Threat Intelligence: Instagram Exposes Passwords in Plaintext

Instagram patched a bug in its "Download Your Data" feature that accidentally included some users' passwords in plaintext within URLs which were stored on Facebook's servers; Facebook deleted the stored data and Instagram notified the small number of affected users. The report recommends affected users change passwords (including reused/similar passwords), clear browsing history, and enable two-factor authentication.