Piousbox

Telegram Desktop: one-click account takeover via IPC injection. An unescaped separator in Telegram Desktop's single-instance IPC lets one clicked link read arbitrary files off the disk and send them to the attacker, session files included.

...so, it's a 'common cold'?

Rubio says US aim is to dismantle the tribunal, while calling on allies...