Telegram Stickers, Zero-Click Risks, and the Race to Patch rlottie
Security researcher Saifeldeen Aziz has revealed a worrying set of findings about Telegram’s animated sticker handling: zero-click bugs in the sticker engine that he says can be chained to achieve code execution on iOS. His work — scheduled for presentation at OffensiveCon in Tokyo — follows a long-running exchange between researchers and Telegram about whether server-side checks are an adequate mitigation for client-side flaws. How the flaw was characterized ZDI…