Telegram says it fixed serious security flaws

Telegram says it fixed serious security flaws
A group of London-based researchers has revealed that the popular messaging app Telegram has serious security vulnerabilities. One of the best alternatives to WhatsApp, Telegram has over 500 million users on iOS and Android operating systems. Royal Holloway researchers have suggested that Telegram has vulnerabilities in Cloud Chats. The platform, by default, offers non-E2EE (end-to-end encryption) chats, while more privacy-conscious users can still opt for end-to-end encryption for individual chats. The vulnerabilities were found in non-E2EE chats.

< p lang="en" dir="ltr">With Lenka Mareková, @kennyog and Igors Stepanovs, we take a deep dive into @telegram's symmetric cryptography: “Four attacks and one test for Telegram” to be presented at @IEEESSP 2022. https ://t.co/60sSPD07Hq 🧵 by @Kennyog and me: pic.twitter.com/jn5P72kWS9 Jul 16, 2021 See More Researchers say the flaw allowed intruders to access messages that had already been sent and reorganize the words, which could result in a different message. Additionally, the hackers were able to extract the chat transcript in a readable format from iOS, Android, and desktop apps, despite the messages being sent in encrypted mode. This vulnerability could also be used to manipulate "Bots" on the messaging platform. Bots, on Telegram, are used to manage groups and automate basic tasks. The flaws were shared with Telegram before they were revealed to the public, giving Telegram plenty of time to fix them. Telegram, on the other hand, has acknowledged the issues highlighted by the researchers and has already fixed the flaws. In an updated prepared statement on the official Telegram blog, it says: “The latest versions of the official Telegram apps already contain the changes that make the four observations made by the researchers no longer relevant. In general, neither change was critical, as no way to decrypt or manipulate the messages was discovered. "Telegram has released an updated version with a fix. Researchers and Telegram have advised users to update the app on their devices from the respective app repositories. Follow TechRadar on Twitter, Facebook and Instagram for the latest updates.