Buffer, an app that allows users to schedule posts for their social media, recently admitted that hackers had compromised their website.
The hackers managed to steal users' Facebook and Twitter credentials stored on the company's servers, and then published spam messages on behalf of Buffer users.
However, CTO, Sunil noted on their blog that the hackers were not able to gain access to passwords, billing details, or other sensitive information.
The company immediately revoked all Twitter access credentials and added encryption to everything. Sunil also said that it uses an additional security parameter for Facebook API calls to make them more secure.
The company managed to identify the source of the breach and patched the vulnerability.
📧
Subscribe to the SecNews Newsletter
