TikTok Security Flaw Allowed Hackers to Access All Your Information

Imperva cybersecurity researchers recently found a vulnerability in the popular social media app TikTok. This issue could provide attackers access to sensitive information on targeted devices, putting users at risk of phishing scams, blackmail, and identity theft. TikTok Security Flaw Allowed Hackers to Access All Your Information

Pakistan is Behind Regional Peers in Setting Up Data Centers

The app’s handling of incoming messages was where the flaw, which has already been fix, lay. The researchers explained that by delivering a malicious message through the TikTok web application using the PostMessage API, an attacker might take advantage of this flaw and circumvent the security safeguards.

The app’s event handler would process the message after receiving it and mark it as secure, giving the attacker access to crucial data.

TikTok Security Flaw Allowed Hackers to Access All Your Information

Malicious actors could access a lot of priceless data by utilizing this vulnerability. This includes details about the user’s device (like device type, operating system, and browser), information about the videos the victim watched (such as specific videos and the length of each view), information about the user’s accounts (such as usernames, videos, and other related data), and search queries entered into the app.

The vulnerability has already been patch, as previously mentioned. This is because, out of concern for public safety, the researchers quickly notified TikTok about the security weakness.
To say that TikTok is a contentious app is an understatement, regardless of flaws. The US government has attempted to ban it for more than a year, arguing that it has alarmingly extensive data collection practices and that due to China’s strong control, it may be possible for them to demand data access at any time.

Nearly All UAE Companies Believe AI Can Save Them During Economic Uncertainty