- Madrid's Carvajal to miss several months after serious knee injury
- Two elephants die in flash flooding in northern Thailand
- Sabalenka targets world number one and Wuhan hat-trick
- Tunisia votes with Saied set for re-election
- Bagnaia sets 'example' with Japan MotoGP win to cut gap on Martin
- Intense Israeli bombing rocks Beirut ahead of war anniversary
- Mozambique vote: no suspense but some disillusion
- Austrian rapper channels anti-racist rage in Romani hip-hop songs
- Ohtani magic powers Dodgers over Padres in MLB playoff thriller
- Five of the best: Pakistan-England Test thrillers
- Man sets arm on fire as marches across US mark Gaza war anniversary
- Vietnam's young coffee entrepreneurs brew up a revolution
- Trump rallies at site of failed assassination: 'Never quit'
- Too hot by day, Dubai's floodlit beaches are packed at night
- Is music finally reckoning with #MeToo?
- Fans hail Trump's 'guts' as he returns to site of rally shooting
- Lebanon state media says Israeli strikes hit south Beirut
- Miami on track for MLS record points after win in Toronto
- Monaco take top spot in Ligue 1 with win at Rennes
- Madrid beat Villarreal to level Liga leaders Barca
- Thuram treble fires Inter past Torino and up to second
- 'Fight': defiant Trump jets in to site of rally shooting
- Mexico City's new mayor sworn in with pledges on water, housing
- Israel on alert ahead of Hamas attack anniversary
- Guardians maul Tigers in MLB playoff series opener
- Macron criticises Israel on Gaza, Lebanon operations
- French rugby player whistled but 'serene' on return amid ongoing rape case
- Retegui hat-trick fires five-star Atalanta to hammering of Genoa
- Heavyweights Australia, England off to World Cup winning starts
- Visiting UN refugee agency chief decries 'terrible crisis' in Lebanon
- Spinners come to party as England defeat Bangladesh at T20 World Cup
- Search continues for missing in deadly Bosnia floods
- Man City sink Fulham to get title bid back on track
- France's Auradou whistled on Pau return in Perpignan loss amid ongoing rape case
- A 'forgotten' valley in storm-hit North Carolina, desperate for help
- Arsenal hit back in style after Southampton scare
- Hezbollah heir apparent Safieddine out of contact after strikes
- Liverpool stay top of Premier League as Arsenal, Man City win
- In dank Tour of Emilia, Pogacar shines in rainbow jersey
- DR Congo launches mpox vaccination drive, hoping to curb outbreak
- Trump returns to site of failed assassination
- Careless Leverkusen held to Bundesliga draw
- O'Brien's 'superstar' Kyprios posts landmark win on Arc weekend
- Liverpool suffer Alisson injury blow
- Habosi helps Racing beat Vannes before Auradou's playing return
- Thousands march in London in support of Palestinians, 1 year after Oct 7
- Israel readying response to Iran missile attack
- Schutt, Mooney help Australia beat Sri Lanka in Women's T20 World Cup
- Liverpool extend Premier League lead with win at Palace
- Djokovic 'shakes rust off' to make third round of Shanghai Masters
Hackers got user data from Meta with forged request
Facebook owner Meta gave user information to hackers who pretended to be law enforcement officials last year, a company source said Wednesday, highlighting the risks of a measure used in urgent cases.
Imposters were able to get details like physical addresses or phone numbers in response to falsified "emergency data requests," which can slip past privacy barriers, said the source who requested anonymity due to the sensitivity of the matter.
Criminal hackers have been compromising email accounts or websites tied to police or government and claiming they can't wait for a judge's order for information because it's an "urgent matter of life and death," cyber expert Brian Krebs wrote Tuesday.
Bloomberg news agency, which originally reported Meta being targeted, also reported that Apple had provided customer data in response to forged data requests.
Apple and Meta did not officially confirm the incidents, but provided statements citing their policies in handling information demands.
When US law enforcement officials want data on a social media account's owner or an associated cell phone number, they must submit an official court-ordered warrant or subpoena, Krebs wrote.
But in urgent cases authorities can make an "emergency data request," which "largely bypasses any official review and does not require the requestor to supply any court-approved documents," he added.
Meta, in a statement, said the firm reviews every data request for "legal sufficiency" and uses "advanced systems and processes" to validate law enforcement requests and detect abuse.
"We block known compromised accounts from making requests and work with law enforcement to respond to incidents involving suspected fraudulent requests, as we have done in this case," the statement added.
Apple noted its guidelines, which say that in the case of an emergency application "a supervisor for the government or law enforcement agent who submitted the... request may be contacted and asked to confirm to Apple that the emergency request was legitimate."
Krebs noted that the lack of a unitary, national system for these type of requests is one of the key problems associated with them, as companies end up deciding how to deal with them.
"To make matters more complicated, there are tens of thousands of police jurisdictions around the world — including roughly 18,000 in the United States alone — and all it takes for hackers to succeed is illicit access to a single police email account," he wrote.
A.Seabra--PC