Facebook (yes again)
Exploit: Unsecured JavaScript file/ supply chain
Risk to Small Business: High: A supply chain vendor that leaks data will tarnish the reputation of business.
Risk to Exploited Individuals: Moderate: The data the quiz app is leaking could be used in spear phishing attacks.
Facebook: A social media site that has over 2 billion monthly active users.
Date Occurred/Discovered: End of 2016-present
Date Disclosed: June 28, 2018
Data Compromised:
- Facebook ID
- First name
- Last name
- Language
- Gender
- Date of birth
- Profile picture
- Cover photo
- Currency
- Devices used
- When your information was last updated
- Posts
- Statuses
- Photos
- Friends on Facebook
How it was compromised: Any third party can view.
https://techcrunch.com/2018/
