Zuk Avraham of Zimperium, a mobile security company, says Telegram doesn’t handle encrypted conversations securely. He says he found several weak points that allowed him to recover plain text messages. A Telegram spokesman says no app can defend against the attack. The company says it contacted Telegram three times over the next three weeks but received no response from the vendor. The attack used an application vulnerability that allows an attacker to gain higher level privilege through the Android kernel exploit, CVE-2014-3153.”]

