Facebook, the giant social media network revealed a security vulnerability that could have exposed 50 million accounts. Though it haven’t been long they updated their two-factor authentication after suspending over 200 apps that was suspected to have misused users data.
Now the company announced on Friday that it identified the security issue earlier in the week. It involved exploiting a vulnerability in the view as feature, which lets people to see how their profiles look to others. The fault allowed hackers to steal Facebook’s access tokens and take over people’s accounts. As a security measure, Facebook forced over 90 million users to log out of their accounts.
Facebook said there was no evidence the hackers had access to private messages or posts, but also made it clear that this report might change as the investigation continues.
Following the initial announcement, Facebook revealed in a follow-up conference call that other services using the company’s login feature could also be at risk of having these accounts compromised as they confirmed the hack to be worse than suspected. The company said that other apps that uses Facebook’s login service, which in includes Instagram, Spotify, Tinder, Airbnb and whole lot of others could have also been compromised using the vulnerability.
The company also said that many apps and websites that allows people to sign-up using their Facebook credentials to be in alart there haven’t been any confirmation of any account being breached, it’s now another concern for the company and its users.
The access token enables someone to use the account as if they were the account holder themselves. This does mean they could access other third-party apps using Facebook login, as said by Guy Rosen (Facebook’s vice president of product).
Facebook said it has patched the vulnerability and reset the access tokens of all the accounts known to have been affected by this vulnerability, but it’s not enough to repair the PR damage which has occurred.
According to the information that reached to us, the CEO of the company, Mark Zuckerberg and COO Sheryl Sandberg were among those affected by the hack and since the vulnerability issue occurred, over $12 billion has been wiped from the company’s value.
This isn’t the first time Facebook is being hacked, but it seems like its the biggest vulnerability hack Facebook had ever faced as it affected over 50 million users.