Celebrity TikTok Accounts Compromised Using Zero-Click Attack via DMs

TikTok confirmed a zero-day 'zero-click' vulnerability in its messaging component that was exploited via malicious direct messages to remotely execute code and take over high-profile accounts; the company says it has patched the flaw, is restoring affected accounts, and reports the compromise affected a "very small" number of users. The article contextualizes this incident with prior TikTok security issues and broader concerns about account compromise and malware delivery on the platform.