In June, nine US senators wrote a public letter to TikTok’s chief executive officer asking him to explain alleged security breaches. However inconclusive or small the issues may be, there will be intense focus on TikTok and its parent firm at a time when the US may step up its measures against businesses with links to China.
It may have allowed attackers to access and modify “TikTok profiles and sensitive information, such as by publicizing private videos, sending messages and uploading videos on behalf of users,” wrote Dimitrios Valsamaras from the Microsoft 365 Defender Research Team.Ī TikTok spokesperson said the company had responded quickly to Microsoft’s findings and fixed the security flaw, which was found “in some older versions of the Android app.”
The vulnerability identified by Microsoft is a narrower issue that could have affected mobile phones running Android. Some data is junk, but it could be non-production or test data,” he posted on Twitter. “This is so far pretty inconclusive some data matches production info, albeit publicly accessible info. But some details included in the leak were “publicly accessible data that could have been constructed without breach.” Troy Hunt, an Australian web security consultant, went through some of the data samples listed in the leaked files and found matches between user profiles and videos posted under those IDs. “Our security team investigated this statement and determined that the code in question is completely unrelated to TikTok’s backend source code,” a spokesperson said. TikTok said the claims of a breach discovered over the weekend were incorrect. It was identified as a privacy threat by the Trump administration in 2020 and nearly banned because of concern about potential links between its Beijing-based parent company and the Chinese government. That makes it an enticing target for hackers who may seek to hijack popular accounts or resell sensitive information. said it had found a “high-severity vulnerability” in TikTok’s Android application, “which would have allowed attackers to compromise users’ accounts with a single click.”īyteDance Ltd.’s TikTok surpassed a billion monthly users a year ago and now ranks as many young people’s favorite app.
On Monday, several cybersecurity analysts tweeted about the discovery of what was purportedly a breach of an insecure server that allowed access to TikTok’s storage, which they believe contained personal user data.
0 kommentar(er)
