heise online

EU Introduces €3 Customs Fee for Non‑EU Orders

From 1 July 2026 the European Union is charging a €3 flat customs duty on imports from non‑EU countries for goods valued up to €150, ending the previous low‑value import exemption. The temporary measure will apply until 1 July 2028; regular duties will resume thereafter based on product type. The rule is intended to level the playing field between non‑EU sellers and EU businesses and to improve consumer protection after EU checks found high rates of non‑compliant or unsafe goods. Member‑state customs and the Commission expect marketplaces and sellers to cover the fee, but analysts and trade bodies warn costs will likely be passed to consumers. Additional measures include mandatory product labelling and stronger traceability from November 2026. The article also references a €200 million EU sanction against Temu under the Digital Services Act as context for tougher enforcement.

Meta staff prefer Gemini; Google restricts access

Reports say many Meta employees have been using Google's Gemini models instead of Meta's in-house Llama models for certain tasks (including fraud detection and ad-facing chatbots). Google has reportedly limited Meta's access to Gemini due to high demand, which slowed some internal projects and led staff to conserve API tokens. Meta is also said to use Anthropic's Claude. Internally, Meta plans to push employees toward its own Copilot CLI and hopes its multimodal Muse Spark model will reduce dependence on third-party models. The article notes recent workforce changes at Meta — an 8,000-job reduction in May 2026 and reassignment of roughly 7,000 employees into AI-focused teams — which contributes to internal pressure to develop reliable in-house AI capabilities.

Ethical Hacker Gains Full Access to FIFA Platform

An IT security researcher using the handle “Bobdahacker” reports she gained full access to FIFA’s network by registering on the FIFA Agent Platform with a valid ID and email. Her account was provisioned in FIFA’s Microsoft Entra tenant; because permissions were only enforced client‑side and not validated by the backend API, she could access multiple internal systems (Teams, Tools, Exchange, Admin) and potentially disrupt World Cup livestreams or manipulate editorial notes and match data. She says she did not attempt to alter live broadcasts. FIFA did not respond initially; after contact with U.S. agencies (CISA and the FBI) the issue was addressed. FIFA has closed the vulnerability and appears to have migrated the Agent Platform domain from agent.fifa.org to agents.fifa.com. The article was published/updated on 2026-06-27.