Facebook Security

Excited to join @CISAgov Joint Cyber Defense Collaborative #JCDC

Meta is hosting its first ever European BountyConEDU in Spain for university students. Join us for a 3-day conference filled with workshops, a live hacking event w/ bounties & more! Hope to see you there! Sign up: bountyconedu2022.splashthat.com Deadline to register: December 31, 2021

Congratulations to the security researchers on winning the 2021 Internet Defense Prize👏 We are proud to support this work!

The latest of our static analysis tools - Mariana Trench. It’s open source and designed to detect and prevent security bugs in #Android and #Java applications, more here: engineering.fb.com/2021/09/29/sec…

Great news! Now you can use #FIDO security keys for the highest levels of protection of your @Facebook account on desktop AND mobile. Facebook has extended its support of FIDO security keys to mobile on iOS and Android! about.fb.com/news/2021/03/e…

Today, we are extending support for mobile security keys for Facebook iOS/ Android users. Security keys help ensure that passwords aren’t the last line of defense between an attacker and your account. Learn more about security keys & how to use them here: about.fb.com/news/2021/03/e…

6/ Thank you to everyone who has contributed to the Bug Bounty program over the years. This is just the beginning for Hacker Plus and we hope to continue to foster a strong and collaborative community. More here: facebook.com/BugBounty/post…

5/ We’re also graduating a tool, FBDL, out of beta that helps researchers quickly and easily set up bug reproduction steps using a standard bug description language: facebook.com/BugBounty/post…

4/ Researchers are also eligible to receive bonuses on top of a standard bounty award. Ex: researchers in our Bronze league will receive a 5% bonus on top of each bounty award and Diamond league members will earn a 20% bonus.

3/ Hacker Plus has five leagues, with Bronze as the entry-level tier and Diamond as the highest tier. Researchers have been placed into a league based on the cumulative quantity, score and signal-to-noise ratio of their bug submissions over the last 24 months.

2/ Hacker Plus offers researchers additional bonuses, access to stress-test more soon-to-be released products and features, exclusive invites to our bug bounty events and more.

1/ As our Bug Bounty Program approaches its 10th anniversary, we’re launching a loyalty program - Hacker Plus- to thank the talented security researchers who help us keep Facebook safe and secure: facebook.com/whitehat/hacke…

Today we’re sharing our coordinated vulnerability disclosure policy that codifies how we alert 3rd parties to potential security issues when we find them: facebook.com/security/advis…

We've shared details about Pysa, an open source Python static analyzer that we wrote to detect and prevent security issues in Python code. Pysa can review millions of lines of Python code and provide feedback in about an hour. Learn more: engineering.fb.com/security/pysa/

Tune into @riskybusiness to get an inside look into Facebook’s security model and how we managed the shift to WFH this year with FB SecEng leaders Pedro Canahuati and Chris Bream: risky.biz/soapbox42/

At Facebook, we’re here to help you connect with others -- and do it securely no matter where you are. Here are a few tips to stay secure while you #StayAtHome.

Facebook expands support for Let’s Encrypt – protecting people on Facebook and beyond facebook.com/note.php?note_…

Facebook Awards $200,000 to 2018 Internet Defense Prize Winners research.fb.com/facebook-award… research.fb.com/facebook-award…

@Azanmi @facebook You can report your vulnerability through our bug bounty here: facebook.com/whitehat/repor…

Trying this again, adding @fbsecurity “Hey @facebook stumbled upon a major account access loophole enabling anyone access to someone else's account and information without requiring login. Please DM #dataprotection #pii”

Have a question? Check out facebook.com/help facebook.com/help