Facebook says it cannot guarantee third-party services that accept single sign-on access to victims’ SSO authentication. Attackers behind the Facebook mega-breach may still be able to access victims’ accounts. Facebook has offered no timeline for when that might change. Facebook: “Security is incredibly important to Facebook. It’s why we recommend developers stick to our Facebook Login security best practices,” says Guy Rosen, Facebook’s vice president of product management, in a Tuesday blog post. This corporate approach, in fact, mirrors what got Facebook into the Cambridge Analytica data scandal mess.”]
Source: https://www.databreachtoday.com/blogs/facebook-cant-reset-all-breach-victims-access-tokens-p-2669