Microsoft Discover Severe ‘One-Click’ Exploit for TikTok Android App | allinfosecnews.com

Sept. 1, 2022, 7:13 a.m. | noreply@blogger.com (Ravie Lakshmanan)

The Hacker News thehackernews.com

Microsoft on Wednesday disclosed details of a now-patched "high severity vulnerability" in the TikTok app for Android that could let attackers take over accounts when victims clicked on a malicious link.
"Attackers could have leveraged the vulnerability to hijack an account without users' awareness if a targeted user simply clicked a specially crafted link," Dimitrios Valsamaras of the Microsoft

android android app app discover exploit microsoft tiktok

More from thehackernews.com / The Hacker News

Network Threats: A Step-by-Step Attack Demonstration an hour ago | thehackernews.com

access advanced attack attackers +21

DOJ Arrests Founders of Crypto Mixer Samourai for $2 Billion in Illegal Transactions 2 hours ago | thehackernews.com

arrest arrests called criminal +17

Google Postpones Third-Party Cookie Deprecation Amid U.K. Regulatory Scrutiny 5 hours ago | thehackernews.com

address authority browser chrome +24

State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage 6 hours ago | thehackernews.com

actor arcanedoor campaign cisco +28

U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks 22 hours ago | thehackernews.com

april assets attacks command +19

Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike 22 hours ago | thehackernews.com

attack called campaign cobalt +22

Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users 1 day, 2 hours ago | thehackernews.com

app apps baidu chinese +22

CISO Perspectives on Complying with Cybersecurity Regulations 1 day, 3 hours ago | thehackernews.com

accountability ciso cisos compliance +22

eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners 1 day, 5 hours ago | thehackernews.com

actor antivirus antivirus software avast +22

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Cyber Systems Administration

@ Peraton | Washington, DC, United States

View on infosec-jobs.com

Android Security Engineer, Public Sector

@ Google | Reston, VA, USA

View on infosec-jobs.com

Lead Electronic Security Engineer, CPP - Federal Facilities - Hybrid

@ Black & Veatch | Denver, CO, US

View on infosec-jobs.com

Profissional Sênior de Compliance & Validação em TI - Montes Claros (MG)

@ Novo Nordisk | Montes Claros, Minas Gerais, BR

View on infosec-jobs.com

Principal Engineer, Product Security Engineering

@ Google | Sunnyvale, CA, USA

View on infosec-jobs.com