Been hearing whispers all weekend, some from people who I'd *definitely* listen to, of a remote execution 0day in the Signal desktop and possibly also mobile app. Mitigation is supposedly to disable link previews (under settings->chats).
I have no more details. What I've heard doesn't completely make sense, but disabling link previews should be at worst harmless and seems prudent until this is clarified.