"This allowed them to steal tokens [coins] from Facebook access that they could then use to take people's accounts," the document highlights.
These currencies are the equivalent of the digital keys that keep the users connected to the application, so they are not forced to enter their password every time they want to enter, outlined the Web portal RT.
Facebook has ensured that it "solved the vulnerability" and took several immediate steps to "protect people's safety." It forced about 90 million users to "re-login" or any of its associated applications and sent a notification to each of them explaining what happened.
It also reset the access tokens of the nearly 50 million of affected users and temporarily disabled the view as function, while conducting a "thorough security check".
"We still have to determine if these [affected] accounts were used incorrectly or if their information was accessed. Nor do we know who is behind these attacks or where they are located, "the social network emphasizes.
Facebook regretted the inconvenience and reiterated that the privacy and security of users is "incredibly important." It has also made it clear that despite the security flaw, "no one needs to change their passwords." However, it advises those who have had access problems to visit the Help section and close all the open sessions of the application in the Settings menu.
