What steps did Facebook take to fix the vulnerability and secure accounts?

Question

Accepted Answer

Facebook's Response to the Security Breach

Facebook took immediate steps to address the security breach, including sealing the vulnerability, invalidating compromised digital keys, and prompting users to re-enter their passwords. The company also notified relevant authorities and affected users about the incident.
Vulnerability Remediation and Access Token Invalidation

Facebook engineers identified the sophisticated attack exploiting a vulnerability stemming from a change to a video uploading feature in July 2017. This flaw, linked to a "See As" function, allowed hackers to generate and steal digital keys, known as "access tokens," which granted them unauthorized access to user accounts. The company sealed this breach late on September 27, rendering the stolen tokens useless and effectively mitigating the immediate threat.
Mandatory User Re-authentication

As a direct consequence of the compromised access tokens, Facebook required all users to log in again using their passwords. This measure ensured that any active unauthorized sessions were terminated and that only legitimate users, possessing their correct credentials, could regain access to their accounts. This re-authentication process was a critical step in re-establishing account security for millions of users.
Notification to Authorities and Users

Following the discovery and sealing of the breach, Facebook promptly alerted US law enforcement authorities and regulators in Ireland. The company also informed affected users about the security incident by posting messages directly at the top of their news feeds. This communication strategy aimed to ensure transparency and provide users with direct information regarding the breach and the steps being taken.

Reading history

Hide →

This history is cleared when the page is closed.

What steps did Facebook take to fix the vulnerability and secure accounts?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends