Search: “subscription-usage”

Présentation de Meta One : Un service d’abonnement offrant davantage de fonctionnalités et d’IA pour créer, se connecter et se démarquer

Meta launches Meta One subscription bundles with expanded Meta AI usage and creator/business tools, already at 15 million subscriptions and trials.

Meta launched Meta One, a new subscription service across Instagram, Facebook, WhatsApp and Meta AI with more than 50 features and 15 million subscriptions and trials to date. Core and Premium bundles add heavier use of compute-intensive AI features, including image creation/editing and video generation via the Muse models, plus tools like Restyle on Instagram. Pricing starts at EUR 2.49/month for single-product plans, EUR 6.99 for bundled consumer plans and EUR 16.99 for creator/business bundles; the core Meta AI experience remains free.

Meta Newsroom·Sep 15, 15:25 UTC · 1d agoAI industry

Tell HN: OpenAI brings back 5 hour limit for plus and business standard users

OpenAI reinstated a 5-hour usage limit for Plus and Business Standard subscribers, sparking Hacker News debate about subsidized inference pricing and subscription value.

A Hacker News discussion reports that OpenAI has brought back a 5-hour usage limit for Plus and Business Standard users. Commenters debated whether cheap tokens are a subsidized customer acquisition strategy, whether AI companies have sustainable margins on inference, and how switching costs between providers affect dependency. The thread reflects community sentiment on pricing and usage caps rather than an official policy announcement.

Hacker News · security·Sep 7, 16:40 UTC · 9d agoAI industryHN 126↑ · 142 comments

Introducing Meta One: A Subscription Service With More Features and AI to Create, Connect, and Stand Out

Meta launches global Meta One subscriptions bundling Instagram, Facebook, WhatsApp Plus with expanded Meta AI and Muse media generation, priced $2.99-$499 monthly.

Meta introduced Meta One, a global subscription service with plans for individuals, creators, and businesses, launching with more than 50 features across Instagram, Facebook, WhatsApp, and Meta AI. Individual bundles Core ($7.99/month) and Premium ($19.99/month) combine the single-product Plus plans with expanded use of compute-intensive AI capabilities, including image/video generation powered by Muse models and Instagram's Restyle. Business tiers range from Essential ($14.99/month) to Expert ($149/month) and Max ($499/month), with expansion planned to Edits, AI glasses, and more.

Meta Newsroom·Sep 15, 15:00 UTC · 1d agoAI industry

Meta expands subscription push with new AI-focused plans

Meta launched Meta One subscriptions ($7.99–$499/month) bundling expanded Muse AI image and video generation across Facebook, Instagram, and WhatsApp.

Meta introduced Meta One with consumer Core ($7.99/mo) and Premium ($19.99/mo) tiers plus business plans ranging from Essential ($14.99/mo) to Max ($499/mo). Subscriptions unlock expanded Muse Image, Muse Video, Restyle editing, and Meta Business Agent usage, following Meta's $14.3B investment in Scale AI. Appfigures data shows Instagram's daily subscription revenue averaging $1.2M and Facebook's $528K after the March Plus-tier launches, up 475% and 143% respectively. BNP Paribas forecasts $13.5B added revenue by 2028; Truist estimates $20B by 2030.

TechCrunch · AI·Sep 15, 17:05 UTC · 1d agoAI industry

Meta’s new One subscriptions put a price on social media and AI

Meta's new One subscription tiers pair app perks with more Meta AI usage, from $2.99 single apps to $499 monthly business Max plan.

The Verge reports Meta's Meta One subscription bundles are now globally available, following the launch of its Muse AI assistant. Individual bundles include Core at $7.99/month and Premium at $19.99/month, combining Instagram Plus, WhatsApp Plus, and Facebook Plus with expanded Meta AI media generation including Muse images and Instagram's Restyle, cheaper than $11/month for all three standalone subscriptions. Creator and business plans span Essential ($14.99/month) to Expert ($149/month) and Max ($499/month), adding verification badges, impersonation protection, and Meta Business Agent capacity.

The Verge · AI·Sep 15, 15:00 UTC · 1d agoAI industry

OpenAI puts Pro subscriptions on hold due to Astra demand

OpenAI pauses new $200/month Pro subscriptions as unprecedented demand for its Astra model strains infrastructure.

OpenAI product lead Thibault Sottiaux announced on X that sign-ups for the $200-per-month Pro plan are temporarily disabled because Pro usage puts the most strain on the company's systems amid demand for the Astra model. Astra, launched September 3 and pitched as a generational leap in reasoning, coding, and computer use, is rolling out across Pro, Plus, Enterprise, and Business plans. The API, Go, and Plus tiers remain available, and OpenAI did not say how long the Pro pause will last. The company had raised Codex usage limits as recently as last month.

TechCrunch · AI·Sep 10, 20:59 UTC · 5d agoAI industry

ChatGPT Astra is now rolling out to $20 Plus subscription

OpenAI has begun rolling out ChatGPT Astra, its most powerful model to date, to $20 Plus subscribers; free-tier timing is unannounced.

OpenAI started rolling out ChatGPT Astra, described as its most powerful model to date, to customers on the $20 Plus subscription tier. The company has not announced when or whether free users will gain access. The rollout is a product launch event with no security incident involved.

BleepingComputer·Sep 7, 01:15 UTC · 9d agoModel release

Trends in Web Threats in CY Q2 2022: Malicious JavaScript Downloaders Are Evolving

Unit 42 detected 751,000 landing URL incidents in Q2 2022 and documented malicious JavaScript downloaders evolving to evade detection.

Unit 42 detected 751,331 landing URL incidents (253,644 unique) and 1,744,629 malicious host URL incidents (256,844 unique) from April through June 2022. Total landing URL incidents rose compared with Q1 2022, and unique host URL incidents grew 42%, indicating attackers deploying more variants. The report includes a case study of a JavaScript downloader campaign demonstrating new evasion techniques. Personal sites, blogs, and business sites were the top apparently benign entry points.

Palo Alto Unit 42·Aug 17, 13:05 UTC · Aug 17, 2026Research

Class action lawsuit accuses Anthropic of overselling Claude subscriptions with deceptive usage multipliers

Class action lawsuit alleges Anthropic's Claude Max plan misrepresents usage multipliers via five-hour and weekly caps.

A class action filed by the same law firm over the summer claims Anthropic's $100 five-times and $200 twenty-times Max plan multipliers apply only within five-hour windows and are capped weekly, delivering less usage than advertised. Anthropic moved to dismiss, saying details were available via hyperlinks during purchase. Plaintiffs argue consumers cannot verify AI service delivery and must rely on honest advertising.

The Decoder·Sep 11, 09:45 UTC · 5d agoAI industry2

Aggah Campaign: Bit.ly, BlogSpot, and Pastebin Used for C2 in Large Scale Campaign

Aggah campaign abuses Bit.ly, BlogSpot, and Pastebin as multi-hop C2 to deliver RevengeRAT across the Middle East, US, Europe, and Asia.

Unit 42 details the Aggah campaign, which began with spearphishing emails in March 2019 spoofing a large financial institution and targeting education, media/marketing, and government organizations in the Middle East, later expanding to the US, Europe, and Asia. Delivery documents use Template Injection to load a remote OLE file whose macro runs mshta against a Bit.ly link redirecting to a BlogSpot post, which then uses Pastebin pastes to download RevengeRAT configured with a duckdns[.]org C2 domain. The embedded script also deletes Microsoft Defender signatures and kills Defender and Office processes, and modifies registry keys to enable macros. High-level TTPs resemble the Gorgon Group, but Unit 42 could not confirm attribution.

Palo Alto Unit 42·Aug 17, 13:21 UTC · Aug 17, 2026Threat actor

Quantifying the Engagement Trap: Impact of Short-form Video Recommender Systems on Users with ADHD

A 302-participant study finds engagement-optimized short-form video recommenders cause disproportionate time blindness and distress for users with ADHD.

Researchers ran a stratified Prolific study with 302 participants comparing short-form video recommendation experiences with and without ADHD. Participants with ADHD reported significantly higher time blindness, post-usage regret, and emotional distress despite perceiving recommendations as similarly relevant. The paper proposes neurodiversity-aware, human-centered design interventions to mitigate these algorithmic harms.

arXiv cs.AI / cs.LG / cs.CL·Sep 7, 17:38 UTC · 8d agoAI research

Trends in Web Threats: Old Web Skimmer Still Active Today

Unit 42 detected 577,000 landing URL incidents in Q1 2022, with an old web skimmer family still actively stealing payment card data.

Palo Alto Unit 42 detected 577,275 landing URL incidents (116,643 unique) and 2,043,862 malicious host URL incidents (180,370 unique) between January and March 2022. Web threat volumes declined after the November 2021 holiday peak, but an old web skimmer family remained active. Business and economy sites overtook personal sites as the most common apparently benign entry points. Most malicious domains geolocated to the United States, Germany, and Russia, though proxy servers and VPNs obscure true locations.

Palo Alto Unit 42·Aug 17, 13:05 UTC · Aug 17, 2026Research

Can Foundation Models Moderate Online Content? Evaluating Instruction- vs. Example-Driven Policy Operationalization

ModerationBench shows foundation models can nearly triple Bluesky's moderation F1 (0.60 vs 0.22), with instruction- and example-driven guidance performing comparably.

Researchers built ModerationBench, a new benchmark of 4,000 manually annotated in-the-wild posts from Bluesky, to test whether foundation models can reliably operationalize content moderation policies. They systematically compare instruction-driven guidance (reasoning from policy precepts) with example-driven guidance (generalizing from precedents) for Vision-Language Models. Both paradigms achieve comparable peak effectiveness, and foundation models nearly triple the F1 of Bluesky's deployed moderation system on Random Posts (0.60 vs 0.22).

arXiv cs.AI / cs.LG / cs.CL·Sep 9, 16:30 UTC · 7d agoAI research1

Your Website Now Has Two Audiences: Humans and AI

Akamai argues websites now serve two audiences — humans and AI agents — reshaping web traffic, content delivery, and site design considerations.

Akamai published a blog post examining how websites now face traffic from both human visitors and AI systems such as crawlers and agents. The piece frames this dual audience as a trend affecting how sites are built, measured, and managed. No further article text was available, so specific findings are not known.

Akamai Blog·Aug 17, 12:00 UTC · Aug 17, 2026AI industry

Instagram's head says engagement falls by half without the algorithm

Instagram head Adam Mosseri says disabling ranked feeds cuts engagement up to 50%, amid Australian legislation that would force platforms to offer algorithm opt-outs.

Meta's Adam Mosseri told an Australian press briefing that users switching to chronological feeds see engagement fall by as much as 50% and satisfaction drop sharply, arguing ranked feeds deliver a better experience. Australia's draft Digital Duty of Care bill would require platforms to prompt users to disable algorithmic ranking. The EU's Digital Services Act Article 38 has required very large platforms to offer a non-profiling feed option since 2023, with modest adoption. Meta also faces a social media harms trial in which Instagram's addictive design is at issue.

Hacker News · AI·Sep 11, 11:24 UTC · 5d agoAI policyHN 46↑ · 52 comments

Rapidly scaling online storage to serve over 1 billion ChatGPT users

OpenAI's Habitat online storage platform now handles over 70 million requests per second and 500 PB of data for 1 billion users.

OpenAI details the evolution of Habitat, its online storage platform backing ChatGPT and other products, which began in mid-2024 as a Python client-side library over Azure Cosmos DB. Habitat now processes more than 70 million requests per second, serves over 500 petabytes of data across nearly 40 geographic regions, and supports over 1 billion users weekly. By mid-2025 the client library approach became brittle, so OpenAI moved Habitat into a standalone service to centralize deployments, observability, and multi-tenancy reliability. This is part one of a two-part series; a future post will cover read optimization and scaling the Azure Cosmos DB partnership.

OpenAI News·Sep 11, 10:00 UTC · 5d agoAI tools & infra1

Trends in Web Threats: Attackers Were More Active During Holiday Season

Unit 42 tracked 533,000 malicious landing URL incidents from October-December 2021, showing web threats peaked during the holiday shopping season.

Unit 42 detected 533,452 malicious landing URL incidents (120,753 unique) and 2,906,875 malicious host URL incidents (165,255 unique) from October through December 2021. Threat activity peaked in November, likely tied to Black Friday in the United States, United Kingdom, and Germany. Most malicious domains appeared to originate in the United States, followed by Russia and Germany. Personal sites, blogs, business sites, and shopping sites were the most common apparently benign entry points for attacks.

Palo Alto Unit 42·Aug 17, 13:06 UTC · Aug 17, 2026Research

Third-Party Script Security: How Tags, Pixels, and Embeds Can Put Websites at Risk

Sucuri details how third-party tags, pixels, and embeds expand website attack surface, letting compromised vendors read data and alter pages.

The article explains that third-party scripts used for analytics, ads, chat, payments, and video can read page content, collect visitor data, and change what users see. A compromise of the vendor, account, or integration configuration can affect every page loading the script. It recommends inventorying scripts, understanding their purpose and ownership, and detecting unexpected changes rather than removing useful integrations.

Sucuri Blog·Aug 24, 22:31 UTC · 22d agoResearch

Mathspace Data Breach Exposes Over 1 Million People

Mathspace breach exposed data of 1,079,819 Australian and New Zealand users via exploited Metabase zero-day CVE-2026-72898; ShinyHunters claimed responsibility.

Mathspace disclosed a breach affecting 1,079,819 students, teachers, staff, and parents in Australia and New Zealand. Attackers exploited the Metabase SQL injection zero-day CVE-2026-72898 (CVSS 10), patched August 6, and accessed Mathspace's self-hosted instance from August 10; ShinyHunters claimed the Metabase hacks. Exposed data includes names, usernames, emails, and login dates; no passwords, academic records, or credentials were taken.

SecurityWeek·Sep 8, 10:47 UTC · 8d agoData breach in the wildCVE-2026-72898

ApateWeb: An Evasive Large-Scale Scareware and PUP Delivery Campaign

Unit 42 uncovers ApateWeb, a campaign using over 130,000 domains and multilayered redirects to deliver scareware, adware and PUPs to millions of users.

Unit 42 discovered ApateWeb, a large-scale campaign using a network of more than 130,000 domains to deliver scareware, potentially unwanted programs, adware including a rogue browser and browser extensions, and scam pages. The campaign uses a three-layer structure with deceptive emails as the entry point, centralized victim tracking via UUIDs, intermediate adware or anti-bot redirections, and evasion tactics such as cloaking, bot detection error pages, and wildcard DNS abuse. Activity spiked since August 2022, with several hundred attacker-controlled sites remaining in Tranco's top 1 million rankings and millions of monthly hits; Unit 42 blocked an estimated 3.5 million sessions across 74,711 devices in November 2023.

Palo Alto Unit 42·Aug 17, 12:48 UTC · Aug 17, 2026Phishing & fraud in the wild

“This is the AI men actually use”: Meta ads pushed apps nudifying real teens

TTP found Meta ran ads for AI nudify apps using real photos of minors, including a CSAM ad, drawing scrutiny from US and Australian regulators.

The Tech Transparency Project reported that Meta served ads for AI nudify apps using photos of real teens, which collectively reached over 29,000 people in the EU and 6,800 in the UK, with about 80% of ads shown in the US. A Facebook page posing as representing the Church of Jesus Christ of Latter-day Saints ran a CSAM ad that Meta only disabled after TTP flagged it. Michigan and Florida attorneys general are investigating, Senator Mark Warner has demanded action, and Australia's eSafety regulator requested information from Meta at a senior level. Meta said flagged ads averaged fewer than 200 impressions with total spend under $5,000.

Ars Technica · AI·Sep 8, 18:43 UTC · 7d agoAI safety & security

Meta to Pay Up to $18B Over Teen Social Media Use

Meta agreed to pay up to $18 billion and cap teen Facebook and Instagram use at two hours daily, settling child-safety lawsuits from most US states.

Meta settled claims that it deliberately designed Facebook and Instagram to addict children, ending a federal trial as Instagram head Adam Mosseri began testifying and Mark Zuckerberg was expected to testify. Of roughly $16.7 billion for 47 states and territories, $12.7 billion is guaranteed and $5 billion is contingent on Snapchat, TikTok and YouTube adopting similar teen protections. The deal also resolved state privacy claims tied to Cambridge Analytica for an additional $459 million, while New Mexico (a $567 million ruling) and Florida opted out of the settlement.

Security Affairs·Aug 27, 08:15 UTC · 20d agoPolicy & legal

Researchers Uncover 10,000+ Malware Loaders Behind YouTube and SEO Poisoning Campaign

Unit 42 uncovers CL-CRI-1171, a two-year pay-per-install campaign distributing 10,000+ OfferLoader samples via YouTube and SEO poisoning.

Palo Alto Networks Unit 42 tracked a campaign as CL-CRI-1171, an infection-as-a-service platform operating for at least two years. It used 11 YouTube gaming channels with hundreds of thousands of subscribers and SEO-poisoned download pages for trojanized WinDirStat and Bluetooth driver installers to distribute OfferLoader, a disposable loader embedded in Inno Setup installers. Payloads delivered included Insomnia RAT (Node.js and Python backdoors), ARKTunnel (a WebSocket-based RAT using LSB steganography), and Docro Hijacker (Chrome browser hijacker), with later infections delivering GCleaner and Socks5Systemz. Over 200 rotating domains across .xyz, .cfd, .space, and .info TLDs were used, with gating filters that served broken links or decoy pages to scanners and researchers.

GBHackers·Sep 11, 12:24 UTC · 5d agoMalware in the wild2

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 108

Security Affairs·Aug 2, 17:55 UTC · Aug 2, 2026Malware

Learning never stops: How AI makes learning continuous

OpenAI report describes how students and educators use ChatGPT to extend learning continuously beyond the classroom.

OpenAI published a report examining how students and educators use ChatGPT to make learning more continuous. The report describes support that extends beyond the classroom, positioning ChatGPT as an ongoing learning companion. The release is part of OpenAI's education-focused communications rather than a technical or safety research paper.

OpenAI News·Aug 26, 10:00 UTC · 21d agoAI industry

Generative Marketing Mix Modeling: A Causal Inference Framework Linking GEO and GEM to Business Impact

Paper proposes Generative Marketing Mix Modeling to causally estimate Generative Engine Optimization and Marketing effects on business outcomes.

The authors develop GMMM, a causal inference framework for measuring how often users see and notice a firm's name in generated answers, which standard marketing data ignore. For GEO it combines repeated generated answers with question counts, shares of generative-system usage and notice probabilities; for GEM it uses sponsored placement records with notice probabilities. The framework compares expected business responses under alternative treatment sequences, establishes identification conditions, and is evaluated on simulated product-recommendation answers in English and Japanese.

arXiv cs.AI / cs.LG / cs.CL·Sep 10, 17:57 UTC · 5d agoAI research

"Blank Slate" Campaign Takes Advantage of Hosting Providers to Spread Ransomware

Unit 42 profiles the Blank Slate malspam campaign: blank emails with double-zipped attachments delivering Cerber ransomware while cycling abused hosting provider domains.

The Blank Slate campaign sends empty emails containing double-zipped archives with macro-enabled Word documents or JavaScript files that launch PowerShell to download ransomware, primarily Cerber, and occasionally Sage 2.0 or Locky. Unit 42 observed 555 campaign domains over seven months, with actors repeatedly registering new domains and cycling abuse of legitimate hosting providers after takedowns. In a five-day January-February 2017 window, at least eight domains across seven IP addresses were observed hosting Cerber payloads.

Palo Alto Unit 42·Aug 17, 09:53 UTC · Aug 17, 2026Threat actor in the wild1

Codex bundles LibreOffice

OpenAI's Codex desktop app bundles 1.7GB of runtimes including full Python, Node.js, Poppler, git, and LibreOffice binaries.

Blogger Simon Willison found that the OpenAI Codex desktop app (since rebranded to ChatGPT) keeps about 1.7GB in a ~/.cache/codex-runtimes/codex-primary-runtime folder, including full Python and Node.js installations plus native binaries for Poppler, git, and the LibreOffice office suite. Bundled skills in the plugins directory instruct Codex on how to find and use these binaries. The observation highlights the heavyweight local runtime stack shipped with agentic coding tools.

Simon Willison·Sep 1, 19:03 UTC · 14d agoAI tools & infra1

Premium seats are coming to ChatGPT Business

OpenAI launches premium seats for ChatGPT Business with 5x usage and no five-hour limit.

OpenAI introduced premium seats for ChatGPT Business, offering 5x more usage than standard seats. Premium seats remove the five-hour usage limit and add flexible seat options. The change targets heavier enterprise users of ChatGPT.

OpenAI News·Aug 10, 00:00 UTC · Aug 10, 2026AI industry

Engineered Persuasion: Evaluating Personalized Pretexts in LLM-Generated Spear Phishing

A study of 180 US workers found each LLM phishing personalization level raised click-intention odds by 28%, but credibility depends on context fit.

The arXiv paper evaluates how personalized pretexts in LLM-generated spear phishing affect perceived credibility, using 180 US working adults across 1,436 evaluations of emails with four cumulative personalization levels, from workplace context to shared-project details. Convincingness rose 2.40 points per level in sensitivity analysis and click-intention odds increased 28% per level, while non-clickers shifted toward deleting rather than reporting. Qualitative coding showed details matching the recipient's role and routines supported credibility, whereas incorrect, vague, or channel-inappropriate details raised suspicion. The authors argue personalization effectiveness depends on pretext fit, with implications for workplace security training.

arXiv cs.CR·Sep 3, 19:21 UTC · 12d agoResearch