Facebook discovers bug that may have affected up to 6.8 million users

FILE PHOTO: The entrance sign to Facebook headquarters is seen in Menlo Park, California, on Wednesday, October 10, 2018. REUTERS/Elijah Nouvelage/File Photo

(Reuters) – Facebook Inc said on Friday it has discovered a bug that may have affected up to 6.8 million people who used Facebook login to grant permission to third-party apps to access photos.

The company said in a blog that the problem has been fixed but that it may have affected up to 1,500 apps built by 876 developers.

Facebook said some third-party apps may have gained access to a broader set of photos than usual for 12 days between Sept. 13 to Sept. 25.

The bug is the latest in a string of privacy problems the tech giant disclosed this year, including the massive Cambridge Analytica data scandal in April and a data breach of nearly 30 million accounts in October.

Facebook shares were down 1.3 percent at $143.07 in early trading on Friday. The Nasdaq composite index <.IXIC> fell 0.9 percent.

(Reporting by Angela Moon in New York Arjun Panchadar in Bengaluru; Editing by Arun Koyyur and Bill Trott)

Researchers uncover flaw that makes Wi-Fi vulnerable to hacks

A magnifying glass is held in front of a computer screen in this picture illustration taken in Berlin May 21, 2013

(Reuters) – Belgian researchers have discovered a flaw in a widely used system for securing Wi-Fi communications that could allow hackers to read information that was previously understood to be encrypted, or infect websites with malware, they said on Monday.

Researchers Mathy Vanhoef and Frank Piessens of Belgian university KU Leuven disclosed the bug in the WPA2 protocol, which secures modern Wi-Fi systems used by vendors for wireless communications between mobile phones, laptops and other connected devices with Internet-connected routers or hot spots.

“If your device supports Wi-Fi, it is most likely affected,” they said on a website, www.krackattacks.com, that they set up to provide technical information about the flaw and methods for attacking vulnerable devices.

It was not immediately clear how difficult it would be for hackers to exploit the bug, or if the vulnerability has previously been used to launch any attacks.

The Wi-Fi Alliance, an industry group that represents hundreds of Wi-Fi technology companies, said the issue “could be resolved through a straightforward software update.”

The group said in a statement it had advised members to quickly release patches and recommended that consumers quickly install those security updates.

 

 

(Reporting by Jim Finkle in Toronto; editing by Susan Thomas)