WhatsApp and Telegram web security flaw left accounts exposed