Red Security - Facebook Messenger Bug Allows for Hackers to See Who You Have Been Chatting With

Facebook once again receives notice of a bug in their messaging app, Facebook Messenger. This one allowing for malicious actors to see who you have been chatting with, by exploiting a bug in the app's use of iFrames. A security researcher was able to create a proof-of-concept; using the bug , he was able to see who users had been chatting with. This would be useful if the malicious actor was hired, to go snoop on someone's corporate rival, or if they were a federal agent that had informed you were involved in something shady.

Whatever the case may be, this is still a major hole that is discovered only days after Mark Zuckerberg stated that Facebook was going to become more security focused platform. Evidently, Facebook has some major hurdles to go through before it can restore half the faith its users lost in the platform.

Original article can be found here.

That was the news folks, have a good week, and stay safe out there.

--Mad-Architect