Looks like there's a bit more info on the zero-click Telegram RCE and holy shit this looks bad:
> This vulnerability allows an attacker to execute arbitrary code on a victim's device simply by sendin...
@nprofile1q... This report looks pure AI slop, but @nprofile1q... does have a matching candidate listed (meaning ZDI accepted the submission as a valid vuln):
https://www.zerodayinitiative.com/advisories/upcoming/
Since that vuln was reported just 4 days ago my educated guess is that 1) the reporter wasn't dumb to trash their ZDI bounty by posting details online 2) someone saw the candidate and generated a slop report about it without any technical ground.
https://www.zerodayinitiative.com/advisories/upcoming/
Since that vuln was reported just 4 days ago my educated guess is that 1) the reporter wasn't dumb to trash their ZDI bounty by posting details online 2) someone saw the candidate and generated a slop report about it without any technical ground.