523 matches found
Data scraping firm leaks 235m Instagram, TikTok, YouTube user records
By Sudais Asif According to researchers, the trove of data was left for public access without any security authentication. This is a post from HackRead.com Read the original post: Data scraping firm leaks 235m Instagram, TikTok, YouTube user records...
The NSA and FBI Expose Fancy Bear's Sneaky Hacking Tool
Plus: TikTok tracking, Russian SIMs, and more of this week's top security news...
TikTok collected MAC addresses for Android phones against Google’s ToS
By Zara Khan TikTok also collected unique identifiers and sent them to Byte Dance, its parent company. This is a post from HackRead.com Read the original post: TikTok collected MAC addresses for Android phones against Googles ToS...
TikTok Surreptitiously Collected Android User Data Using Google-Prohibited Tactic
TikTok has been collecting unique identifiers from millions of Android devices without their users’ knowledge using a tactic previously prohibited by Google because it violated people’s privacy, new research has found. Click to register! The app concealed the practice, which can track users onlin...
A week in security (August 3 – 9)
Last week on Malwarebytes Labs, on our Lock and Code podcast, we talked about identity and access management technology. We also wrote about business email compromises to score big, discussed how the Data Accountability and Transparency Act of 2020 looks beyond consent, and we analyzed how the...
TikTok: Multiple Cross-Site Scripting vulnerability via the language parameter
A cross site scripting vulnerability was reported across multiple TikTok domains leveraging the language parameter. This issue has been promptly resolved. We thank @luizviana for reporting this to our team and confirming the resolution...
TikTok: Cross Site Scripting using Email parameter in Ads endpoint 1
A cross site scripting vulnerability was found in the ads endpoint using the email parameter. This issue has been resolved. We thank @luizviana for reporting this to our team and confirming the resolution...
Trump's TikTok Drama Is a Distraction
As the White House zeroes in on a single app, some experts say more pressing issues are going by the wayside...
Lock and Code S1Ep12: Pinpointing identity and access management’s future with Chuck Brooks
This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Chuck Brooks, cybersecurity evangelist and adjunct professor for Georgetown University’s Applied Intelligence Program and graduate Cybersecurity Programs...
TikTok: Cross Site Scripting using Email parameter in Ads endpoint 2
A cross site scripting vulnerability was found in an ads endpoint using the email parameter. This issue has been resolved. We thank @luizviana for reporting this to our team and confirming the resolution...
TikTok is being discouraged and the app may be banned
In recent news retail giant Amazon sent a memo to employees telling them to delete the popular social media app TikTok from their phones. In the memo it stated that the app would pose a security risk without going into details. Later the memo was withdrawn without an explanation except that it wa...
TikTok: Open Redirect Vulnerability on TikTok Ads Portal
An Open Redirect vulnerability was found that could expose the user session cookie potentially allowing an attacker to obtain access to an account on the TikTok ads portal...
Does TikTok Really Pose a Risk to US National Security?
Concerns about the Chinese government shouldn't be dismissed, experts say. But banning TikTok would be a drastic measure...
Exclusive: Any Chingari App (Indian TikTok Clone) Account Can Be Hacked Easily
Following vulnerability disclosure in the Mitron app, another viral TikTok clone in India has now been found vulnerable to a critical but easy-to-exploit authentication bypass vulnerability, allowing anyone to hijack any user account and tamper with their information, content, and even upload...
New smishing scam spreads fake TikTok App loaded with malware
By Deeba Ahmed The smishing scam is targeting TikTok app users and fans in... This is a post from HackRead.com Read the original post: New smishing scam spreads fake TikTok App loaded with malware...
Amazon Says It Didn’t Mean to Ban Employees From Using TikTok
US lawmakers have repeatedly raised security concerns over the app's Chinese ownership. Are US businesses next?...
TikTok: Rate limiting on report video
Rate limiting was not in place for the "report video" option on TikTok web. We thank @alertjd for reporting this to our team...
TikTok To Stop Clipboard Snooping After Apple Privacy Feature Exposes Behavior
A new privacy feature in Apple iOS 14 sheds light on TikTok’s practice of reading iPhone users’ cut-and-paste data, even though the company said in March it would stop. Apple added a new banner alert to iOS 14 that lets users know if a mobile app is pasting from the clipboard and thus able to rea...
Exclusive – Any Mitron (Viral TikTok Clone) Profile Can Be Hacked in Seconds
Mitron means "friends" in Hindi, you have been fooled again! Mitron is not really a 'Made in India' product, and the viral app contains a highly critical, unpatched vulnerability that could allow anyone to hack into any user account without requiring interaction from the targeted users or their...