TikTok confirms CNN, other high-profile accounts hijacked via zero-day vulnerability

TikTok confirms CNN, other high-profile accounts hijacked via zero-day vulnerability

June 5, 2024 at 05:51PM

Cyber attackers exploited a zero-day vulnerability in TikTok to compromise high-profile accounts, including CNN’s. The app maker has confirmed the cyberattack and is working to secure accounts. The attack involved a specially crafted direct message, bypassing the need for the target to open a link. TikTok has faced previous security issues. The incident raises concerns amid ongoing disputes about TikTok’s security.

Based on the meeting notes, the key takeaways are:

– TikTok experienced a cyberattack where a zero-day exploit was used to compromise high-profile accounts, including CNN and potentially others such as Sony.
– The attacker reportedly used a specially crafted direct message in TikTok’s private chat system to exploit a vulnerability in the app’s software, gaining access to or control over the target accounts.
– TikTok’s security team is implementing measures to stop the attack, prevent future occurrences, and restore access for affected accounts.
– TikTok has faced other security vulnerabilities in the past, some of which were discovered and fixed before being abused.
– The cyberattack comes at a challenging time for TikTok and its parent company ByteDance, which is currently challenging a law in court that aims to force it to sell off TikTok or shut down its US operations.
– There are ongoing concerns about TikTok’s security, particularly in the context of its China-based parent company and the potential for user data manipulation and espionage.

If you need more detailed information or any specific actions to be taken based on these findings, please feel free to let me know.

Full Article