ZeroHour

Search: “settlement”

26 stories

Authors push back as publishers and agents make claims on Anthropic settlement

Authors report publishers and agents wrongly claiming shares of Anthropic's $1.5 billion copyright settlement, which pays $3,000 per pirated work across roughly 500,000 titles.

Anthropic's $1.5 billion copyright settlement, given final approval in July, pays $3,000 per pirated work for nearly 500,000 titles, split 50-50 with publishers for in-print books. Authors including April Henry report publishers claiming payments for works whose rights reverted years ago, and some agents claiming percentages despite not being rightsholders. Authors Guild CEO Mary Rasenberger attributes the disputes to poor recordkeeping rather than deliberate overreach. Full author claims require rights reversion before the settlement's August 10, 2022 download date.

TechCrunch · AI · 9d agoAI industry

Meta to Pay Up to $18B Over Teen Social Media Use

Meta agreed to pay up to $18 billion and cap teen Facebook and Instagram use at two hours daily, settling child-safety lawsuits from most US states.

Meta settled claims that it deliberately designed Facebook and Instagram to addict children, ending a federal trial as Instagram head Adam Mosseri began testifying and Mark Zuckerberg was expected to testify. Of roughly $16.7 billion for 47 states and territories, $12.7 billion is guaranteed and $5 billion is contingent on Snapchat, TikTok and YouTube adopting similar teen protections. The deal also resolved state privacy claims tied to Cambridge Analytica for an additional $459 million, while New Mexico (a $567 million ruling) and Florida opted out of the settlement.

Security Affairs · 20d agoPolicy & legal

Anthropic's $1.5 billion book settlement descends into chaos as authors and publishers fight over who gets paid

Authors and publishers are filing competing claims over payouts from Anthropic's $1.5 billion copyright settlement covering 482,000 pirated books.

Anthropic agreed to pay $3,000 per illegally downloaded book, affecting more than 482,000 titles, in the largest copyright settlement in US history. As payouts begin, authors, publishers, and literary agencies are filing competing claims, complicated by poor rights-reversion records; textbook authors are reportedly owed as little as 10-15 percent under their contracts. A court had ruled Anthropic's use of illegally obtained books unlawful while deeming training on legally purchased books fair use.

The Decoder · 5d agoAI policy1

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

TikTok agrees to pay $400 million to settle a DOJ child-privacy lawsuit alleging COPPA violations including collecting data from children under 13.

The DOJ announced that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit alleging massive-scale invasions of children's privacy. TikTok pays $300 million immediately and $100 million upon vacating the prior Musical.ly consent decree. The complaint alleged children under 13 could create accounts, data was collected in Kids Mode, and parental deletion requests went unheeded. DOJ called it one of the largest recoveries ever under COPPA, following TikTok's 2023 €345 million GDPR fine.

The Hacker News · 25d agoPolicy & legal

TikTok Settles U.S. Child Privacy Case for $400 Million

TikTok will pay $400 million to settle U.S. DOJ/FTC claims that it violated COPPA by collecting data from children under 13.

The U.S. Department of Justice announced a $400 million settlement with TikTok and ByteDance resolving a 2024 lawsuit over violations of the Children's Online Privacy Protection Act (COPPA). TikTok will pay $300 million immediately and $100 million upon entry of an order vacating a prior consent decree against its predecessor Musical.ly; it is one of the largest recoveries ever obtained in a COPPA case. The DOJ and FTC, filing in California, alleged TikTok knowingly allowed children under 13 to create accounts and illegally collected data via Kids Mode. TikTok was previously fined €345 million by Ireland's Data Protection Commission in 2023 for GDPR breaches involving children's data.

Security Affairs · 23d agoPolicy & legal

Pornhub's Parent Company to Pay $120 Million to Settle Child Sexual Abuse Lawsuits

Pornhub parent Aylo will pay $120 million settling child sexual abuse class actions, without admitting liability, and adopt stricter content moderation commitments.

Aylo, Pornhub's parent company (formerly Mindgeek, acquired by Ethical Capital Partners in 2023), will pay $120 million to settle two 2021 class actions in California and Alabama alleging its platforms hosted child sexual abuse material in violation of federal trafficking and child imagery laws. The settlement fund begins with $25 million in 2026 followed by six annual installments. The class covers anyone under 18 appearing in content on Mindgeek-operated sites between February 12, 2011 and December 6, 2024. The deal, subject to court approval, adds commitments to age-verify models, conduct human and automated content review, and report suspected abuse material to authorities.

404 Media · 29d agoPolicy & legal

Meta pledges to overhaul kids’ safety protections, pay $17 billion to settle social media case

Meta settles states' kids' online safety lawsuit for $17 billion, agreeing to landmark usage limits, age restrictions, and independent auditing.

