Remember the TV series Mr. Robot? It was a hacking TV show from 2015, and it looks like the second season is set to return to American television on Wednesday, July 13, 2016.
However, the new promotional website for Mr. Robot series two was recently patched as it contained a security flaw that allowed hackers to target the show's millions of fans.
A white hat hacker using the alias Zemnmez discovered a Cross-Site Scripting (XSS) vulnerability on the Mr. Robot website on the day the series' creators launched the promo for the second part.
It should be mentioned that the second season of the television show has already received praise from critics and viewers for its accurate portrayal of cybersecurity and hacking, something that other cyber series have failed to present.
The new series also features an unexpected guest: US President Barack Obama, who appears to talk about a cyber threat facing the nation.
The security flaw Zemnmez discovered on the show's website could have allowed hackers to run malicious scripts, but the researcher reported the XSS to Sam Esmail, the show's creator, according to Forbes.
Network owner NBC Universal confirmed that the website was patched late Tuesday night, just hours after Zemnez reported the vulnerability.
According to Zemnmez, the flaw could allow an attacker to inject malicious Javascript and steal user information and Facebook data from visitors to the Mr. Robot website.
The flaw could also be exploited using some simple social engineering technique, such as phishing to obtain more data from unsuspecting users.
