TikTok’s In-App Browser Can Monitor Your Activity on External Websites

By Deeba Ahmed
Other iPhone apps using in-app browsers were also tested in the research but TikTok was the only app to monitor keystrokes.
This is a post from HackRead.com Read the original post: TikTok’s In-App Browser Can Monitor Your Activity … Continue reading TikTok’s In-App Browser Can Monitor Your Activity on External Websites

This Week in Security: Asterisk, TikTok, Gitlab, And Finally a Spam Solution

There’s an ongoing campaign that’s compromising FreePBX systems around the world. It seems to be aimed specifically at Elastix systems, using CVE-2021-45461, a really nasty Remote Code Execution (RCE) from …read more Continue reading This Week in Security: Asterisk, TikTok, Gitlab, And Finally a Spam Solution

Smashing Security podcast #283: Disney’s social dumpster fire, Anom phones, and TikTok tragedies

A self-proclaimed “super hacker” causes problems in the Magic Kingdom, criminals regret trusting Anom phones, and lawsuits are filed against TikTok.

All this and much more is discussed in the latest edition of the award-winning “Smashing Security” p… Continue reading Smashing Security podcast #283: Disney’s social dumpster fire, Anom phones, and TikTok tragedies

Fighting Fake EDRs With ‘Credit Ratings’ for Police

When KrebsOnSecurity last month explored how cybercriminals were using hacked email accounts at police departments worldwide to obtain warrantless Emergency Data Requests (EDRs) from social media and technology providers, many security experts called it a fundamentally unfixable problem. But don’t tell that to Matt Donahue, a former FBI agent who recently quit the agency to launch a startup that aims to help tech companies do a better job screening out phony law enforcement data requests — in part by assigning trustworthiness or “credit ratings” to law enforcement authorities worldwide. Continue reading Fighting Fake EDRs With ‘Credit Ratings’ for Police

TikTok scammers tried hacking 125 targets that followed famous accounts, researchers find

More than 125 people and businesses associated with large TikTok accounts based around the world were targeted as part of a recent phishing campaign, according to research published Tuesday. Emails warned that targeted accounts were either in danger of being deleted for copyright violations or eligible for a verification badge. If victims replied to a message, attackers directed them to click a link to a WhatsApp chat, where a purported TikTok representative would confirm their accounts. While it remains unclear if any accounts were breached, the campaign is the latest to demonstrate how TikTok’s popularity makes its mot visible users targets for scammers. In addition to individual account holders, the latest campaign targeted talent agencies, brand-consultant firms, social media production studios, influencer management firms, according to Rachelle Chouinard, a threat intelligence analyst at email security firm Abnormal Security, which shared its findings with CyberScoop. Crane Hassold, the director of threat […]

The post TikTok scammers tried hacking 125 targets that followed famous accounts, researchers find appeared first on CyberScoop.

Continue reading TikTok scammers tried hacking 125 targets that followed famous accounts, researchers find

Smashing Security podcast #249: Devious licks, Netflix, and sensitive hackers

Ransomware attackers have got hurt feelings, what does Netflix know about you, and why are schoolkids stealing lavatory seats?

All this and much more is discussed in the latest edition of the award-winning “Smashing Security” podcast by computer sec… Continue reading Smashing Security podcast #249: Devious licks, Netflix, and sensitive hackers