TikTok confirms CNN, other high-profile accounts hijacked via zero-day vulnerability
Miscreants exploited a zero-day in TikTok to compromised the accounts of CNN and other big names. The app maker has confirmed there was a cyberattack, and that it has scrambled to secure accounts and prevent any further exploitation.
We can only imagine the chaos that could be caused by someone commandeering an account with countless followers and using it to spread scams, misinformation, and malware, and even hijacking fans' profiles and their friends in a worm-like fashion.
"Our security team is aware of a potential exploit targeting a number of high-profile accounts," TikTok spokesperson Alex Haurek told The Register today. "We have taken measures to stop this attack and prevent it from happening in the future. We're working directly with affected account owners to restore access, if needed."
While indicating CNN was indeed exploited, Haurek told us earlier accounts of Paris Hilton's account being compromised were "inaccurate." He declined to comment on reports of a Sony account takeover.
