516 matches found
Security flaws found in tiny phones promoted to children
TL;DR Three mini smartphones promoted to children were analysed Those devices are heavily promoted on TikTok All had outdated operating systems All could be rooted without wiping the phone, allowing data to be compromised with physical access One had malware artefacts pre-installed One had an...
How the US TikTok Ban Would Actually Work
The fate of TikTok now rests in the hands of the US Supreme Court. If a law banning the social video app this month is upheld, it won’t disappear from your phone—but it will get messy fast...
TikTok: Unauthorized Access to Private Video Description via Translation API for Private Accounts
A vulnerability was discovered in the TikTok translation API endpoint that could have allowed unauthorized access to video descriptions contained in private accounts...
Malicious code in tiktok-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50583d9b69442a311dc38ffa7bb2a8d8f476b282ed859fa472dafd4672205809 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12045 Malicious code in tiktok-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50583d9b69442a311dc38ffa7bb2a8d8f476b282ed859fa472dafd4672205809 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
A week in security (December 9 – December 15)
Last week on Malwarebytes Labs: Encrypted messaging service intercepted, 2.3 million messages read by law enforcement TikTok ban in US: Company seeks emergency injunction to prevent it Data brokers should stop trading health and location data, new bill proposes Update now! Apple releases new...
TikTok ban in US: Company seeks emergency injunction to prevent it
TikTok has requested an emergency injunction to stop or postpone the planned ban on the platform in the US. Back in March, the House of Representatives passed a bill that would effectively ban TikTok from the US unless Chinese owner ByteDance agreed to give up its share of the immensely popular...
Malicious code in vue3-tiktok (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11489 Malicious code in vue3-tiktok (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in vue2-tiktok (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11488 Malicious code in vue2-tiktok (npm)
--- -= Per source details. Do not edit below this line.=-...
Romania Cancels Presidential Election Results After Alleged Russian Meddling on TikTok
In a historic decision, Romania's constitutional court has annulled the result of the first round of voting in the presidential election amid allegations of Russian interference. As a result, the second round vote, which was scheduled for December 8, 2024, will no longer take place. Călin...
TikTok: Unauthorized Access to TikTok Account [Private Videos] via API Endpoint
The vulnerability on a TikTok endpoint that allowed unauthorized viewing of videos from private accounts was discovered and reported by @datph4m. The issue was subsequently remediated...
TikTok: IDOR on ads.tiktok.com Allows Unauthorized Product Addition
An Insecure Direct Object Reference IDOR vulnerability was discovered on the TikTok Ads API that allowed the addition of arbitrary products to a user's catalog without proper authorization...
TikTok Pixel Privacy Nightmare: A New Case Study
Advertising on TikTok is the obvious choice for any company trying to reach a young market, and especially so if it happens to be a travel company, with 44% of American Gen Zs saying they use the platform to plan their vacations. But one online travel marketplace targeting young holidaymakers wit...
A week in security (November 4 – November 10)
Last week on Malwarebytes Labs: Hello again, FakeBat: popular loader returns after months-long hiatus TikTok ordered to close Canada offices following "national security review" Air fryers are the latest surveillance threat you didn’t consider Malwarebytes acquires AzireVPN to fuel additional VPN...
TikTok ordered to close Canada offices following “national security review”
The Government of Canada ordered the TikTok Technology Canada Inc. to close its offices in the country following a national security review. This decision was made in accordance with the Investment Canada Act, which allows for the review of foreign investments that may be injurious to Canada’s...
Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns
The Canadian government on Wednesday ordered ByteDance-owned TikTok to dissolve its operations in the country, citing national security risks, but stopped short of instituting a ban on the popular video-sharing platform. "The decision was based on the information and evidence collected over the...
The Disinformation Warning Coming From the Edge of Europe
Moldova is facing a tide of disinformation unprecedented in complexity and aggression, the head of a new center meant to combat it tells WIRED. And platforms like Facebook, TikTok, Telegram and YouTube could do more...