Testing by Microsoft revealed a major vulnerability in the Android version of TikTok. The exploit could give attackers full access to a user's account.
After internal testing, Microsoft discovered an exploit in the Android version of TikTok that could have given attackers access to huge amounts of personal data with a single click.
The vulnerability has already been fixed, and it does not appear that anyone has been affected by the exploit. The attackers could have used this vulnerability to access user profiles, allowing outside forces to publicize private videos, send messages, and even upload videos. The exploit took advantage of the way TikTok handles WebView code by bypassing deep link verification. When a TikTok user selects an affected deep link, the URL could access JavaScript bridges that granted attackers functionality on the account. JavaScript bridges continue to pose a security risk on a variety of apps, and Microsoft, in a blog post, emphasized how “… collaboration within the security community is necessary to improve defenses for the overall digital ecosystem.
When Microsoft notified TikTok’s security team of the issue, they “responded by releasing a fix to address the reported vulnerability, now identified as CVE-2022-28799, and users can refer to the CVE entry for more information. We commend the efficient and professional resolution from TikTok’s security team.”
News of this exploit comes on the heels of frequent reports of TikTok’s excessive data collection. Hopefully, this quick patch reflects how seriously the company takes user data and privacy. Microsoft and TikTok both recommend you double-check to make sure you are on the latest version of the app to avoid any issues.
Malaysia Latest News, Malaysia Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Microsoft found a severe one-click exploit in TikTok’s Android app | EngadgetA serious vulnerability found by Microsoft in the TikTok Android app could have allowed hackers to hijack millions of accounts..
Read more »
FBI Warns About Decentralized Finance Exploits and the Losses Associated With Them – Bitcoin NewsThe FBI has issued a public service announcement warning investors and defi platforms about the exploits that hackers can use to attack them.
Read more »
FBI says investors should take precautions before putting money into decentralized finance platforms | EngadgetCybercriminals are increasingly exploiting security flaws in smart contracts to steal cryptocurrency, according to the Federal Bureau of Investigation..
Read more »
TikTok Is Crazy About This Sunburnt Blush Trend - Love for GlamIf you used social media at all in the last couple of months, you couldn’t help but notice that the trendiest makeup looks are all about blush right now. But not just a little bit of blush! The goal is […]
Read more »
Opinion | What we need to take away from the disturbing TikTok pigtails trendEmma Zang: To some, women wearing pigtails to try to get more tips from men may seem like a silly — even if unsettling — trend, but it perpetuates harm against young women. - NBCNewsTHINK
Read more »