Facebook Patches "Memory Disclosure Using JPEG Images" Flaws in HHVM Servers

Facebook has patched two high-severity vulnerabilities in its server application that could have allowed remote attackers to unauthorisedly obtain sensitive information or cause a denial of service just by uploading a maliciously constructed JPEG image file. The vulnerabilities reside in HHVM...

An Unprecedented Cyberattack Hit the US Power Grid

Exposed Facebook phone numbers, an XKCD breach, and more of the week's top security news...

News Wrap: Deepfake CEO Voice Scam, Facebook Phone Data Exposed

In this week’s news wrap ended Sept. 6, the Threatpost team breaks down the biggest news of the week, including: Cybercrooks successfully fooling a company into a large wire transfer using an AI-powered deepfake of a chief executive’s voice and Facebook, Microsoft and a number of universities...

Facebook Messenger Denial Of Service

Facebook Messenger Remote Denial of Service Vulnerability Report by Social Engineering Neo. Affected Platforms: - Android ≤9 IOS ≤11 Messenger Messenger Lite Tested On: - Android 6 & 7 IOS 11 Messenger build 228.1.0.10.116 Messenger Lite build 65.0.1.18.236 Class: - Denial of Service. Summary: -...

Unsecured database leaks phone numbers of 419 million Facebook users

By Sudais The unsecured database contained 133 million records from the US, 18 million in the UK and 50 million in Vietnam - All from Facebook users. This is a post from HackRead.com Read the original post: Unsecured database leaks phone numbers of 419 million Facebook users...

Leaky Server Exposes 419M Phone Numbers of Facebook Users

Phone numbers linked to the Facebook accounts of hundreds of millions of users has been found online on an insecure server in the latest privacy gaffe for the social media giant. The server, which lacked password protection, contained more than 419 million records over several databases of Facebo...

Facebook allows users to opt out of facial recognition in photos

By Sudais Facebook is introducing privacy features with its new facial recognition program and stop using the one to tag users in photos. This is a post from HackRead.com Read the original post: Facebook allows users to opt out of facial recognition in photos...

Facebook Drops Default Facial Recognition Tag Suggestions

Facebook is giving users more control over a facial recognition feature used by the company to help identify, or Tag, people on its platform. Starting Tuesday, the company said it would allow its users to opt-out of the Tag Suggestions feature, while at the same time the company is attempting to...

This Week in Security News: Ransomware Campaigns Persist with WannaCry as Most Common

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about how a total of 118 new ransomware families emerged in the first half of 2018, but only 47 new ones debuted in the first six mont...

WordPress facebook-for-woocommerce plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers. facebook-for-woocommerce is a plug-in that enables marketing through Facebook. A cross-site request forgery vulnerability exis...

WordPress facebook-for-woocommerce plugin cross-site request forgery vulnerability (CNVD-2019-30104)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers. facebook-for-woocommerce is a plug-in that enables marketing through Facebook. A cross-site request forgery vulnerability exis...

Why are Google and Facebook banned in China?

By Owais Sultan Google and Facebook, both are useful and easy to use websites, so why are they banned in China? Short answer: Censorship. This is a post from HackRead.com Read the original post: Why are Google and Facebook banned in China?...

CVE-2019-15840

The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF...

CVE-2019-15840

The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF...

CVE-2019-15841

The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajaxwooinfobannerpostclick, ajaxwooinfobannerpostxout, or ajaxfbtogglevisibility...

Cross site request forgery (csrf)

The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF...

Cross site request forgery (csrf)

The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajaxwooinfobannerpostclick, ajaxwooinfobannerpostxout, or ajaxfbtogglevisibility...

CVE-2019-15841

CVE-2019-15841 affects the WordPress Facebook for WooCommerce plugin prior to 1.9.15. The vulnerability is a CSRF flaw in the AJAX actions ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, and ajax_fb_toggle_visibility, enabling unintended requests to the server. Affected software: W...

CVE-2019-15840

The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF...

CVE-2019-15840

CVE-2019-15840 affects the WordPress plugin facebook-for-woocommerce prior to version 1.9.14. The issue is a cross-site request forgery (CSRF) vulnerability in the plugin’s handling of sensitive actions, exposed via the plugin’s WordPress integration. The root cause is insufficient CSRF protectio...