Researchers found a zero-click Facebook account takeover

A critical vulnerability in Facebook could have allowed threat actors to hijack any Facebook account, researcher warns. Meta addressed a critical Facebook vulnerability that could have allowed attackers to take control of any account. The Nepalese researcher Samip Aryal described the flaw as a rate-limiting issue in a specific endpoint of Facebook’s password reset flow. […]

account account takeover attackers breaking news click control critical critical vulnerability endpoint facebook flaw found hacking hijack information security news issue it information security meta password pierluigi paganini rate researcher researchers security social network social networks takeover threat threat actors vulnerability zero-click