Twitter has disclosed a major security lapse, a bug that used phone numbers and email addresses provided by users for the purpose of targeted advertising – without permission. The information was given for the purpose of account security, but the flaw employed it for serving ads.