Malicious SVG files on adult websites hide JavaScript that hijacks Facebook sessions, secretly liking posts, and potentially exposing victims to identity theft and credential harvesting.

Fastlane founder Felix Krause has revealed that Facebook and Instagram's in-app browsers inject JavaScript into third-party websites. Krause originally said the in-app browsers were injecting the ...

JavaScript libraries from various advertising and analytics services are siphoning user data from web pages where the "Login with Facebook" feature is being used.