Security News
The Transportation Safety Authority has become the latest federal agency to ban the use of TikTok among its employees based on national-security fears over how ByteDance, the Beijing-based company that owns the app, uses the data collected by it. Some TSA employees have used the app to create and post videos that explain the agency's boarding processes and rules, a move that raised security concerns and inspired Sen. Chuck Schumer to send TSA administrator David Pekoske a letter to stop its use, according to a report from CBS News.
The security company Check Point has revealed several vulnerabilities in TikTok, the popular Chinese video app that has raised concerns lately from the U.S. military and lawmakers. Check Point says it reported the issues to TikTok on Nov. 20 and Tiktok fixed them by Dec. 15.
TikTok, a mobile video app popular with teens, was vulnerable to SMS spoofing attacks that could have led to the extraction of private information, according to infosec researchers. If the user clicked that malicious link, the attacker could access the user's TikTok account and, so Check Point said, manipulate its content by deleting videos, uploading new videos and making private or "Hidden" videos public.
TikTok is a China-made global phenomenon mobile phone app. Now it seems that the Chinese government is not the only potential destination for their content that should worry TikTok users - Check Point found multiple vulnerabilities in the app that could easily be exploited.
Researchers say the most serious vulnerability in the platform could allow attackers to remotely take control over parts of victims' TikTok account, such as uploading or deleting videos and changing settings on videos to make "Hidden" videos public. "Many of us use the TikTok app to share enjoyable moments and snip bits of fun memories in the form of a short video clips," researchers with Check Point Research said on Wednesday.
TikTok, the 3rd most downloaded app in 2019, is under intense scrutiny over users' privacy, censoring politically controversial content and on national-security grounds-but it's not over yet, as the security of billions of TikTok users would be now under question. The famous Chinese viral video-sharing app contained potentially dangerous vulnerabilities that could have allowed remote attackers to hijack any user account just by knowing the mobile number of targeted victims.
Last month, the Pentagon told US military to steer clear of what it sees as a national-security landmine: the singing/dancing/jokey TikTok platform. TikTok has tried to soothe US fears about censorship and national security risks, including a reported plan to spin TikTok off from its parent company.
TikTok is one of the fastest growing social apps, with more than 1.5 billion downloads. Now the US Army has banned soldiers from downloading the app on government-issued phones.
TikTok is one of the fastest growing social apps, with more than 1.5 billion downloads. Now the US Army has banned soldiers from downloading the app on government-issued phones.
Despite its popularity with users and celebrities - the app touts over 1.3 billion installs worldwide - several incidents over the past year have caused privacy experts to question how data from TikTok is being collected, used and whether it is being censored by China's government. The ban follows guidance issued Dec. 16 by the U.S. Department of Defense, which identifies TikTok as having potential security risks associated with its use, a U.S. Army spokesperson told Threatpost.