TikTok lives to scroll another day.

This CyberWire Daily roundup highlights multiple cybersecurity developments: a U.S. TikTok deal and policy items; active exploitation of a critical FortiCloud authentication bypass and a Zimbra Collaboration Suite vulnerability added to the exploited list; Okta SSO accounts targeted by sophisticated vishing kits; Under Armour investigating a possible data breach; an INC ransomware incident where poor OPSEC enabled recovery of stolen data for a dozen U.S. organizations; convictions of two Venezuelans for ATM jackpotting malware; and curl ending its bug bounty program amid an influx of low-quality AI-generated reports.