A vulnerability in a high-level privacy feature of Telegram on macOS that sets up a self-destruct timer for messages can allow someone to retrieve these messages even after they ve been deleted, a researcher has found. Telegram declined to fix a scenario in which the flaw can be exploited, spurring a Trustwave researcher to decline a bug bounty and to disclose his findings instead. In doing so, he said he learned of a caveat of the company s vulnerability disclosure program that prevents researchers from disclosing a flaw.
Source: https://threatpost.com/macos-flaw-in-telegram-retrieves-deleted-messages/168412/