A dangerous XSS bug surfaced on Twitter on Monday, and researchers have seen active exploits for the bug. The bug allows an attacker to steal the session cookie of a Twitter user with a simple click-and-you re-owned technique. Experts say that the attacks seem to be emanating from domains in Brazil, and that more than 100,000 users had already clicked on one malicious shortened URL related to the attack. Twitter officials said on Tuesday morning that the vulnerability has been fixed.
Source: https://threatpost.com/attackers-target-twitter-xss-bug-090710/74431/