Telegram Faces Critical Exploits, Mass Data Leak, and Founder's Arrest in 2025-26

·19 views

Telegram founder Pavel Durov was arrested in France in August 2025 on allegations linked to criminal misuse of his platform, drawing global attention to the app's security shortcomings. Two serious unpatched vulnerabilities have emerged: a zero-click animated sticker exploit enabling remote code execution on Android and Linux, and EvilLoader, a zero-day flaw disguising malicious APKs as video files in chats. Cybercriminals are actively selling EvilLoader exploit kits on underground forums, leaving millions of Telegram for Android users exposed. In January 2026, a 44GB dataset containing over 200 million records surfaced on BreachForums, compiled from three separate databases. Security experts urge users to update the app immediately, avoid opening unsolicited files, and restrict incoming messages to trusted contacts.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

NexoPeek: VR molecular lab lets users explore protein structures like lenacapavir's HIV target

A VR molecular lab called NexoPeek, running on Meta Quest, is presented as a way to make structural biology more intuitive. It offers twelve narrated tours organized into six knowledge areas, from basic biotechnology to green bioprocesses. The tools integrate data from several structure databases and support multiple rendering styles and analysis features such as pocket prediction and structural alignment. The article uses lenacapavir's binding to HIV-1 capsid as an example, showing how users can identify its binding pocket and hydrogen bonds in VR. The author stresses that the tool is for education and research visualization only, not for medical advice or diagnosis.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why [] == ![] Is True in JavaScript: The Type Conversion Rules Explained

A developer's late-night puzzle over the expression [] == ![] being true is broken down step by step. The article explains that ! turns an empty array into false, and that the loose == operator then converts types before comparing. Each conversion, from array to string to number, is traced to show the result follows fixed rules rather than randomness. The author contrasts this with the strict === operator, which skips conversion entirely, and shares a personal lesson about wasting time chasing a bug that did not exist. The piece closes by reassuring beginners that these quirks follow a learnable rulebook.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Claude corrects a wrong landmark in its memory using 'dreaming' review sessions

Anthropic's November 6 article on agent memory uses a Pokémon Red example to show how a mistaken note can persist into later sessions and keep causing failures. In the case described, Claude wrongly recorded a Pokémon Center's position relative to Mount Moon, which led it to repeat an error after a one-way ledge fall. Anthropic describes 'dreaming' as additional sessions that review transcripts and reorganize persistent context, and in this case the corrected note let the branch reach Cerulean City. The article defines agent memory as knowledge kept in readable context between sessions and explicitly excludes changes to model weights. The source reports these results from its own evaluation, and the authors' gameplay claims were not independently replicated.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

GitHub Copilot expands to JetBrains Air and Xcode, adds agent oversight tools

GitHub has brought Copilot into JetBrains Air and Xcode's built-in coding assistant, the latter in public preview from Xcode 27.3 beta. The JetBrains integration adds multiple-session tracking for running tasks locally or in the cloud via Air Teams, under an existing Copilot subscription. Alongside these entry points, GitHub bundled supervision features, including Agent Merge staying enabled while required checks are pending and tools for reviewing pull requests and managing sessions. The announcement leaves unstated details such as resource limits, plan eligibility, general-availability timing, and whether session management carries over to Xcode. Commentary notes that tracking sessions is not the same as coordinating agents.

0 comments Read more at DEV Community