordinary, with a link button, and the script ran only when someone opened the export file in a web browser. It could then copy every message in that file to

Banga Corporation does not present this summary as original reporting, does not claim independent verification of the publisher, and does not republish the full article. Use the publisher link for complete context.

Continue exploring

Discuss architecture implications

This page does not invent a project-specific analysis of the publisher's reporting. If a technology development may affect your systems, continue to Solutions or Contact.

Open Architecture Studio Contact the team

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

What the curated feed stores

More in Software

Apple announces major software updates across all platforms

Apple Releases HomePod Software Update 27 [Download]

Tesla's latest software update is a biggie.

...a free, open source app that watches your driveway, your porch, your garage, entirely on hardware you already own. No cloud. No subscription. No footage anyone else can request.

Discuss architecture implications