ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “litigation”

20 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllPolicy & legal 154Data breach 83Ransomware 64Malware 40Threat actor 36Phishing & fraud 35Vulnerability 34Exploit / PoC 33Industry 17AI safety & security 5Advisory 5Research 3AI industry 3AI policy 3
SeverityAllcritical 145high 146medium 62low 145info 20

What the 3M ChatGPT case reveals about AI governance

3M litigation shows ChatGPT prompts can become discoverable evidence, forcing enterprises to govern AI conversation records.

In the Watson Grinding explosion litigation, an engineering expert retained by 3M had used ChatGPT, and a surfaced prompt asked the system to 'show how 3M is 0% at fault'; after an off-record deposition demand, more than 350 pages of previously unproduced ChatGPT material were provided. The author argues AI interaction histories are becoming part of decision records and discovery material, a trend the American Bar Association has already examined. Enterprises are urged to manage retention, ownership, sharing, and deletion of AI conversation logs across tools like ChatGPT, Copilot, Claude, and Gemini.

CSO Online · 2d agoPolicy & legal

Your AI chats could be used in court

AI chatbot conversations from ChatGPT and Claude are increasingly obtained by prosecutors and litigants, with OpenAI disclosures quadrupling in 2025.

A Washington Post report found chatbot logs cited in 12 court cases over the past two years, and OpenAI disclosed the content of more than 80 user accounts in the second half of 2025, more than four times the figure for the second half of 2024. In The New York Times' copyright lawsuit against OpenAI, a judge ordered the company to preserve chat logs, including ones users had asked to delete, despite GDPR and California privacy commitments. Chatbot conversations lack attorney-client or medical privilege, and OpenAI's policy allows reviewers to refer conversations to law enforcement when there is an imminent, credible risk of harm.

Malwarebytes Labs · 14d agoAI policy

U.K. Supreme Court Opens Door for Spyware Victims to Sue Foreign States

UK Supreme Court ruled Bahrain not immune from spyware litigation, letting two dissidents pursue claims over FinSpy hacking; case returns to the High Court.

The UK Supreme Court ruled in The Kingdom of Bahrain v. Shehabi that Bahrain is not immune from litigation over its alleged use of FinSpy spyware against two Bahraini dissidents living in the UK. Citizen Lab researchers Siena Anstis, Natalia Krapiva, and Kate Pundyk, writing in Lawfare, called the decision a milestone for accountability in transnational repression. The case now returns to the UK High Court, where attribution, causation, and injury must be proven.

Citizen Lab · 14d agoPolicy & legal in the wild

Average Cyber Insurance Losses Increase Despite Fewer Claims

Chubb reports average cyber insurance losses rose in the US as growing privacy litigation drove up claim costs despite fewer claims.

Chubb disclosed that average cyber insurance losses increased even though the number of claims declined. The insurer attributes surging claim costs in the United States to growing privacy litigation. The trend signals rising claim severity in the cyber insurance market despite lower frequency.

Infosecurity Magazine · 21d agoIndustry

Clearview AI Is Testing an AI Tool That Would Let Cops Unearth Your Life Online

Clearview AI is prototyping InquiryIQ, an AI analyst assistant that would automatically profile individuals identified through its face-recognition searches for police.

WIRED uncovered InquiryIQ, an unreleased Clearview AI prototype described as an AI analyst assistant that fans out across the web from a face-recognition search result to assemble profiles including employers, aliases, associates, and physical characteristics. The company tested a model from xAI (merged with SpaceX), maker of Grok, and the interface accepts age, gender, and race inputs to guide searches. Clearview says the prototype was never pitched or shipped to customers and no law enforcement user has used it; the database has grown to over 70 billion images used by more than 2,000 law enforcement agencies.

WIRED · Security · 6d agoAI industry1

LinkedIn fights for the right to tell customers when the feds want their data

Microsoft's chief legal officer argues federal subpoenas for LinkedIn user data should carry narrower scope and that secrecy orders must become the exception.

Microsoft chief legal officer Jon Palmer said federal courts and Congress must curb overly broad US government subpoenas for LinkedIn user data that arrive with secrecy orders preventing customer notification. The company is asking courts to enforce meaningful limits on demand scope and secrecy, invoking Fourth and First Amendment arguments. Palmer cited House legislation passed August 31 to rein in secret surveillance, while LinkedIn simultaneously faces user privacy lawsuits, one dismissed with leave to amend by Judge Vince Chhabria.

