SlowMist Cosine warns that the new version of Telegram poses potential security risks, advising users to delay updating.

TechFlow reported that on November 12, Cos, founder of SlowMist, posted on X stating that the new version of Telegram supports embedding "apps" in messages, but this feature lacks sandbox isolation protection, and the QuickJS JavaScript engine used could serve as an attack vector for malicious code execution.

Cos pointed out that as AI technology improves vulnerability discovery and exploitation capabilities, such new features may introduce unnecessary security risks, and therefore advised users to hold off on updating Telegram.