Here's more on some of the top takeaways from Zatko's disclosure.
And it has created internal workflows to ensure users know that when they cancel their accounts, Twitter will deactivate the accounts and start a deletion process, Twitter said.
Partly due to its cybersecurity issues, Zatko's disclosure says, Twitter's data centers are constantly at risk of going down.
Twitter also knowingly misled the FTC and French regulators on its intellectual property rights violations, the disclosure claims.
The FTC settlement was supposed to force Twitter to shape up after hackers in 2009 gained access to internal Twitter systems.