Facebook is susceptible to certain types of attacks that could allow someone to hijack an account while a user is interacting with another Web site. Design flaw in Facebook is granting third-party apps permission to access user profile data without express approval from users. Researchers identify malware existing in popular add-ons for Facebook, Vimeo, Instagram and others that are commonly used in browsers from Google and Microsoft. Google, Microsoft, Cisco Systems want appeals court to deny immunity to Israeli company for alleged distribution of spyware and illegal cyber-surveillance activities.
Source: https://threatpost.com/facebook-vulnerable-clickjacking-attacks-011910/73390/