Monthly Cybersecurity News November 2024

Elisabeth Do
Elisabeth Do
calendar icon
December 1, 2024
2 min

Here are some interesting updates about cybersecurity threats and new trends.

AI Chatbot Startup WotNot Exposes 346 000 Records

A massive data leak has been detected at AI chatbot firm WotNot, with researchers discovering an unprotected Google Cloud storage bucket containing 346,381 files of personally identifiable information. The disclosed data was accessible to anybody without consent and remained available for more than two months after the initial disclosure alerts were delivered. WotNot, which provides AI chatbots to organizations in a variety of industries including insurance, finance, healthcare, SaaS, and banking, has 3,000 customers, including well-known institutions like the University of California. The disclosure offers an important security and privacy risk to impacted individuals by providing possible threat actors with a comprehensive toolkit for identity theft, medical or job-related fraud, and numerous frauds. This incident emphasizes the risks of outsourcing to third-party providers, particularly in the linked world of AI services, where customers are frequently solicited to enter personal information. The breach has sparked concerns among experts regarding AI businesses' security policies and the potential implications for their customers. Legal teams at WotNot's client organizations are likely working hard to resolve the potential consequences of this data breach.

Source: TechRadar

Amazon's Global Book Ban: US Store Restricts Sales to Multiple Countries

Amazon has recently restricted book sales to various nations via its US shop, prompting concerns about internet censorship. The online retail giant is supposedly preventing the sale of specific books to buyers in a number of countries, including Australia, New Zealand, and numerous European countries. This decision has been challenged as a breach of Amazon's public pledges to LGBTIQ rights and human rights in general. The company's activities are interpreted as misleading clients and an act of book cancellation. While the precise titles affected by this restriction are not specified in the available information, the impact on literary freedom and access to knowledge is substantial. Amazon's action caused a debate about the role of massive technology corporations in regulating the flow of information across borders. Critics contend that such limits could limit international cultural and intellectual interchange. The move also raises questions about Amazon's procedures for determining which books are limited and which regions are affected. As the issue develops, it is sure to attract the attention of free speech advocates, authors, and international organizations concerned with the protection of literary freedom.

Source: Cybernews

Meta's Removal of 2 Million Fraudulent Investment Accounts

Meta has reported the deactivation of almost 2 million accounts associated with "pig butchering" scams from its platforms since the beginning of 2024. These accounts largely came from Myanmar, Laos, the United Arab Emirates, the Philippines, and Cambodia, which are known for hosting "scam slave" operations. Pig butchering is a financial investment scam based on long-term manipulation and clever deception techniques. Scammers frequently pretend as attractive individuals or representatives of huge corporations, pursuing users globally via numerous communication platforms. Meta has been actively battling this issue for over two years, adopting tactics such as implementing its Dangerous Organizations and Individuals Policy, as well as using behavioral and technical indications to identify and block fake accounts. To develop cross-platform defenses, the business is working with worldwide law enforcement agencies, technology companies, and organizations such as the Tech Against Scams Coalition. Meta has also added safety features to its platforms, like as warnings in Messenger and Instagram and group conversation transparency on WhatsApp. The FBI claims that investment fraud scams increased by 38% from $3.31 billion in 2022 to $4.57 billion in 2023, illustrating the growing threat of these scams. To defend themselves from these fraudulent acts, users should enable two-factor authentication, consider selfie verification for account recovery, and exercise vigilance when receiving unsolicited communications.

Source: The Record

Misinformation Epidemic: UNESCO Urges Influencers to Step Up Fact-Checking

A recent UNESCO study has revealed that 62% of online influencers do not verify information before sharing it with their followers, raising significant concerns about the spread of misinformation. The survey, which included 500 digital content creators from 45 countries, found that many influencers rely on questionable methods to assess the credibility of information, such as judging by the number of likes and views or trusting recommendations from friends. Only 37% of influencers reported using fact-checking websites before sharing content, while 42% evaluated source credibility based on popularity metrics. UNESCO emphasized the urgent need to enhance creators' media literacy skills, particularly in identifying and utilizing trustworthy fact-checking resources. The study highlighted that influencers generally do not depend on official information sources, with 60% relying on personal experiences and 40% conducting their own research. This lack of rigorous fact-checking is especially concerning given that nearly 40% of young Americans aged 18-29 regularly get their news from influencers. In response to these findings, UNESCO has announced a month-long training program to empower content creators in addressing disinformation and hate speech.

Source: The Guardian