LinkedIn has plugged a flaw in its AutoFill button that would have allowed a malicious website to harvest basic account data from your LinkedIn profile. Introduced a few years back, AutoFill is promoted as a convenient way for websites to capture a visitor’s name, email address, phone number, geographical location, company name, and job role.
Read full news article on Naked Security