{"id":23856,"date":"2022-12-15T23:02:00","date_gmt":"2022-12-15T23:02:00","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/15\/meta-focused-on-safety-security-in-2022\/"},"modified":"2022-12-15T23:02:00","modified_gmt":"2022-12-15T23:02:00","slug":"meta-focused-on-safety-security-in-2022","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/15\/meta-focused-on-safety-security-in-2022\/","title":{"rendered":"Meta Focused On Safety, Security in 2022"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Meta implemented several new programs and features in 2022 designed to improve safety and security on its platforms, the company announced in an end-of-year recap news release<\/a>.<\/p>\n

In the past year, the Facebook and Instagram parent company continued to emphasize initiatives designed to eliminate covert influence operations and spyware and identify bugs.<\/p>\n

Crackdown On Coordinated Inauthentic Behavior<\/h2>\n

In the wake of fears of Russian meddling in the 2016 and 2020 U.S. presidential elections, there has been a call for social media platforms to help eliminate outside influencers.<\/p>\n

According to a Facebook news release<\/a>, Meta has taken down over 200 covert influence operations since 2017 using its Coordinated Inauthentic Behavior (CIB) policy. It has also made the details about these threats public, including whether they came from commercial organizations, nation-states, or unattributed groups.<\/p>\n

\u201cSharing this information has enabled our teams, investigative journalists, government officials and industry peers to better understand and expose internet-wide security risks, including ahead of critical elections,\u201d Ben Nimmo, Global Threat Intelligence Lead, and David Agranovich, Director, Threat Disruptions, said in the release.<\/p>\n

Threats were identified originating from 68 countries using at least 42 languages. The United States is the most frequently targeted country, with 34 CIB operations, followed by Ukraine with 20 and the U.K. with 16.<\/p>\n

Russia was the top source of these CIB networks, accounting for 34, while 28 were in Iran.<\/p>\n

Countering The Global Spyware Threat<\/h2>\n

The social media titan has also continued to focus on eliminating spyware. Its latest threat report<\/a> on what it calls the \u201csurveillance-for-hire industry\u201d found this is a growing problem that indiscriminately targets people in an attempt to gather intelligence and compromise devices and accounts.<\/p>\n

As part of its commitment to fighting these bad actors, Meta has disabled accounts, blocked infrastructure from using its platforms, and shared this data with policymakers, security researchers, and other platforms.<\/p>\n

It also notifies people the company believes were targeted, many of whom are often unaware they were at risk.<\/p>\n

Expanded Bounty On Bugs<\/h2>\n

This year also saw the expansion of \u00a0Meta\u2019s bug bounty program, according to a news release<\/a>. Meta Quest Pro and the Meta Quest Touch Pro controllers are now eligible for bounties.<\/p>\n

This program, launched in 2011, generated more than 10,000 reports on bugs in Meta\u2019s software this year. Of those, more than 750 were issued bounties totaling more than $2 million in awards, according to the release.<\/p>\n

2022 also saw an increased focus from Meta to make its hardware technology more accessible to the research community. This included a focus on VR technology at BountyCon, the company\u2019s annual conference for bug hunters.<\/p>\n

At this conference, researcher Youssef Sammoud reported an issue in Meta Quest\u2019s oAuth flow that could have led to a 2-click account takeover. Upon fixing this issue, which Meta found had no evidence of abuse, this report was awarded $44,250, including program bonuses.<\/p>\n

What Meta Expects in 2023<\/h2>\n

Meta\u2019s security experts expect the company\u2019s new focus on information sharing will allow it to identify and shut down CIB operations sooner, as it expects them to keep targeting more minor services with lower resource levels.<\/p>\n

The continued growth of spyware organizations has made it difficult for Meta to tackle them on its own, so it has called for regulatory action while publishing a set of recommendations<\/a> for a society-wide response.<\/p>\n

To provide advanced account protections, Meta will be employing three new tactics in 2023:<\/p>\n

    \n
  1. Adding new on-platform protections.<\/li>\n
  2. Educating people to help them avoid compromise.<\/li>\n
  3. Increasing support for people when they are locked out of their accounts.<\/li>\n<\/ol>\n

    Continuing its bug bounty program, Meta sets new payout guidelines with awards ranging as high as $300,000.<\/p>\n

    There will also be a continued emphasis on breaking down silos between departments and outside agencies. This helped the social media company improve knowledge-sharing between teams and improve efficiency while also making it easier to identify and eliminate bad or fraudulent actors.<\/p>\n\n

    Featured Image: Ingus Kruklitis\/Shutterstock<\/em><\/p>\n<\/div>\n