CVE-2026-54638

gotd/td, a Go MTProto client, is affected by a pre-auth denial of service in proto.UnencryptedMessage.Decode where dataLen from an unauthenticated MTProto unencrypted packet could trigger unbounded memory allocation before validating the buffer. This could cause excessive memory usage and CPU/GC ...

A week in security (June 18 – June 24)

Last week, we took a deep dive into SamSam ransomware, looked at ways how to identify and delete malicious emails, recognized that there are now risks affecting job recruitment portals, analyzed a malicious Android app banking on the popularity of Fortnite, and identified causes and solutions for...