Telegram Desktop has a one-click file theft bug

Attackers only need you to click a special link to access files on your computer with no extra confirmation - including "tdata" session files that let them log into your account. It affects versions below 7.2.9 with a severity of 8.6/10, so update and enable a local passcode

$GRAM

$SPK

$AIGENSYN