Twitter’s Android app gets patch to fix serious vulnerability
In this article (5)
Twitter announced yesterday that it patched a vulnerability in the Twitter for Android app that could have allowed a hacker to control a Twitter user’s account and send tweets and DMs from it. The vulnerability also could have given bad actor access to non-public information. Twitter says that it has no evidence that the vulnerability was ever exploited, but just to play it safe it is “taking extra caution.”
Users of the social-media app who might have affected are being notified via the Twitter app or by email. Either way, the user will receive instructions to follow that the company says will keep them safe. The instructions received by each affected subscriber depend on the versions of Android and the Twitter app for Android being used. Twitter says that if you’re not sure what to do, just install the latest version of the app from the Google Play Store.
Twitter says that it is sorry and will continue working to keep your data secure. If you have some questions, you can ask the company how it protects your personal data by filling out a Data Protection Inquiry Form. The iOS version of the Twitter app did not have a vulnerability which means that iPhone and iPad users will not be receiving any instructions from the firm.
Questions & Answers
Q.What kind of access could a hacker gain if this vulnerability was exploited?
What kind of access could a hacker gain if this vulnerability was exploited?
A.
A hacker could have controlled a user's Twitter account to send tweets and direct messages. They also might have gained access to non-public information associated with that account.
Q.Has there been any evidence that this security flaw was actually used by malicious actors?
Has there been any evidence that this security flaw was actually used by malicious actors?
A.
Twitter has stated that it has no evidence the vulnerability was ever exploited. However, the company is still taking extra precautions to ensure user safety.
Q.How will Twitter notify users who might have been affected by this vulnerability?
How will Twitter notify users who might have been affected by this vulnerability?
A.
Affected users will be notified either through the Twitter app or by email. These notifications will include instructions on what steps to take to secure their accounts.
Q.Were users of Twitter's iOS app also at risk from this vulnerability?
Were users of Twitter's iOS app also at risk from this vulnerability?
A.
No, the vulnerability was specific to the Android version of the Twitter app. IPhone and iPad users will not receive any instructions regarding this issue.