Massive Facebook Breach Affects 90 Million Accounts

Facebook discovered and disclosed a major security breach that exploited the "View As" feature (triggered by a July 2017 video-upload change) enabling attackers to capture access tokens and hijack user sessions; the company forced resets for more than 50 million accounts and planned resets for another 40 million while disabling the feature and investigating with law enforcement.