The article reports on a security vulnerability discovered in the Chinese online marketplace Pinduoduo's shopping app. Here are the main points:
1. **Malware detected**: A team of researchers at Dark Navy, a Chinese cybersecurity firm, found malware in Pinduoduo's app that could steal user data and exploit internet-related security vulnerabilities.
2. **Pinduoduo takes action**: After being reported to Dark Navy, Pinduoduo issued an update to its app (version 6.50.0) that removed the exploits, according to two experts who CNN spoke to.
3. **Team disbanded**: Two days after the update, Pinduoduo disbanded the team of engineers and product managers who had developed the exploits, according to a source.
4. **Oversight failure**: The Ministry of Industry and Information Technology, which is responsible for regulating Big Tech companies in China, did not detect the malware and its developers are reportedly "embarrassed" by this oversight.
5. **Regulatory implications**: Pinduoduo's apparent misuse of personal data and exploitation of internet-related security vulnerabilities would be a violation of Chinese regulations on data protection and cybersecurity, according to tech policy experts.
6. **Censorship**: A post on Weibo, a Twitter-like platform, criticizing the Ministry of Industry and Information Technology for its failure to detect the malware was censored.
The article highlights the need for better oversight and regulation of Big Tech companies in China, particularly with regard to data protection and cybersecurity.
1. **Malware detected**: A team of researchers at Dark Navy, a Chinese cybersecurity firm, found malware in Pinduoduo's app that could steal user data and exploit internet-related security vulnerabilities.
2. **Pinduoduo takes action**: After being reported to Dark Navy, Pinduoduo issued an update to its app (version 6.50.0) that removed the exploits, according to two experts who CNN spoke to.
3. **Team disbanded**: Two days after the update, Pinduoduo disbanded the team of engineers and product managers who had developed the exploits, according to a source.
4. **Oversight failure**: The Ministry of Industry and Information Technology, which is responsible for regulating Big Tech companies in China, did not detect the malware and its developers are reportedly "embarrassed" by this oversight.
5. **Regulatory implications**: Pinduoduo's apparent misuse of personal data and exploitation of internet-related security vulnerabilities would be a violation of Chinese regulations on data protection and cybersecurity, according to tech policy experts.
6. **Censorship**: A post on Weibo, a Twitter-like platform, criticizing the Ministry of Industry and Information Technology for its failure to detect the malware was censored.
The article highlights the need for better oversight and regulation of Big Tech companies in China, particularly with regard to data protection and cybersecurity.