TikTok fixes zero-day bug used to hijack high-profile accounts
ID: c5f07e16-b6ed-59fb-a826-ff1372c843d8
STIX ID: report--c5f07e16-b6ed-59fb-a826-ff1372c843d8
Feed Name: Bleeping Computer
Threat Score
Attackers exploited a zero-day flaw in TikTok's direct messages to hijack a small number of high-profile accounts (e.g., Sony, CNN) by sending malicious messages that only need to be opened — no downloads or links required. TikTok is aware, has implemented mitigations, and is working with affected account owners while withholding technical details until the flaw is fixed.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.