Twitter for Android security vulnerability discovered and fixed

    Twitter for Android security vulnerability discovered and fixed

    Twitter for Android security vulnerability discovered and fixed


    Posted: 05 Aug 2020
    We recently discovered and fixed a vulnerability in Twitter for Android related to an underlying Android OS security issue affecting OS versions 8 and 9. Our understanding is 96% of people using Twitter for Android already have an Android security patch installed that protects them from this vulnerability. For the other 4%, this vulnerability could allow an attacker, through a malicious app installed on your device, to access private Twitter data on your device (like Direct Messages) by working around Android system permissions that protect against this.

    We donít have evidence that this vulnerability was exploited by attackers. But, because we canít be completely sure, here's what weíre doing to keep the small group of potentially vulnerable people safe:

    1. Updated Twitter for Android to make sure external apps canít access Twitter in-app data by adding extra safety precautions beyond standard OS protections
    2. Requiring anyone that may be impacted to update Twitter for Android
    3. Sending in-app notices to everyone who could have been vulnerable to let them know if they need to do anything
    4. Identifying changes to our processes to better guard against issues like this

    To keep your Twitter data safe, please update to the latest version of Twitter for Android on all Android devices that you use to access Twitter. This issue did not impact Twitter for iOS or Twitter.com.

    Your privacy and trust is important to us and we will continue working to keep your data secure on Twitter. If youíd like additional information regarding your account security, you can reach out to our Office of Data Protection through this form.


    Source: Twitter For Android Security Vulnerability
    Brink's Avatar Posted By: Brink
    05 Aug 2020


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 23:38.
Find Us




Windows 10 Forums