Security News Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports TheHackerNews Daniel Bender 14 Sep 2026 Share Telegram Desktop fixed a flaw that let bot messages embed JavaScript in HTML exports to read or alter messages; old exports remain affected.
