TikTok fixed a flaw that could have exposed user accounts

Dado Ruvic / Reuters

More

TikTok has been the subject of national security concerns for some time, and now things are set to get a little more uncomfortable for the company. According to cybersecurity company Check Point, the popular app had serious vulnerabilities that could have allowed hackers to obtain personal information and manipulate user data.

The vulnerability could have resulted in TikTok users being sent messages containing malicious links. If clicked, attackers could take control of user accounts. Check Point also discovered a separate flaw, which allowed researchers to obtain personal information via TikTok's website.

Check Point made TikTok aware of these vulnerabilities on November 20th last year, and by December 15th they had been fixed. TikTok said in a statement that it didn't appear that the flaws were exploited in any way:

sonos sonos One (Gen 2) - Voice Controlled Smart Speaker with Amazon Alexa Built-in - Black read more

"TikTok is committed to protecting user data. Like many organizations, we encourage responsible security researchers to privately disclose zero day vulnerabilities to us. Before public disclosure, Check Point agreed that all reported issues were patched in the latest version of our app. We hope that this successful resolution will encourage future collaboration with security researchers," said Luke Deshotels, PhD, TikTok Security Team. "Following a review of customer support records, we can confirm that we have not seen any patterns that would indicate an attack or breach occurred."

As TikTok's popularity has exploded -- the app has been downloaded some 1.5 billion times worldwide -- so has scrutiny over its parent company, ByteDance. A start-up success story, the Chinese company has links to the Chinese government that have led to concerns over global national security. ByteDance was at the center of a major security review back in November (ironically, just as these flaws were being discovered), while last week the US military opted to ban the app altogether.

sonos sonos One (Gen 2) - Voice Controlled Smart Speaker with Amazon Alexa Built-in - Black read more

all right reserved for yahoo news

Get the latest news delivered to your inbox

Follow us on social media networks

PREV Google suggests the best times to travel and where to stay
NEXT Facebook and eBay crack down on fake product reviews after UK warning