Critical TikTok vulnerabilities exposed camera, mic and payment data, researchers say
andreamichi · x · 2026-09-19
DepthFirst Labs discovered critical vulnerabilities in TikTok, covered by The Washington Post. The flaws let attackers access anything on a user's device that TikTok itself could reach — including the camera, microphone, payment information, photos, and the user's entire TikTok account. Researchers call the exploit demo "wild," with technical details in the thread.
Related event: Critical TikTok Flaw Let Attackers Access Camera, Mic and Payment Data(4 posts)→
More from Safety
- Caleb Gross publishes "Word Machines for Weird Machines" in Phrack 73 — dyn___ · 2026-09-19
- 21 zero-days in FFmpeg, an 18-year-old NGINX hole: depthfirst targets the unguarded open-source floor — ccerrato147 · 2026-09-19
- depthfirst raises $120M at $580M valuation; coordinated TikTok disclosure kept a billion phones safe — ccerrato147 · 2026-09-19
- Anthropic, OpenAI, xAI, Google sued over calls to 'pace' AI development — Tolopono · 2026-09-19
- Anthropic publishes three public metrics to track how fast AI is building AI — minchoi · 2026-09-19
- Noam Brown: GPT-6 Astra does have observable chain of thought, calls it fragile — burny_tech · 2026-09-19