All articles tagged with #account hijacking
TikTok is addressing a cyberattack targeting high-profile users via direct messages, with measures in place to stop the attack and restore affected accounts. The attack, described as a "potential exploit," has compromised at least two accounts, including CNN's. This incident heightens concerns over cybersecurity, especially with the upcoming presidential election, and adds to ongoing privacy issues surrounding TikTok in the US.
GitLab has issued security updates for its Community and Enterprise Editions to address critical vulnerabilities, including a zero-click account hijacking flaw (CVE-2023-7028) that allows attackers to take over accounts without user interaction. The flaw affects versions 16.1 to 16.7 and could lead to the compromise of proprietary code and sensitive data. Other vulnerabilities include the abuse of Slack/Mattermost integrations and bypassing CODEOWNERS approval. Users are strongly advised to update their installations as soon as possible.