Facebook says a new bug allowed apps to access private photos of up to 6.8 million users (Washington Post)