SlowMist's Cos warns of potential security risks in the new Telegram version, urging users to postpone updates

According to TechFlow, on November 12, SlowMist founder Cos posted on X that the new Telegram version supports embedding "apps" in messages, but the feature lacks sandbox isolation protection, and the QuickJS JavaScript engine it uses could become an attack vector for malicious code execution.

Cos pointed out that as AI technology improves vulnerability discovery and exploitation capabilities, such new features may introduce unnecessary security risks, and therefore urged users to postpone updating Telegram.

Source: TechFlow