When Facebook gets hacked, the whole internet gets hacked

Facebook’s hackers have gained access to several third-party apps and websites via Facebook Login.
This massive security breach happened last week when the company confirmed that hackers have gained access to third-party applications and websites that allow users to authenticate via Facebook Login.

This it’s bad news for everyone, and bad news on top of bad news for Facebook, which recently has been going from a scandal to another. More than 50 million users were affected when hackers exploited a series of vulnerabilities present in the platform’s “View As” privacy feature, which lets people view their own profiles as though they were someone else – a friend, a stranger, etc. The real bad news is that the three bugs had been in place for 14 months.

One of the bugs is present in Facebook new video uploader platform which made this attack possible. First thing’s first, the uploader was not supposed to appear in the “View As” feature, but for some users it was active. When active, the uploader created an access token, which it was not supposed to do. This token was designed for the person that was trying to view his or her profile as (a friend or stranger, for example), not for the account holder.

Remember everything can be hacked. In order to stay away from any threats related to the cyber world, we recommend the install of antivirus for Windows or antivirus for Mac on every device that you own, depending on which OS your device is running. If you are a company, it is also recommended to hire every year a specialized cybersecurity company that will run annual tests on your company’s network. These tests include penetration testing and ethical hacking tests;

The access token serves as a key to keep people logged into their accounts so they don’t have to re-enter their credentials every time they use the app. A hacker could exploit the “View As” bugs to gain an access token, then pivot to other accounts and collect more.

Facebook began to investigate the problem only when it noticed an avalanche of user logins on Sept. 16. When it detected the bugs, the company alerted law enforcement, fixed the bugs, and reset the access tokens for 90 million accounts – the 50 million compromised, plus 40 million that had used the “View As” feature during the year prior. It also temporarily disabled the “View As” feature.

This is the most severe security breach in the history of Facebook, affecting not just the company but the entire ecosystem around Facebook
Facebook Login feature lets people use their Facebook usernames and passwords to register for and access different sites and services.
The feature was designed for convenience, not security, as it uses a person’s Facebook profile to verify his or her identity for accounts across the Web. If Facebook gets hacked, all the accounts that rely on Facebook for authentication are compromised as well.

This is a nightmare from a notification and third-party risk perspective. The only parties that would be interested in Facebook data are advertisers or nation-states trying to undermine or influence or change things in different countries.

For now, stay away from the Facebook Login feature. It can’t be trusted! Researchers recommend to all confirmed or potentially affected users to check their privacy settings and credential recovery options both in Facebook and in other connected apps.

We would continue to monitor this cybersecurity problem. Meanwhile, users should keep a keen eye out for any cyber attacks. Remember to use an antivirus for Windows or antivirus for Mac in every device that you own, depending on which OS your machine is running, If you are a company we recommend to hire every year a specialized cybersecurity company that will run annual tests on your company’s network, tests like this include: penetration testing and ethical hacking.

Download CyberByte antivirus for Mac directly from the Apple Mac Appstore


Regular users are the most affected by malware this day because most of them do not care about what antivirus they have installed in their systems.
Users can download antivirus developed by our company directly by clicking the download banner from the end of the page.
Our free download antivirus can help users to protect their Mac or Windows devices against malware and adware.
We offer a free antivirus one day license to all our users who want to test the full power of our antivirus solution.
Our antivirus can detect a vast spectrum of threats, from dangerous malware to nasty browsers extensions used for mining the crypto-currency.

The antivirus our company is offered is a certified product of OPSWAT.

Most of the companies don't care about cybersecurity until they suffer a breach.
A healthy company must perform a penetration test from time to time. The penetration test must execute against all the assets of the company, including the workers who are the most vulnerable to the social engineering attacks.
A penetration test can be done either by a security specialist from inside of the company or by hiring an external cyber security company who can take care of everything.
Besides penetration test, a company must have a minimum healthy cybersecurity system installed like antivirus or firewall.
CyberByte company can perform various penetration tests on all the spectrum of PCI/DSS compliance to the red team, perimeter testing, and social engineering.
We also provide services to employee profiling and cyber threat monitoring, since most of the data breaches this day come from the inside of the company.
To check our penetration test services go to the Services tab from the main menu.

Windows users can download free antivirus solution CyberByte by clicking the banner. The free antivirus will help you to know if your PC is infected. Windows free antivirus of CyberByte is an awarded software for malware detection.

Mac / MacOS / OS X users can download free Mac antivirus solution CyberByte by clicking the banner. The free antivirus will help you to know if your Mac is infected. MacOS / OS X free antivirus of CyberByte is an awarded software for malware detection. The free antivirus for Mac is available for new MacOS and older OS X versions.

Features of CyberByte™ antivirus:

  • Protects you from all kind of threats
  • CyberByte™ custom detection engine includes Mac and Windows malware protection and detection
  • Fastest scanning times in the market
  • Crypto Mining rogue extensions/malware detection
  • Ransomware detection - don’t negotiate with ransomware cyber terrorists – keep your Mac and Windows safe
  • Active live protection from background
  • Certified Threat Detector by OPSWAT
  • Easy to Install
  • Easy to Manage
  • Incredible value for money

Invisible, protecting you from behind the scenes - You will not feel it is installed on your computer, easy on the resources, like a protection software should be.

Original technology that combines behavioral heuristic analysis with powerful signatures database – the CyberByte™ Protection Engine  delivers top of the line protection in an instant.

Fastest scanning times in the market – your time is precious, but also so is your digital life – CyberByte™ delivers fast scanning saving both time and your valuable data.

Don’t negotiate with ransomware cyber terrorists – keep your Mac safe and don’t ever end up paying for what is already yours.

Protect others as well – the CyberByte™ Protection Engine  not only detects the threat but stops it from spreading to other Macs or Windows machines.

Don’t let strangers use your resources – more than 80% of the attacks are crypto mining driven. Are you sure your computer is not mining for crypto while you read this text?

Our malware protection will continuously look after your device providing the best security against viruses. Give us the chance to prove it by downloading the antivirus for your device.

CyberByte Antivirus is a certified product by OPSWAT (OPSWAT is a San Francisco-based software company that provides solutions to secure and manage IT infrastructure. Founded in 2002, OPSWAT delivers solutions that provide manageability of endpoints and networks, and that help organizations protect against
zero-day attacks by using multiple antivirus engine scanning and document sanitization.
To learn more about OPSWAT’s innovative and unique solutions, please visit http://www.opswat.com).

CyberByte Antivirus comes in two flavors:
MacOS Version - the free download Mac antivirus available on our website (https://mac.cyberbyte.org)
Windows Version - the free download Windows antivirus available on our website (https://pc.cyberbyte.org)

The procedure is simple:
Just free download antivirus from CyberByte website either for Mac or Windows.
Install it using the antivirus installer package.
Windows and Mac users will free malware scan their devices. The scan duration depends on how many files the end user has.
CyberByte antivirus will show if any files are infected after the scan is finished.

https://blog.cyberbyte.org/wp-content/uploads/2018/01/downloadBanner.png

 

We started to offer the most secured web hosting and hosting service, bringing the hosting services at next level.