Get the latest tech news

Facebook awards researcher $100,000 for finding bug that granted internal access

A security researcher found a bug in a Facebook ad platform, which gave him access to the company’s internal infrastructure.

After he reported the vulnerability to Facebook’s owner Meta, which Sadeghipour said took just one hour to fix it, the social networking giant awarded him $100,000 in a bug bounty payout. The researcher said he didn’t test out everything he could have done once inside the Facebook server, but “what makes this dangerous is this was probably a part of an internal infrastructure.” “With an [ remote code execution vulnerability], you can bypass some of these limitations and also directly pull stuff from the server itself and the other machines that it has access to.”

Get the Android app