Telegram fixes Windows app zero-day used to launch Python scripts

Telegram Desktop for Windows had a coding typo that omitted the .pyzw Python zipapp extension from its list of risky file types, allowing .pyzw files (when associated with Python on the system) to launch automatically when clicked—attackers could disguise such files as videos; a proof-of-concept was demonstrated, Telegram implemented a server-side mitigation and fixed the source mapping, and the impact was limited to a small fraction of users who had the relevant Python setup.