New Bug in Facebook Messenger Leaked Personal Data of Users

Follow Us

As Facebook CEO Mark Zuckerberg discussed about making his platform more secure, a bug in Facebook Messenger allowed websites to gain access to users' data, including who they have been chatting with, say researchers. Now fixed by Facebook, the vulnerability in the web version of Messenger allowed any website to expose who you have been messaging, revealed Ron Masas, a researcher with cybersecurity company Imperva, in a blog post late on Thursday.




The researcher reported the vulnerability to Facebook under their responsible disclosure programme and the social media platform mitigated the issue. In November 2018, Masas and his team discovered a Facebook bug that allowed websites to extract data from users' profiles via cross-site frame leakage (CSFL) which is known as a side-channel attack performed on an end user's web browser.

"Browser-based side-channel attacks are still an overlooked subject. While big players like Facebook and Google are catching up, most of the industry is still unaware," wrote Masas. Facebook Messenger has over 1.3 billion users globally.

Zuckerberg on Thursday said he is working to make Facebook "privacy-focused" like WhatsApp. The "privacy-focused platform" will be built around principles like private interactions, encryption, reducing permanence, safety and interoperability.

Recent Comments

Faraz :

Good that Vi is now focusing on B circles.. Don't know if they have any plan for C Circles or…

Vodafone Idea Announces Enhancement of Network Capacity in Haryana

shivraj roy :

Damn what ,is it actually an “EGO” thing? Order bol diya toh* BSNL:Hain? Humko order aise kaise??????

BSNL, MTNL Asked to Monetise Land Faster: Report

Rupesh :

The word order don't go well with BSNLEU. So Govt played it safe by "asking" them or else there would…

BSNL, MTNL Asked to Monetise Land Faster: Report

Shivraj Roy :

"asked' not ordered.

BSNL, MTNL Asked to Monetise Land Faster: Report

Faraz :

BSNL will not Launch 4G in December 2024 as they will be privatised by that time. Vi will be completely…

BSNL Employees Make Unusual Request After 4G Launch Delay

Load More
Subscribe
Notify of
0 Comments
Inline Feedbacks
View all comments