UPDATED: We have updated this article following a response from Signal, which told us new, updated versions of the app are available to download now.

Researchers have identified a security vulnerability in popular privacy-centric messaging app Signal.

Discovered by security firm Tenable, the bug could allow hackers to gain access to users’ coarse location data and map out patterns of movement – such as time-periods during which a user is likely to be at home, work, or their favorite local haunt.