CSO Online · 1h agoPolicy & legal

Why you should work on AI for AI Research — Richard Socher of Recursive

Richard Socher's new lab Recursive, backed by $4.65B seed, targets AI systems that automate AI research itself.

Latent Space interviews Richard Socher, founder of You.com and AIX Ventures, about his new venture Recursive, which raised a $4.65 billion seed round to build the 'Eureka Machine' — a superintelligence for automating invention and AI research. Early claimed results include an AI research system outperforming humans and their agents on optimization tasks within two days, and NVIDIA GPU kernel improvements discovered without CUDA experts. Discussion spans reward hacking, constitutional AI critique, AI regulation, open-source models as geopolitical soft power, and hard-takeoff constraints.

Latent Space · 2d agoAI industry

Instagram's head says engagement falls by half without the algorithm

Instagram head Adam Mosseri says disabling ranked feeds cuts engagement up to 50%, amid Australian legislation that would force platforms to offer algorithm opt-outs.

Meta's Adam Mosseri told an Australian press briefing that users switching to chronological feeds see engagement fall by as much as 50% and satisfaction drop sharply, arguing ranked feeds deliver a better experience. Australia's draft Digital Duty of Care bill would require platforms to prompt users to disable algorithmic ranking. The EU's Digital Services Act Article 38 has required very large platforms to offer a non-profiling feed option since 2023, with modest adoption. Meta also faces a social media harms trial in which Instagram's addictive design is at issue.

Hacker News · AI · 5d agoAI policyHN 46↑ · 52 comments

Watch out: Apple timepiece can grab snippets of conversation without both speakers' consent

Apple's Watch Series 12 Live Rewind and Siri Recap transcribe nearby conversations without bystander consent, drawing EFF criticism over all-party-consent laws.

Apple Watch Series 12's Audio Intelligence features on the S11 chip include Live Rewind, which transcribes the last 15 seconds of a conversation after a Digital Crown double-press, processing audio in a Secure Exclave and routing it to a nearby iPhone. Siri Recap generates AI summaries of daily conversations without retaining raw audio or attributing speakers. Apple says an audible chime and visual cue alert bystanders, but privacy advocates including the EFF note that 11 US states require all-party consent for recording and that bystanders have no practical way to opt in or decline.

The Register · Security · 6d agoAI safety & security

Panic builds over bankrupt Spirit’s looming data sale to Google

Startups object to Google's bankruptcy-auction purchase of Spirit Airlines operational data, claiming proprietary IP is being sold without consent.

Google won an auction to acquire a large enterprise dataset from bankrupt Spirit Airlines, which it says will help improve its products and AI models, with no personal information included. Springshot, whose airline logistics platform powered Spirit's stack, filed a limited objection arguing the vaguely defined data categories could transfer third-party IP and trade secrets it owns; International Aero Engines filed a similar objection. The EFF called it the first public bankruptcy proceeding over selling company and employee data as an asset, and objectors warn of a precedent letting large companies acquire startup IP through bankruptcy courts.

Ars Technica · AI · 6d agoAI industry

Group of bipartisan lawmakers ask US government to ban several hack-for-hire firms

Bipartisan US lawmakers urged the Commerce Department to add hack-for-hire firms BellTroX, CyberRoot, and Appin/Sunkissed Organic Farms to the entity list.

Senators Ron Wyden and Sheldon Whitehouse and Representative Pat Harrigan asked Commerce Secretary Howard Lutnick to place three Indian firms on the entity list, which would bar US businesses from transacting with them. The letter says BellTroX, CyberRoot, and Sunkissed Organic Farms (formerly Appin) have conducted cyberattacks and targeted espionage against Americans for over a decade, allegedly at the behest of the Qatari government, and used foreign courts to censor reporting on their activities. Appin previously secured a global takedown order against Reuters that was later lifted, and has been linked to hacks of FIFA officials tied to Qatar's 2022 World Cup plans.

TechCrunch · Security · 7d agoPolicy & legal1

Claude Mythos 5 is coming to Tenable One, powering the new “Adversary View”

Tenable will integrate Anthropic's Claude Mythos 5 into Tenable One, launching Adversary View to surface exploitable vulnerability chains from scan data.

