Facebook exposes millions of user credentials

Researchers from Symantec report that many Facebook accounts may have accidentally been leaked due to a year-old bug. The flaw has affected hundreds of thousands accounts and exposed users' personal information and user access tokens to advertisers and others.

"We have been working with Symantec to identity issues in our authentication flow to ensure that they are more secure," Facebook's Naitik Shah wrote in a blog post on Tuesday.

According to Symantec access tokens act "like spare keys" to a Facebook user's account.

"There is no good way to estimate how many access tokens have already been leaked since the release of Facebook applications back in 2007," Symantec's Nishant Doshi wrote in a blog post published on Tuesday. "We fear a lot of these tokens might still be available in log files of third-party servers or still being actively used by advertisers."

Read more -here-