GoKawiil
Tech News
WhatsApp is testing a new message scheduling feature spotted in Android beta version 2.26.8.11, according to WaBetaInfo. Users can press and hold the send button to pick a date and time for delivery, with options ranging from 10 minutes to two weeks ahead, supporting text, media and group chats with end-to-end encryption intact.
A developer has released Spool, a pre-1.0 open-source tool for creating and managing persistent Claude Code sessions, called 'loops', that can schedule wakes, resume sessions, and coordinate with each other. Users can interact with these loops through a web control room, Telegram, or Slack instead of monitoring individual terminal sessions. Spool itself is built by a fleet of Claude Code loops running on the tool, with human review and merging of all changes via pull requests.
A security researcher found that Telegram Desktop's local inter-process communication, used to hand clicked links to an already-running instance, fails to escape its command separator character. This let a maliciously crafted tg:// link be split into multiple injected commands, one of which could trigger an internal scheme that reads a named file and sends it to a chat without asking the user for confirmation. The flaw, tracked as CVE-2026-107181 and rated 8.1/High, was confirmed on Windows up to version 6.9.3 and fixed in Telegram Desktop 7.2.9.
Anas Hattab, a 30-year-old from Tulkarm, has built a popular Telegram channel with nearly 350,000 followers to share real-time updates on Israeli military checkpoints across the West Bank. His efforts began in 2019 when he started navigating the region as a delivery driver, encountering delays and obstacles that traditional maps fail to show. His community-driven data now informs local radio, businesses, and a new app, filling a critical gap in navigation for Palestinians.
Microsoft announced it coordinated an industry-wide disruption of EvilTokens, a subscription phishing service sold via Telegram since February that used an AI chatbot to help criminals analyze compromised inboxes and craft convincing fraud emails. The platform compromised 12,000 accounts across 10,000 organizations worldwide, mostly in the US, and Microsoft seized 50 websites and 150 domains as UK police arrested two suspects.
Cybersecurity agencies from the U.S., U.K. and Netherlands, alongside the FBI, issued a joint advisory exposing an Iranian state-linked campaign using Windows malware called CHOSEN BRICK to spy on dissidents, journalists and activists. Attackers pose as trusted contacts or tech support over WhatsApp and Telegram, luring victims into launching disguised fake apps that secretly install the spyware and evade Windows Defender.
WhatsApp is developing a feature that lets users generate an API key inside the app to link outside AI agents to individual chats, then message those agents directly for responses or task execution. According to WABetaInfo, the feature limits agents to reading only the messages shared in that one conversation, with no access to other chats, contacts, or media, and currently supports only one-on-one chats rather than groups or communities.
A new practitioner's guide from Flare Research examines how infostealer malware like Vidar, RedLine and Lumma harvest corporate logins, browser cookies and saved credentials from infected machines. The study found that about 46% of stealer logs containing corporate credentials came from likely unmanaged or personal devices, and that exposure of credentials and sessions tied to major SaaS and cloud platforms is climbing roughly 29% each year.