Lock and Code S1Ep12: Pinpointing identity and access management’s future with Chuck Brooks

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Chuck Brooks, cybersecurity evangelist and adjunct professor for Georgetown University’s Applied Intelligence Program and graduate Cybersecurity Programs...

TikTok: Cross Site Scripting using Email parameter in Ads endpoint 2

A cross site scripting vulnerability was found in an ads endpoint using the email parameter. This issue has been resolved. We thank @luizviana for reporting this to our team and confirming the resolution...

TikTok is being discouraged and the app may be banned

In recent news retail giant Amazon sent a memo to employees telling them to delete the popular social media app TikTok from their phones. In the memo it stated that the app would pose a security risk without going into details. Later the memo was withdrawn without an explanation except that it wa...

TikTok: Open Redirect Vulnerability on TikTok Ads Portal

An Open Redirect vulnerability was found that could expose the user session cookie potentially allowing an attacker to obtain access to an account on the TikTok ads portal...

Does TikTok Really Pose a Risk to US National Security?

Concerns about the Chinese government shouldn't be dismissed, experts say. But banning TikTok would be a drastic measure...

Exclusive: Any Chingari App (Indian TikTok Clone) Account Can Be Hacked Easily

Following vulnerability disclosure in the Mitron app, another viral TikTok clone in India has now been found vulnerable to a critical but easy-to-exploit authentication bypass vulnerability, allowing anyone to hijack any user account and tamper with their information, content, and even upload...

New smishing scam spreads fake TikTok App loaded with malware

By Deeba Ahmed The smishing scam is targeting TikTok app users and fans in... This is a post from HackRead.com Read the original post: New smishing scam spreads fake TikTok App loaded with malware...

Amazon Says It Didn’t Mean to Ban Employees From Using TikTok

US lawmakers have repeatedly raised security concerns over the app's Chinese ownership. Are US businesses next?...

TikTok: Rate limiting on report video

Rate limiting was not in place for the "report video" option on TikTok web. We thank @alertjd for reporting this to our team...

TikTok To Stop Clipboard Snooping After Apple Privacy Feature Exposes Behavior

A new privacy feature in Apple iOS 14 sheds light on TikTok’s practice of reading iPhone users’ cut-and-paste data, even though the company said in March it would stop. Apple added a new banner alert to iOS 14 that lets users know if a mobile app is pasting from the clipboard and thus able to rea...

Exclusive – Any Mitron (Viral TikTok Clone) Profile Can Be Hacked in Seconds

Mitron means "friends" in Hindi, you have been fooled again! Mitron is not really a 'Made in India' product, and the viral app contains a highly critical, unpatched vulnerability that could allow anyone to hack into any user account without requiring interaction from the targeted users or their...

How a Facebook Bug Took Down Spotify, TikTok, and Other Major iOS Apps

Thank a tiny change to a software development kit for widespread crashes Wednesday, including the Spotify and TikTok apps...

Watch: Flaw exploited to post fake COVID-19 clips from TikTok accounts

By Deeba Ahmed In their demonstration, researchers showed how they published fake COVID-19 videos from WHO and TikTok's official accounts. This is a post from HackRead.com Read the original post: Watch: Flaw exploited to post fake COVID-19 clips from TikTok accounts...

TikTok Flaw Allows Threat Actors to Plant Forged Videos in User Feeds

A security weakness in the popular TikTok video-sharing service allows a local attacker to hijack any video content streamed to a user’s TikTok feed and swap it out with hacker-generated content. Researchers created a proof-of-concept PoC hack using a technique called a man-in-the-middle MiTM...

Sen. Schumer Pushes for TSA Employee Ban on TikTok App at Work

The Transportation Safety Authority TSA has become the latest federal agency to ban the use of TikTok among its employees based on national-security fears over how ByteDance, the Beijing-based company that owns the app, uses the data collected by it. Some TSA employees have used the app to create...

A week in security (January 6 – 12)

Last week on Malwarebytes Labs, we told readers how to check the safety of websites and their related files, explored the shady behavior taking place within the billion-dollar search industry, broke down the top six ways that hackers target retail businesses, and put a spotlight on the ransomware...

TikTok vulnerability allowed hackers to send SMS with malware

By Sudais How to hack the TikTok account with a malicious link in a text message? Well, it's possible as researchers noticed. This is a post from HackRead.com Read the original post: TikTok vulnerability allowed hackers to send SMS with malware...

TikTok Riddled With Security Flaws

Researchers say they have discovered several major vulnerabilities in the short form video app TikTok. The reported vulnerabilities come as scrutiny around the Chinese-owned platform increases. Researchers say the most serious vulnerability in the platform could allow attackers to remotely take...

Researchers Demonstrate How to Hack Any TikTok Account by Sending SMS

TikTok, the 3rd most downloaded app in 2019, is under intense scrutiny over users' privacy, censoring politically controversial content and on national-security grounds—but it's not over yet, as the security of billions of TikTok users would be now under question. The famous Chinese viral...

Researchers Demonstrate How to Hack Any TikTok Account by Sending SMS

TikTok , the 3rd most downloaded app in 2019, is under intense scrutiny over users' privacy, censoring politically controversial content and on national-security grounds—but it's not over yet, as the security of billions of TikTok users would be now under question. The famous Chinese viral...