<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Yestino - The Signal · Telegram Desktop</title><link>https://yestino.com/entities/telegram-desktop-e63581</link><description>Every event involving Telegram Desktop</description><language>en</language><atom:link href="https://yestino.com/entities/telegram-desktop-e63581/feed.xml" rel="self" type="application/rss+xml"/><item><title>Telegram Desktop: one-click account takeover via IPC injection</title><link>https://yestino.com/events/telegram-desktop-one-click-account-takeover-via-ipc-injectio-51f4f6</link><guid isPermaLink="true">https://yestino.com/events/telegram-desktop-one-click-account-takeover-via-ipc-injectio-51f4f6</guid><pubDate>Fri, 09 Oct 2026 11:26:00 GMT</pubDate><description>An unescaped separator in Telegram Desktop’s single-instance IPC lets one clicked link read arbitrary files off the disk and send them to the attacker, session…
Sources: Lobsters</description></item></channel></rss>