CYBER● ELEVATED3h ago · Sep 14, 2026, 5:58 PM
Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
The Hacker News · global
A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12. In Telegram, the message looked ordinary, with a link button, and the script ran only when someone opened the export file in a web browser. It could then copy every message in that file to
GlobeAlert aggregates and classifies open sources; the story above belongs to its publisher. Summaries are machine-generated from the source text.
More in Cyber
CYBERnow[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AIDark ReadingCYBERnow[Virtual Event] Building a Secure AI Strategy for the EnterpriseDark ReadingCYBER1h agoRussian Telegram channels are suddenly gaining thousands of suspicious new followers. Nobody knows who’s behind the apparent bot attack.Meduza [en]CYBER1h agoMaximum Severity GitLab Flaw Puts Supply Chains at RiskDark Reading