Telegram App Store Secret-Chat Messages in Plain-Text Database

Zimperium researchers demonstrate that Telegram Secret Chat messages can be recovered in cleartext on Android devices by chaining a kernel exploit (CVE-2014-3153) to dump process memory and access the app's cache4.db, exposing encrypted conversations at rest and enabling recovery of deleted messages; the post includes PoC evidence, a disclosure timeline, and recommendations to protect data-at-rest on mobile devices.