A vulnerability in Twitter’s software that exposed an undetermined number of anonymous account owners to the possibility of identity compromise last year was apparently exploited by a malicious actor, the social media company announced on Friday.
Although it said users worldwide were impacted, it did not confirm a report that said data on 5.4 million users was made available for sale online as a result. The hack is particularly concerning because many Twitter account holders, including human rights activists, conceal their identities in their profiles for security reasons, including the worry of being persecuted by oppressive authorities.
The flaw made it possible for someone to determine whether a specific phone number or email address was connected to an active Twitter account during the login process, revealing account owners, the company claimed.
For more such updates follow us on Google News ITsecuritywire News