According to 9to5google, Chinese video-sharing app TikTok has patched a vulnerability that allowed it to bypass two-factor authentication. This issue was first discovered in the app in 2020.
This isn’t the first time TikTok has addressed a security hole that puts users’ safety and personal information at risk. In September, a hacker claimed he had access to the personal data of more than 1 billion of his TikTok users.
However, the latest glitch in the app allegedly made it easier for hackers to circumvent two-factor authentication by brute-forcing the login page. Simply put, he can try to login to the page repeatedly and after multiple attempts the app will allow him to login without asking for 2FA. 2FA bypass was applicable to both his Android and web versions of TikTok.
According to the company, the issue required access to the user’s email/password or phone number/code linked to the account. TikTok said, “A random timeout issue in the two-factor authentication endpoint has discovered a vulnerability that could allow authentication to be bypassed if multiple erroneous attempts are entered in quick succession.” and explains this issue.
Hackers can reportedly skip TikTok’s two-factor authentication
In October 2022, TikTok became aware of this issue and patched it in mid-December. This issue is now fixed and no one can bypass his 2FA and break into your account.
Of course, red flags can occur here. Even if you bypass TikTok’s 2FA system, the attacker still needs the correct username and password to log into your account. For added security, we recommend changing your TikTok account password. You can also activate the 2FA system if it is not already active.
The ByteDance-owned app was recently accused of tracking down a US-based journalist to find an employee who leaked company news to the media. Numerous allegations against TikTok prompted the US government to ban the app on all government devices. Meanwhile, the ban came after several US states and the House of Representatives imposed similar restrictions on the app. , it may be time to start looking for a TikTok alternative.