Cybersecurity threats are increasing every day. GreyNoise, an industry-leading cybersecurity firm, has just released a warning on efforts to exploit a serious vulnerability in TeleMessage, an enterprise instant messaging app like Signal. The vulnerability, tracked as CVE-2025-48927, was originally reported in May. It has now entered enough originality to become included in the Cybersecurity and Infrastructure Security Agency’s (CISA) catalog of Known Exploited Vulnerabilities.
Lorenzo is a Senior Writer at TechCrunch. His areas of focus include hacking, cybersecurity, surveillance, and privacy, and he has covered this ongoing story. GreyNoise’s global network of sensors provide unique, valuable insights into what hackers are doing on the internet. This intel is critical to helping them identify and stop threats associated with the TeleMessage vulnerability.
Howdy Fisher, a researcher at GreyNoise, has a great deep dive on the vulnerability. He said it raised serious concerns with respect to impacts on user privacy and security.
“I was left in disbelief at the simplicity of this exploit,” – Howdy Fisher.
Fisher pointed out that a high number of these devices are still vulnerable, leaving them open to potential attacks by bad actors. His findings highlight that attackers could potentially obtain “plaintext usernames, passwords, and other sensitive data” from vulnerable devices.
U.S. Congressman Mike Waltz inadvertently exposed his use of TeleMessage to a congressional hearing in May. This powerful incident brought added pressure to bear on the situation. This is important news in suggesting the physical world consequences of that vulnerability and the potential dangers it has created to users of the platform.
In light of this increased threat, GreyNoise is encouraging users to remain vigilant. In short, they want you to do what it takes to protect your account on TeleMessage. The company’s expertise has been invaluable in helping us navigate today’s evolving cyber threat landscape tied to this specific messaging application.
