Meta has addressed a critical vulnerability involving broken access control that exposed sensitive customer support data across multiple services. This issue highlighted systemic weaknesses in authorization within their shared backend infrastructure. The flaw, categorized as an Insecure Direct Object Reference (CWE-639) combined with Broken Access Control (CWE-284) and Missing Authorization (CWE-862), allowed unauthorized users to […]

The post Critical Meta IDOR Flaw Let Attackers Access Customer Support Cases appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Group-IB says scammers are targeting Céline Dion fans through Facebook, duplicate digital tickets and fake websites impersonating Ticketmaster, AXS and the venue site.

EU regulators preliminarily found Meta’s Facebook and Instagram design addictive, raising the prospect of app changes and a potential $12.1 billion fine.

The post Meta Faces EU Breach Finding Over Addictive Facebook, Instagram Design appeared first on TechRepublic.

EU regulators preliminarily found Meta’s Facebook and Instagram design addictive, raising the prospect of app changes and a potential $12.1 billion fine.

The post Meta Faces EU Breach Finding Over Addictive Facebook, Instagram Design appeared first on TechRepublic.

Governments worldwide are introducing or considering social media bans for children, as concerns over mental health, online safety, and addictive algorithms continue to reshape digital policy.

"Meta has axed a controversial feature that allowed users to modify photos from public Instagram accounts using AI," reports TechCrunch: The feature, which wasn't designed to alert a user if their photos were used in this way, prompted immediate backlash... The company issued a blog post Friday announcing that it was removing the feature. Puck News founding partner Dylan Byers was the first to share the company's decision... Byers notes that the decision to do away with the feature came "amid scrutiny from users and talent agencies, including CAA."

Read more of this story at Slashdot.

Meta "said in a court filing on Monday that four states were seeking $1.4 trillion in penalties," reports Reuters, "over accusations the company designed its Facebook and Instagram platforms to addict young users and misled the public about their safety." Meta put forward the figure in its response to the attorneys general's filings on how penalties should be calculated if the states prevailed at trial. The number, which has not previously been disclosed and is close to Meta's market capitalization of around $1.5 trillion, comes ahead of an August trial in Oakland, California, over the claims brought by California, Colorado, Kentucky and New Jersey against the company. Meta said the amount was unsupported by the evidence. "A sanction of that size has no analog in the history of consumer protection enforcement," the company said in the filing. "The plaintiffs' outlandish calculations have no basis in fact or law," the company said in a statement, adding that it would continue to defend itself against the states' demands. A spokesperson for California Attorney General Rob Bonta said in a statement the lawsuit "alleges Meta has prioritized profits over the safety of kids and fueled the mental health crisis we see impacting a generation of American children. The California Department of Justice looks forward to holding Meta fully accountable at trial in August...." Meta has denied the allegations, saying the attorneys general have no evidence it misled consumers about its platforms' alleged addictiveness because "social media addiction" is not an established psychiatric condition, and therefore statements that its platforms were not addictive could not be false... Last month, [U.S. District Judge] Rogers rejected Meta's bid to cancel the trial, saying there remained factual disputes over whether its social media platforms were addictive, whether Meta falsely denied it designed them that way, and whether it "partially" directed the platforms at children. "A further 14 states have brought claims under their own laws, which will be heard at a separate trial in February..." Thanks to Slashdot reader Sparkatron for sharing the article.

Read more of this story at Slashdot.

The European Union is ramping up pressure on Meta to make big changes to Facebook and Instagram after the European Commission preliminarily found that features like autoplay, infinite scroll, and highly personalized content recommendations were addictive.

On Thursday, the EC said its investigation indicated that “Meta did not adequately assess the risks of its addictive design on the physical and mental wellbeing of users, including minors and vulnerable adults.”

“These features fuel the user's urge to keep scrolling and shift the brain into ‘autopilot mode,' contributing to unhealthy habits and compulsive use,” the commission said.

Read full article

Comments

© NurPhoto / Contributor | NurPhoto

The tech giant is in breach of the Digital Services Act by focusing on features like infinite scroll, autoplay, push notifications, and the highly personalized recommendation algorithms, the European Commission said.

WhatsApp is letting users reserve usernames before its 2026 launch, giving people a way to chat without sharing phone numbers. Here is how it works, why it matters, and the security limits to know

💾