HighZero-Day
Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS
Cyber Security News·Source published ·1 min read
What happened?
Security researcher Saifeldeen Aziz says he found new zero-click bugs in Telegram stickers. He also says he chained them to run code on iOS. The work was due to be presented on October 28 at OffensiveCon in Tokyo, according to the conference agenda. Aziz says he got past Telegram’s server-side checks and that the flawed code still ships in its apps. The talk is a direct challenge to a position Telegram took in March. Trend Micro’s Zero Day Initiative (ZDI) had reported a bug in the app’s sticker code.