Facebook View-As bug

September 28, 2018

Facebook Security Bug Affects 90M Users

This post was originally published on this siteFacebook said today some 90 million of its users may get forcibly logged out of their accounts after the company fixed a rather glaring security vulnerability in its Web site that may have let attackers hijack user profiles. In short blog post published this afternoon, Facebook said hackers have been exploiting a vulnerability in Facebook’s site code that impacted a feature called “View As,” which lets users see how their profile appears to other people. “This allowed them to steal Facebook access tokens which they could then use to take over people’s accounts,” […]