RESEARCHER REVEALS EVIDENCE OF PRIVATE INSTAGRAM PROFILES LEAKING PHOTOS

Summary from the TLDR InfoSec newsletter

A security researcher discovered a vulnerability in Instagram that exposed links to private photos and captions in the HTML source code of some private profiles. The researcher found that, in their testing, 28% of the accounts they created or had access to exhibited this issue. Meta responded to the researcher, stating that the issue was caused by a CDN caching problem and has been fixed, but the researcher contends that it's a backend authorization issue.