CBS News reports:
Facebook said Friday that a security glitch may have let third-party apps access the private photos of as many as 6.8 million users, the latest example of the social-media company failing to protect people’s online content.
The incident, which took place during a 12-day period in September, included images never fully uploaded to the platform and those not publicly posted, Facebook said. The company said it detected the bug and fixed it on Sept. 25.
The security lapses come as Facebook works to repair the damage to its reputation from missteps that include the Cambridge Analytica data privacy scandal and failing to stop Russian use of the site to meddle in the 2016 U.S. presidential election.