Signal denies rumors of zero-day bug used to take over devices

Signal the instant messaging platform took to X to deny rumors spreading online of a zero-day security vulnerability related to the “Generate Link Previews” feature, stating there is no evidence the vulnerability was real. — Signal October 16, 2023 Signal in a tweet further clarified that it had checked with people across the U.S. government since reports of the vulnerability claimed USG as a source. The unnamed USG sources said that vulnerability could be mitigated by disabling the “Generate Link Previews” setting in Signal. Signal zero-day bugs are in high demand with vulnerability brokers offering to pay high sums for flaws that can lead to remote code execution on devices.