Hacker reconnaissance work continues on TeleMessage app vulnerability — report

As of April, 11 IP addresses have attempted to exploit the CVE-2025-48927 vulnerability in TeleMessage. Over 2,000 additional IPs are likely conducting reconnaissance, targeting easily accessible system endpoints.

Despite the reported patch by TeleMessage, security experts from GreyNoise recommend that users block malicious IPs and restrict access to vulnerable endpoints to prevent potential data breaches.