Malicious code has allegedly compromised TikTok accounts belonging to CNN and Paris Hilton

There is a new exploit circulating on TikTok that has already compromised the official accounts of Paris Hilton, CNN, and others, as reported by Forbes. This exploit is spreading through direct messages and does not require any form of response, such as a download or click, just the act of opening the chat. The extent of the affected accounts is currently unknown.

Interestingly, the hacked accounts are not engaging in any suspicious activities. A source within TikTok informed Forbes that the impacted accounts “do not appear to be posting content.” TikTok has acknowledged the issue and is working with affected account owners to regain access, as stated by The Verge here.

Semafor recently disclosed that CNN’s TikTok account was hacked, leading the network to disable the account. It is uncertain if this is the same hack affecting other prominent accounts. CNN mentioned that they are collaborating with TikTok to enhance security measures, as indicated in the Semafor report.

CNN staff revealed that there were lapses in digital security practices within the organization, with multiple employees having access to the official TikTok account. Nevertheless, it is unclear whether the breach originated from within CNN. Further updates on the situation will be provided as more information becomes available.

This is not the first major TikTok hack, as back in 2024, the company acknowledged a breach of around 700,000 accounts in Turkey due to insecure SMS channels linked to its two-factor authentication. Microsoft researchers discovered vulnerabilities that allowed hackers to take over accounts with a single click. Additionally, there were reports of a security breach impacting [specific entity] later that year.