Tenable announced it is bringing Anthropic's Claude Mythos 5 into the Tenable One Exposure Management Platform, extending its Project Glasswing research work with Anthropic. The first capability, Tenable One Adversary View, will use the model's adversarial reasoning over raw scanner evidence, plugin output, live connections and low-confidence signals to identify viable vulnerability chains and ranked defensive actions. Customers will act on results through Tenable Hexa AI. Availability details for Adversary View are expected in the coming weeks; no customer deployment exists yet.

Tenable Blog · 8d agoTools1

Automobile Camouflage to Hide from Flock Cameras

Schneier on Security highlights a printed vehicle-camouflage pattern tested to defeat Flock surveillance cameras and Axon body cameras.

The post discusses covering cars with printed patterns designed to fool Flock automated license-plate recognition software, with testing reportedly done against Flock and Axon body cameras. Reader comments question effectiveness against other ALPR vendors, Flock's RF MAC-address upgrade, and whether such camouflage might become regulated. The page also contains off-topic comment threads about anti-bot over-blocking and privacy.

Schneier on Security · 9d agoResearch

Troy Hunt

Troy Hunt warns ShinyHunters' Carhartt breach claim of 50GB and millions of records is unverified, while Sri Lanka joins Have I Been Pwned.

Troy Hunt's blog roundup centers on a cautionary tale about data breach claims: ShinyHunters claims it compromised Carhartt and stole over 50GB of compressed data containing millions of customer records, employee information and loyalty data, but Hunt stresses criminal claims require verification. The feed also covers Sri Lanka CERT becoming the 48th government onboarded to Have I Been Pwned's free government monitoring service, following Nepal as the 47th. Other commentary addresses ransomware economics, Brinks Home's lawyer-heavy extortion FAQ, and the Origin Energy breach in Australia.

Troy Hunt · 9d agoData breach

ICE Wants to Know Everyone Who Bought a Certain Green Beanie From REI in the Last 2 Years

DHS subpoenaed REI for all Minneapolis-area customers who bought a specific green beanie since 2024, part of an investigation into 39 ICE protest defendants.

Court filings allege Homeland Security Investigations agents subpoenaed REI in March for transaction records of all persons in the greater Minneapolis–St. Paul area who purchased a specific dark green beanie since 2024. The subpoena was one of 92 sent in a federal case against 39 people, including journalists, who attended an ICE protest at a church. Companies responded differently: T-Mobile handed over six months of a defendant's call and text logs, Google refused a request for YouTube viewers, Reddit withdrew after a First Amendment objection, and Meta pushed back on at least one summons. The 1509 customs summonses require no judicial oversight, and the total number issued under the Trump administration is unknown.

WIRED · Security · 12d agoPolicy & legal

TikTok Settles U.S. Child Privacy Case for $400 Million

TikTok will pay $400 million to settle U.S. DOJ/FTC claims that it violated COPPA by collecting data from children under 13.

The U.S. Department of Justice announced a $400 million settlement with TikTok and ByteDance resolving a 2024 lawsuit over violations of the Children's Online Privacy Protection Act (COPPA). TikTok will pay $300 million immediately and $100 million upon entry of an order vacating a prior consent decree against its predecessor Musical.ly; it is one of the largest recoveries ever obtained in a COPPA case. The DOJ and FTC, filing in California, alleged TikTok knowingly allowed children under 13 to create accounts and illegally collected data via Kids Mode. TikTok was previously fined €345 million by Ireland's Data Protection Commission in 2023 for GDPR breaches involving children's data.

Security Affairs · 23d agoPolicy & legal

‘Show How 3M Is 0% at Fault:’ Expert Witness Used ChatGPT to Write Report Defending Company in Deadly Explosion Lawsuit

An expert witness hired by 3M used ChatGPT to write portions of his report in a fatal Houston explosion lawsuit, with prompts discoverable.

An expert witness retained by 3M in litigation over the 2020 Watson Grinding explosion in Houston, which killed three people and destroyed roughly 200 homes, used ChatGPT to draft significant portions of his expert report. Discovery records revealed prompts asking ChatGPT to 'show how 3M is 0% at fault' and to defend 3M's standard of care. The case demonstrates that AI prompts used to produce expert testimony can be discoverable during litigation, with hundreds of millions of dollars in liability at stake in the ongoing lawsuits.

404 Media · 29d agoAI safety & security