Telegram has found a vulnerability that allows the camera and microphone to be activated. A Google engineer discovered a weak point in the messaging app for macOS. Through the vulnerability, attackers can gain access to user information from their device.
Google engineer Den Reva discovered a vulnerability in the Telegram app for MacOS that allows the camera and microphone to be activated without the user’s knowledge. The programmer talked about this on his blog.
The vulnerability lies in the ability to record video with sound and save it to a hidden folder. According to Reva, this is possible due to the fact that Telegram does not fully enable Apple’s security mechanisms that protect against unauthorized use of application memory and control access to the camera and microphone by applications.
“It seems that Telegram has not hardened the version of the app that was uploaded to the App Store for macOS,” Reva summarized.
Using the messenger vulnerability, attackers can gain access to sensitive information on the user’s device and bypass Apple’s protection, the engineer believes.
Cybersecurity expert Matt Johansen wrote on Twitter that the vulnerability in Telegram was found in February. Johansen reported this to the developers of the messenger, but they, according to him, did not give feedback, so he decided to make the information public.
Author:
Kirill Bilyk
Source: RB
I am a professional journalist and content creator with extensive experience writing for news websites. I currently work as an author at Gadget Onus, where I specialize in covering hot news topics. My written pieces have been published on some of the biggest media outlets around the world, including The Guardian and BBC News.
