DepthFirst Labs used a heavily modified AI bug-hunting system to analyze software used by TikTok and identify vulnerabilities that could be chained into a remote attack. In a demonstration, researchers were able to access a smartphone’s camera and photo library while the device was browsing TikTok, without relying on the user intentionally granting access during the attack. The vulnerabilities were responsibly disclosed to TikTok and have since been patched. TikTok says there is no evidence the flaws were exploited against users.