News

According to a report from NPR, Meta plans to shift the task of assessing its products' potential harms away from human reviewers, instead leaning more heavily on AI to speed up the process. Internal documents seen by the publication note that Meta is aiming to have up to 90 percent of risk assessments fall on AI, NPR reports, and is considering using AI reviews even in areas such as youth risk and "integrity," which covers violent content, misinformation and more. Unnamed current and former Meta employees who spoke with NPR warned AI may overlook serious risks that a human team would have been able to identify.

Updates and new features for Meta's platforms, including Instagram and WhatsApp, have long been subjected to human reviews before they hit the public, but Meta has reportedly doubled down on the use of AI over the last two months. Now, according to NPR, product teams have to fill out a questionnaire about their product and submit this for review by the AI system, which generally provides an "instant decision" that includes the risk areas it's identified. They'll then have to address whatever requirements it laid out to resolve the issues before the product can be released.

A former Meta executive told NPR that reducing scrutiny "means you're creating higher risks. Negative externalities of product changes are less likely to be prevented before they start causing problems in the world." In a statement to NPR, Meta said it would still tap "human expertise" to evaluate "novel and complex issues," and leave the "low-risk decisions" to AI. Read the full report over at NPR.

It comes a few days after Meta released its latest quarterly integrity reports — the first since changing its policies on content moderation and fact-checking earlier this year. The amount of content taken down has unsurprisingly decreased in the wake of the changes, per the report. But there was a small rise in bullying and harassment, as well as violent and graphic content.This article originally appeared on Engadget at https://www.engadget.com/social-media/meta-will-reportedly-soon-use-ai-for-most-product-risk-assessments-instead-of-human-reviewers-205416849.html?src=rss

Summer Game Fest 2025 is just around the corner and it'll be a weekend packed with video game news. The event kicks off on June 6, with roughly a dozen livestreams scheduled to take place from then through June 8. Among them is the Latin American Games Showcase, which will highlight over 50 titles from Latin American indie developers. You can tune into the YouTube stream on Saturday, June 7 at 2PM ET (11AM PT).

Last year's Latin American Games Showcase at SGF gave us a glimpse at a ton of games to be excited about, like the recently released title, Despelote, that's both memoir and soccer game. We don't know yet what the 2025 showcase will bring, but there's sure to be some gems. Before the Latin American Games Showcase on Saturday, Summer Game Fest Live will usher in the festivities on June 6 at 5PM ET (2PM PT).

We have all the info you need to know right here ahead of Summer Game Fest and will be on the ground getting some hands-on time with many of the games you'll see featured in the showcases, so be sure to check back in for the latest news.This article originally appeared on Engadget at https://www.engadget.com/gaming/how-to-watch-the-latin-american-games-showcase-at-summer-game-fest-2025-210009391.html?src=rss

Outdated DNS records create invisible openings for criminals to spread malware through legitimate sitesHazy Hawk turns misconfigured cloud links into silent redirection traps for fraud and infectionVictims think they’re visiting a real site, until popups and malware take overA troubling new online threat is emerging in which criminals hijack subdomains of major organizations, such as Bose, Panasonic, and even the US CDC (Centers for Disease Control and Prevention), to spread malware and perpetrate online scams.As flagged by security experts Infoblox, at the center of this campaign is a threat group known as Hazy Hawk, which has taken a relatively quiet but highly effective approach to compromise user trust and weaponize it against unsuspecting visitors.These subdomain hijackings are not the result of direct hacking but rather of exploiting overlooked infrastructure vulnerabilities.An exploit rooted in administrative oversightInstead of breaching networks through brute force or phishing, Hazy Hawk exploits abandoned cloud resources linked to misconfigured DNS CNAME records.These so-called “dangling” records occur when an organization decommissions a cloud service but forgets to update or delete the DNS entry pointing to it, leaving the subdomain vulnerable.For example, a forgotten subdomain like something.bose.com might still point to an unused Azure or AWS resource, and if Hazy Hawk registers the corresponding cloud instance, the attacker suddenly controls a legitimate-looking Bose subdomain.This method is dangerous because misconfigurations are not typically flagged by conventional security systems.The repurposed subdomains become platforms for delivering scams, including fake antivirus warnings, tech support cons, and malware disguised as software updates.Hazy Hawk doesn’t just stop at hijacking - the group uses traffic distribution systems (TDSs) to reroute users from hijacked subdomains to malicious destinations.These TDSs, such as viralclipnow.xyz, assess a user’s device type, location, and browsing behavior to serve up tailored scams.Often, redirection begins with seemingly innocuous developer or blog domains, like share.js.org, before shuffling users through a web of deception.Once users accept push notifications, they continue to receive scam messages long after the initial infection, establishing a lasting vector for fraud.The fallout from these campaigns is more than theoretical and has affected high-profile organizations and firms like the CDC, Panasonic and Deloitte.Individuals can guard against these threats by refusing push notification requests from unfamiliar sites and exercising caution with links that seem too good to be true.For organizations, the emphasis must be on DNS hygiene. Failing to remove DNS entries for decommissioned cloud services leaves subdomains vulnerable to takeover.Automated DNS monitoring tools, especially those integrated with threat intelligence, can help detect signs of compromise.Security teams should treat these misconfigurations as critical vulnerabilities, not minor oversights.You might also likeThese are the best AI website builders aroundUK businesses say that fear of missing out is driving AI adoptionTikTok fans beware - experts warn dangerous malware spread by AI fake videos