Facebook vulnerability that allowed any photo to be deleted earns $12,500 bounty

An engineer has discovered a vulnerability in Facebook that could have allowed for any photo on the site to be deleted without the owner’s knowledge.
Naked Security – Sophos