Meta security flaw exposes users' emails and phone numbers through account recovery function; vulnerability verified with public figures including Kylian Mbappé's hidden TikTok account

International Cyber Digest on X: "‼️🚨 Yet another Meta fuck-up: its account recovery function allows unauthenticated access to full account PII, including emails and phone numbers, from just a username. We verified the claim and found social media and wine-app accounts belonging to several public figures. We'll https://t.co/qhKmbTr4WW" / X

Yet another Meta fuck-up: its account recovery function allows unauthenticated access to full account PII, including emails and phone numbers, from just a username. We verified the claim and found social media and wine-app accounts belonging to several public figures. We'll start with footballer Kylian Mbappé, who has a hidden TikTok account....