
According to Forbes, hackers spread malware through TikTok accounts by exploiting a vulnerability in the app's direct messaging (DM) function. The malicious code was transmitted through DMs, and users only had to open the message containing the malware for their accounts to be compromised. This type of attack is known as a "zero-day" attack, as the hackers discovered and exploited the vulnerability before the software developers had a chance to address it.

After their TikTok account was compromised by the hack, CNN was forced to take down its account for several days. A spokesperson for the news channel stated that they were "working with TikTok on the backend on additional cybersecurity measures" to ensure the account's safety in the run-up to the presidential election.

A "zero-day" attack is a type of cyber attack where hackers exploit a security vulnerability that the software developers are not yet aware of. This means that the developers have "zero days" to fix the issue before it is exploited by attackers. In a zero-day attack, hackers discover the vulnerability before the developers and use it to infiltrate systems, often without being detected.
In the recent TikTok security breach, high-profile accounts, including those of Paris Hilton and CNN, were targeted with malicious code through the platform's direct messaging function. This is an example of a zero-day attack as the hackers found and exploited a vulnerability in TikTok's system before the developers could address it.