TikTok
In 23 briefs, most recently 6 November 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- watchTowr details Barracuda ESG pre-auth root chain, Microsoft sees ARTEX used to steal GitHub OAuth secrets, and the US sanctions Prince Group affiliates.
- Manchester Airports Group ransomware leak of 8.8M people, Thomson Reuters C-Track breach, and Coder Terraform supply-chain attack.
- Iran-linked hackers shut a UK power plant for four days, Oracle WebLogic flaw CVE-2026-21962 is actively exploited, and TikTok pays $400M COPPA settlement.
- Android car head units hit by a supply-chain attack pushing malware via an update app, plus Grandoreiro and ToxicPanda banking trojan campaigns and TikTok's …
- Trezor customer data breach via ShipMonk, actively exploited VMware vCenter Syslog RCE, and Apple mercenary spyware alerts.
- Covers the European Commission's Amazon cloud breach, the hack of FBI Director Kash Patel's email, and TeamPCP's Telnyx PyPI supply chain attack.
- The Hightower Holding breach (130,000 affected), the TeamPCP supply chain attack added to CISA KEV, and Langflow exploitation (CVE-2026-33017).
- Arkanix Stealer's short-lived AI-assisted infostealer, rising phishing threats, and TikTok's new policies after US ownership change.
- Flickr third-party email breach, SmarterMail RCE (CVE-2026-24423) exploited in ransomware, and TGR-STA-1030 espionage across 37 countries.
- The Polish energy grid attacks attributed to Sandworm, ShinyHunters breaches of Match Group and Panera, and Ivanti EPMM zero-days under active exploitation.
- Nike and SoundCloud breaches, ShinyHunters phishing of 100+ organizations, and the exploited Microsoft Office zero-day CVE-2026-21509.
- Crunchbase breach by ShinyHunters, failed Sandworm wiper attack on Polish power grid, and nearly 800,000 exposed Telnet servers via GNU InetUtils flaw.
- China accuses NSA of attacking National Time Service Center; Experian Netherlands fined €2.7M under GDPR; TikTok ClickFix lures spread infostealers.
- F5 BIG-IP source code theft, Capita's £14M UK fine, and Clop's Oracle zero-day attack on Harvard.
- The Fortra GoAnywhere zero-day (CVE-2025-10035), Volvo supply chain ransomware theft, and Flo Health's $56M settlement with Google.
- Co-op's £80M cyberattack loss, Shai-Hulud npm worm infecting 500+ packages, and Cisco zero-days under CISA emergency directive.
- Pandora and Cisco data breaches, Android and Adobe AEM zero-days, and SonicWall firewall attacks by ransomware gangs in this August 2025 brief.
- Chanel and Northwest Radiologists breaches, Akira's suspected SonicWall zero-day, and SharePoint exploits hitting 148 organisations.
- The McHire chatbot data exposure of 64M applicants, the Gravity Forms supply-chain backdoor, and Wing FTP Server and FortiWeb exploitation.
- The Ingram Micro outage, a claimed Telefónica data leak, critical Sudo root-escalation flaws, and NightEagle's Exchange zero-day campaign against China.
- Covers the 184M password exposure, $223M Cetus Protocol crypto heist, and Europol's Operation Endgame ransomware crackdown.
- LockBit's breach, PowerSchool extortion of school districts, and the actively exploited OttoKit WordPress flaw.
- Co-op confirms data theft after DragonForce claims, a Magento supply chain attack hits 500+ stores, and UK retailers face a ransomware wave.