Security News
A researcher says he has earned $30,000 through Facebook's bug bounty program for reporting an Instagram vulnerability that exposed private posts. In a blog post published on Tuesday, Mayur Fartade, a researcher based in India, said the flaw could have been exploited to access private or archived posts, stories, reels and IGTV videos without following the user whose content was targeted.
British domestic spy agency MI5 wants to dispel the idea it is staffed by martini-quaffing layabouts who spend implausible amounts of time lounging around top-end bars and hotels. The first post by MI5 on Instagram was a photo of the entrance to its London HQ. We are sure MI5 is happy to have contributed towards Facebook's object-recognition AI project, given how the agency greedily hoovers up data about Britons' online habits in the hope of finding enemy spies, terrorists, criminals, and so on.
Instagram app has been crashing for some Android users this week, and it isn't clear why. This issue started happening around April 13th, 2021, when the Instagram app on Android devices received its latest update.
Israeli spy agencies accused Iran on Monday of using fake social media accounts to lure citizens of the Jewish state abroad "To harm or abduct them". The Israeli claim came hours after Iran accused its arch-enemy of orchestrating an attack on a key nuclear site and vowed "Revenge".
As our digital lives continue to grow, and online scammers learn new tricks, it is important to know how to identify an Instagram scam, and what to do if you are targeted. Here are the eight most common scams to watch out for, according to Instagram.
Facebook services are currently experiencing issues around the world, with users unable to access Facebook, Messenger, WhatsApp, and Instagram. When attempting to access Facebook services, users worldwide have stated that the application will display a continuous "Connecting" message.
Dubbed CopperStealer, the malware acts similarly to previously discovered, China-backed malware family SilentFade, according to a report from Proofpoint researchers Brandon Murphy, Dennis Schwarz, Jack Mott and the Proofpoint Threat Research Team published online this week. CopperStealer is in the same class not only as SilentFade-the creation of which Facebook attributed to Hong Kong-based ILikeAD Media International Company Ltd-but also other malware such as StressPaint, FacebookRobot and Scranos.
Facebook told KrebsOnSecurity it seized hundreds of accounts - mainly on Instagram - that have been stolen from legitimate users through a variety of intimidation and harassment tactics, including hacking, coercion, extortion, sextortion, SIM swapping, and swatting. THE MIDDLEMEN. Facebook said it targeted a number of accounts tied to key sellers on OGUsers, as well as those who advertise the ability to broker stolen account sales.
Smart-security practices like not sharing passwords with anyone and multi-factor authentication are two simple ways to prevent this type of personal insider threat, Dan Conrad, field strategist with One Identity, told Threatpost. "People assume that they should change their passwords after a big life event if you're following strong password hygiene practices, an individual's password shouldn't be affected by [this], as no one else should have access to the password in the first place," Conrad said in an emailed response to the report.
The issue was discovered in October by Saugat Pokharel, a researcher based in Nepal, and it was patched within hours by Facebook. Pokharel identified the vulnerability while analyzing the Facebook Business Suite interface that the social media giant introduced in September.