Newsletters
News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Click for more information, or
Home Enterprise I.T. Cloud Computing Applications Hardware More Topics...
Network Security
Next Generation Data Center Is Here!
Average Rating:
Rate this article:  
Facebook Security Glitch Exposed Millions of Users
Facebook Security Glitch Exposed Millions of Users' Data

By Jennifer LeClaire
June 24, 2013 11:18AM

    Bookmark and Share
Mike Gross, director of professional services and risk management at 41st Parameter, told us Facebook is facing the same potential risks LivingSocial experienced when hackers breached its database earlier in May that put its 50 million users at risk. In this case, Facebook fixed the user-data bug within 24 hours of its discovery.
 


Facebook has disclosed a data breach has revealed six million user phone numbers and e-mail addresses over the past year. The company pointed to a technical glitch in its 1.1 billion user database as the root of the issue. Facebook fixed the bug within 24 hours of its discovery, but it may not have been soon enough to stop a ripple effect.

"We currently have no evidence that this bug has been exploited maliciously and we have not received complaints from users or seen anomalous behavior on the tool or site to suggest wrongdoing," Facebook said in a blog post.

"Although the practical impact of this bug is likely to be minimal since any email address or phone number that was shared was shared with people who already had some of that contact information anyway, or who had some connection to one another, it's still something we're upset and embarrassed by, and we'll work doubly hard to make sure nothing like this happens again."

Is Facebook Security Lagging?

We turned to Sean Bodmer, chief researcher at CounterTack, to get his thoughts on the latest social media security mishap. He told us the discovery of shadow profile leaks on Facebook was one story. Finding secret shadow files amongst the data -- that seem to be analyzed and correlated data points of every user ranging from their real-life details and private information input by members -- is another.

It's shocking, he said, but not surprising.

"If you look back over the past few years, Facebook publications and reports included a handful of articles about Facebook selling information to customers. Who is to say this isn't one of the data sources that has been sold to the target-marketing firms placing specific ads in view of members based on likes, interests and habits?" he asked.

"The monetization of this information isn't a shock and anyone, in my humble opinion, who thought this free service was completely free doesn't fully understand the basic back-door practices of big data firms finding clever ways of increasing their bottom-line by finding novel ways to massage their big data sets to turn a profit."

Not the First Time

Mike Gross, director of professional services and risk management at 41st Parameter, told us Facebook is facing the same potential risks LivingSocial experienced when hackers breached its database earlier in May that put its 50 million users at risk. It was a seemingly innocuous breach of low-risk data -- no card or payment information -- but it makes phishers' jobs much easier because they now potentially have access to an e-mail address, as well as the individual's closest connections.

"Rather than getting a phishing e-mail with a link from Facebook or another site, a fraudster could make the phishing e-mail look as though it is originating from your close friend with a link to looks legitimate but sends the user to a site that downloads malware on their device," Gross said. "This is actually a much more dangerous data breach than others where no contextual data is provided since having data on close connections allows the fraudster to easily target victims with e-mails that are more likely to get opened and links to be clicked."

His conclusion: Any breach is a big deal, but when relationships are disclosed it raises the stakes. Once malware is on millions of devices, the fraudster essentially has access to every potential online account, from banks to and beyond.
 

Tell Us What You Think
Comment:

Name:



Salesforce.com is the market and technology leader in Software-as-a-Service. Its award-winning CRM solution helps 82,400 customers worldwide manage and share business information over the Internet. Experience CRM success. Click here for a FREE 30-day trial.


 Network Security
1.   Microsoft Ruling Raises Privacy Concern
2.   Twitter Buys Password Manager Mitro
3.   Gov't User Data Requests Skyrocket
4.   Retailers Hacked by New Malware
5.   IBM Beefs Up Identity Intelligence


advertisement
Twitter Buys Password Manager Mitro
Startup to release code as open source.
Average Rating:
Gov't User Data Requests Skyrocket
Twitter: From U.S. and around the globe.
Average Rating:
IBM Beefs Up Identity Intelligence
To offer biz better security products.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Ruling Against Microsoft Raises E-Mail Privacy Concern
Microsoft has been ordered to hand over e-mails to law enforcers in the United States as part of a criminal investigation, even though the e-mail is stored at a data center in Dublin,Ireland.
 
Twitter Buys Password Manager Startup Mitro
Following on the heels of another acquisition earlier this week, Twitter is adding to its fold a password-manager security startup called Mitro, which in turn is releasing its code as open source.
 
Government Requests for Customer Data Skyrocket
Requests for customer data from the government jumped 50 percent in the first half of 2014, according to Twitter, which received more than 2,000 requests for user info from gov't agencies.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud Computing | Applications | Hardware | Mobile Tech | Big Data | Communications
World Wide Web | Network Security | Data Storage | CRM Systems | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech
Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.