Cybercriminal groups are using malicious Instagram advertisements, abandoned analytics tags, and compromised websites to deliver Coruna and DarkSword exploit kits to vulnerable iPhones. The investigation exposes a scalable spyware distribution model in which attackers exploit advertising infrastructure to reach victims during ordinary browsing. Researchers describe these as βhalf-clickβ attacks: users must encounter an infected webpage [β¦]
Instagram is testing Features, a new format for horizontal videos up to 90 minutes. The feature lets creators link short Reels to full-length podcasts, comedy videos, and other content.
Last week, Meta faced backlash after legal experts warned that the tech giantβs sweeping new commercial terms of service seemed to give Meta permission to endlessly scrape websites linked on business pages. Talking to Nieman Lab, experts suggested that Meta could possibly use the policy to avoid millions in licensing fees from news organizations by requiring all business users to share a wealth of AI training data simply for running a business page.
A Meta spokesperson confirmed that Meta did not alert users to the changed language following backlash. This potentially only adds to confusion ahead of the policy rollout. In response to backlash, Meta's spokesperson provided a statement to Ars, acknowledging Nieman Lab's initial report but not its follow-up report reiterating experts' concerns:
Legal experts are sounding alarms that Meta will soon update its commercial terms to require business accounts to allow Meta to train AI on their linked website content, not just their social media posts.
Kicking in on October 30, the TOS update wonβt allow businesses to opt out, instead suggesting that businesses stop using Meta services if they wonβt agree to let Meta bots freely crawl their linked content.
As Nieman Lab reported Thursday, this will affect all business accounts but is particularly shocking for news publishers who could perhaps charge Meta millions in licensing fees to continually access their articles for AI training. Currently news organizations are fighting a battle with OpenAI over whether such training without licensing is fair use, and Meta's terms seemingly risk granting it sweeping permissions, no matter which way the court leans.
If you got a DM from an unverified Jon Bon Jovi account after commenting on one of his official Instagram posts, what would it take to make you believe it was really the rock star hoping to connect? And at what point when he starts asking you to send moneyβlike lose-your-house kind of moneyβwould you snap out of the fantasy and stop draining your bank account?
In a documentary premiering SaturdayβSuper Scam Meβinvestigative journalist Mariana van Zeller goes deep into this toxic love-bombing terrain. In a clip that Ars is exclusively debuting below, you can see how van Zeller worked with an ethical hacker, Arman the Cyber, to use a fake bitcoin receipt and bait the fake Bon Jovi, giving the victim some much-needed closure.
Sneak peek at National Geographic's Super Scam Me.
Scamming a romance scammer
Broadcasting on National Geographic at 9 pm ET and available to stream on Disney+ and Hulu, the documentary takes viewers on an empathetic quest to understand how the line between βloverβ and βfraud victimβ gets blurred in romance scams that the Federal Trade Commission says cost Americans nearly $1.5 billion in losses each year.
We've all been there. Someone's Story pops up in your feed: a brand you're researching, a creator you admire, an ex you're definitely not stalking, and the last thing you want is your name showing up in their viewer list.