The Zero Click attack - Discord, Signal & Others
This guy is interesting reading
Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform
Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform - research.md

This guy did the right thing and reported it via bug bounties and various other avenues open to security researchers
Defenses - well other than the few he mentioned, an IDS/IPS is a start, egress firewall, a good EDR on endpoints, and awareness of what is going on.
Enough light reading. Back at it.
#Enoughsaid.