/
vendors:Meta × limpar

Resultados

26 casos · pág. 1/2

techcrunch.com · low

Meta removes commercial terms clause that appeared to allow scraping of business account domains for AI training

Meta updated its commercial terms of use to state it could "use any content from a business account's domains, web pages, or URLs" to provide, develop, improve, research, train and maintain its products and services. Legal experts quoted by Nieman Lab read this as a "remarkable provision" that could let Meta scrape any publisher with a Me…

wired.com · medium

OpenAI engineer Abdulrahman Alfozan held in custody over hidden recording devices in executive conference room

A US federal magistrate judge in San Francisco ordered former OpenAI engineer Abdulrahman Alfozan to remain in custody, citing flight risk. Prosecutors allege he planted a covert audio recording device, hidden in toilet paper behind a TV, in an executive conference room used for confidential meetings. OpenAI found the device in late Septe…

wired.com · low

WhatsApp help pages exposed hidden Meta support chatbot instructions, including guidance to avoid referencing regulators

Privacy firm Redact found that around 80 WhatsApp help and FAQ pages exposed hidden text instructions written for a Meta large language model support chatbot. The text, about 100 blocks in total, sat in the page source under a code block headed "HelpContentGalaxyLLMInclude". Some instructions told the chatbot not to recommend contacting a…

wired.com · medium

OpenAI employee charged with planting covert recording device in executive conference room, allegedly using AI chatbots to plan it

Federal prosecutors charged Abdulrahman Alfozan, a 35-year-old Saudi national and US permanent resident who joined OpenAI in July 2025, with using a device to intercept oral communications. He allegedly planted a covert audio recorder in an executive-only conference room no later than 28 September 2026. OpenAI's countersurveillance sweep …

f5.com · exploit público critical

React2Shell (CVE-2025-55182) mass exploitation: RondoDox, credential stealers and reverse shells observed in December 2025

F5 Labs, using Efflux sensor telemetry, analyzed December 2025 exploitation of React2Shell (CVE-2025-55182), a CVSS 10.0 unsafe deserialization RCE in React Server Components. It was disclosed on 3 December 2025 and rose to second place among the most exploited CVEs, behind only CVE-2017-9841. Within days of disclosure, actors moved from …

zdnet.com · low

Meta Business Suite terms let Meta crawl sites tied to business accounts for AI training from Oct. 30, with no opt-out

Meta is updating its commercial terms for Meta Business Suite, effective Oct. 30. Under the new terms, accounts authorize Meta and any entity acting on its behalf to use scrapers, bots, crawlers and user agents on domains and URLs "associated with" the account, including news publisher sites. Nieman Lab first reported the change, and lega…

securityaffairs.com · medium

Meta commercial terms effective Oct 30, 2026 authorize scraping of business customers' websites for AI training, with no opt-out

Meta will update its commercial terms on October 30, 2026, authorizing the company or anyone acting on its behalf to scrape content from websites associated with business customers and use it to train AI models and improve its products. "Business customer" is defined broadly: it covers advertisers, sellers, app developers, Page and Group …

wired.com · low

Canada's Bill C-22 would mandate encryption access and metadata retention, prompting Signal and Psiphon to threaten to exit

Canada's proposed C-22 bill, first put forward in 2025 and since partly revised, would require tech companies, including foreign ones, to introduce "technical capabilities" for law enforcement data access. It would also require retention of user metadata. Signal has said it would exit the Canadian market, and Psiphon VPN says it will leav…

techcrunch.com · medium

TikTok staff reportedly warned executives of child safety risks, including sexual exploitation, per court records

Court records obtained by NPR show that TikTok employees repeatedly warned executives about risks the platform posed to minors, including sexual exploitation and exposure to suicide-related content. Employee depositions filed in March 2026 describe frustration with how leadership responded. Staff reportedly flagged minors appearing in sex…

research.checkpoint.com · · 2 fontes · 2 atualizações medium

Check Point: AI-integrated antidetect browsers (Kameleo, AdsPower, MultiLogin) fuel account takeover, fraud and influence operations

Check Point Research reports that commercial antidetect browsers Kameleo, AdsPower and MultiLogin are widely referenced on Russian-language underground forums and are used for account takeover, carding, fraudulent loan applications, ad-revenue fraud and coordinated inauthentic behavior (CIB). The tools spoof browser fingerprints, manage p…

thehackernews.com · medium

WhatsApp help pages hid chatbot instructions not to point users to privacy regulators or cite GDPR

WhatsApp help pages carried hidden instructions for its WhatsApp Support with AI chatbot. They told it not to recommend a data protection authority to users who could not delete their accounts, and not to cite privacy laws such as the GDPR once a user mentioned a lawyer, lawsuit or court. This contradicts WhatsApp's privacy policy for Eur…

flashpoint.io · medium

Joint Disruption Week: 28 arrests in Ghana and Nigeria and 3.7M scam accounts removed in West African scam network takedown

Flashpoint joined the UK National Crime Agency (NCA), the DOJ, FBI, U.S. Secret Service, Homeland Security Investigations and private-sector partners in "Joint Disruption Week", held in London the week beginning October 6, 2026. The operation targeted West African scam networks running cryptocurrency investment scams, impersonation scheme…

newsroom.trendmicro.com · medium

Pwn2Own Ireland 2025: 73 zero-days disclosed in printers, NAS, smart home devices and phones, $1,024,750 awarded

Trend Micro announced that contestants at Pwn2Own Ireland 2025 discovered and disclosed 73 unique zero-day vulnerabilities across printers, network storage systems, smart home devices, surveillance equipment, home networking equipment, flagship smartphones and wearables. A total of $1,024,750 was awarded from a prize pool of over $2 milli…

welivesecurity.com · low

Guidance for deepfake victims: legal context, evidence preservation and platform takedown routes (TAKE IT DOWN Act, StopNCII)

This WeLiveSecurity explainer gives practical advice to people targeted by AI-generated deepfakes, which are increasingly used in fraud, extortion, harassment and non-consensual intimate imagery (NCII). It sets out the legal context: the US TAKE IT DOWN Act criminalizes NCII distribution and requires platforms to remove reported content w…