A hacker has exploited a vulnerability in TeleMessage, which provides modded versions of encrypted messaging apps such as Signal, Telegram, and WhatsApp, to extract archived messages and other data relating to U.S. government officials and companies who used the tool, 404 Media reported.
TeleMessage came into the spotlight last week after it was reported that former U.S. national security adviser Mike Waltz was using TeleMessage’s modified version of Signal. Israel-based TeleMessage, owned by Smarsh, offers its clients a way to archive messages, including voice notes, from encrypted apps. The messages of cabinet members and Waltz were not compromised, 404 Media said, but the hacked data contained contents of messages; contact information of government officials; back-end login credentials for TeleMessage; and more.
Read more…
Source: TechCrunch
Sign up for our Newsletter
The latest news and insights delivered right to your inbox.
Related:
- ‘SMS of Death’ exploit can remotely crash unpatched Android phones
November 2, 2026
A zero-click Android flaw let attackers crash phones with a specially crafted SMS message. Repeated messages could trigger reboot loops, disrupt calls, and even affect emergency connectivity. Google patched supported Android versions, but many end-of-life devices remain permanently vulnerable. Read more… Source: Tech Radar Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights delivered right ...
- Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated)
October 29, 2026
Unit 42 is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619, referred to as PHP2Shell. Both are remote code execution (RCE) vulnerabilities rated as 9.2 (CVSS 4.0). Researchers encourage reviewing the PHP Group’s security advisory and patching guidance. PHP is widely used across web servers and content management systems globally. Researchers recommend assessing your ...
- Hackers are breaking into company networks via hacked CCTV camera software
October 29, 2026
Attackers abused camera management software to gain initial access and establish persistence on networks. Campaign used DLL sideloading and reverse shells to evade detection and maintain control. Researchers urge treating camera systems as security-sensitive assets and monitoring them for abnormal activity. Read more… Source: Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights delivered ...
- Chrome and Firefox updates fix serious security flaws
October 28, 2026
On October 27, Google issued a new Stable channel update for Chrome. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux. The update includes 52 security fixes, including four rated Critical. On the same day, Mozilla issued Security Advisory 2026-118, which fixes 167 vulnerabilities. Firefox 159 also ...
- A security flaw in these widely used barcode scanners could open up warehouses and stores to cyberattack
October 28, 2026
Researchers find Bluetooth flaws in warehouse barcode scanners that could provide a foothold into enterprise networks. Attackers could spoof scanner input, inject keystrokes, and potentially pivot to ransomware or data theft. Kaspersky urges stronger device authentication, network segmentation, and stricter security controls for warehouse infrastructure. Read more… Source: TechRadar News Sign up for the Cyber Security Review Newsletter The latest cyber ...
- A 16-year-old bug could be putting millions of routers at risk — despite Broadcom saying it patched the issue years ago
October 26, 2026
A Broadcom WPS flaw dating back to at least 2010 lets attackers within Wi-Fi range run code on routers without the password. Broadcom told the researcher it replaced the code from 2018, but declined to assign a CVE, calling the software obsolete. Changing your Wi-Fi password won’t help, and disabling WPS may not either; firmware updates or ...