News
Telegram Desktop One‑Click Account Takeover
A malicious link can clone Telegram Desktop sessions (versions ≤7.2.8) via an unescaped semicolon in tg: links, exfiltrating tdata files without SMS or password. Fix released in 7.2.9; users should set a local passcode and restrict group adds.