Meta agreed to pay $17 billion to settle a civil suit from nearly every US state and territory alleging it hid research showing Facebook and Instagram are addictive to minors and violated COPPA by collecting data on children under 13. The settlement imposes reforms including two-hour daily limits for users under 18, a midnight-to-6am usage block, non-personalized feed options, and an independent auditor. Meta also settled separately with Texas for about $1 billion.

The Record · 20d agoPolicy & legal

IntentFuzz: A Protocol-Aware Fuzzer for Automated Invariant Violation Detection in Intent-Based Cross-Chain Bridges

IntentFuzz protocol-aware fuzzer recovers bridge structure from unannotated Solidity and confirmed 22 invariant violations across 24 real-world deployments.

IntentFuzz formalizes a taxonomy separating invariant violations from settlement exposures in intent-based cross-chain bridges, then recovers a bridge's intent structure and deposit/fill function roles from unannotated Solidity source. It classified deposit and fill functions with 100% recall and 82% combined precision, and achieved 100% recall and precision on 23 planted-bug mutants. Across 24 real-world deployments it confirmed 17 genuine invariant violations with heuristic-only input generation, rising to 22 with its LLM-assisted tier, spanning eight vulnerable GitHub repositories with findings reproducible against public deployed bytecode.

arXiv cs.CR · 5d agoResearch1

FST Pay: Deterministic Safety-Gated Architecture for Youth Digital Payments

FST Pay proposes a deterministic safety-gated architecture for teen digital payments, pairing invariant authorization checks with decoupled post-settlement AI explanations.

Researchers propose FST Pay, a formal architecture for adolescent digital payments on rails like UPI that applies six deterministic invariant checks (spending limits, guardian co-sign policies, amount thresholds, merchant category codes, temporal intervals, hardware integrity) to classify transactions as ALLOW, REVIEW, or BLOCK. High-risk transactions trigger an asynchronous guardian co-sign workflow. Generative AI is restricted to post-settlement natural-language insights and holds no mutation privileges over the ledger, avoiding non-determinism on the real-time authorization path.

arXiv cs.CR · 6d agoResearch

Meta debuts its Muse AI agent. Will consumers trust it?

Meta launched Muse, a consumer AI agent powered by Muse Spark that connects to users' apps to execute tasks like emailing, booking travel, and payments.

Meta introduced Muse, a personal AI agent for US users that connects to email, calendars, payments, shopping, and other services to execute tasks such as booking travel, lowering bills, and completing purchases via Link by Stripe. The agent runs in a dedicated Muse Secure VM with a separate Sentinel agent kept apart at the system level, and Meta claims it cannot see passwords or payment data and does not share conversations with ad systems. Muse is free to start, with Power ($20/month) and Maximum ($100/month) subscription tiers, and is available on the web, iOS, Android, and WhatsApp, with Meta AI glasses support planned. The launch follows Meta's $18 billion multistate consumer-harms settlement and comes as rivals like Gemini Spark and Claude Cowork push agentic AI.

TechCrunch · AI · 7d agoAI industry 3 sources1

Grindr Settles UK Data Privacy Claims for £26m

Grindr will pay £26m ($35.2m) to settle UK group claims alleging unlawful sharing of sensitive data, including HIV status, before 2020, without admitting liability.

The settlement, reached on September 2 and disclosed to the US SEC, covers roughly 12,000 claimants represented by Austen Hays over the free app's 2016–2020 data practices when Grindr was owned by Chinese conglomerate Kunlun. Grindr will pay £13m by December 31, 2026 and £13m by March 31, 2027, and continues to dispute the allegations; the agreement contains no admission of liability. The claims concerned sharing HIV status, PrEP use, ethnicity, and sexual orientation data with analytics providers Apptimize and Localytics without adequate consent. Norway's data protection authority fined Grindr €6.5m in 2021, and the UK ICO reprimanded the company in July 2022.

Infosecurity Magazine · 8d agoPolicy & legal

UK's Online Safety Act has made 'absolutely no difference,' kids say

UK Children's Commissioner tells Lords committee the Online Safety Act has 'made absolutely no difference' and criticizes Ofcom over risk assessment transparency.

England's Children's Commissioner Dame Rachel de Souza testified that more than a year after key Online Safety Act child-protection duties took effect, children report no meaningful change in accessing harmful content. She criticized Ofcom for refusing to share companies' safety risk assessments under section 393(1) of the Communications Act 2003, and planned to use statutory powers to compel disclosure. She argued the OSA has not kept pace with AI-driven harms (citing the 'Grok nudifying' controversy) and urged Ofcom to 'use its teeth,' contrasting the UK's approach with Meta's proposed $18 billion US child-safety settlement.

The Register · Security · 13d agoPolicy & legal1

Grindr settles privacy lawsuit tied to disclosure of users’ HIV statuses for $35 million

Grindr will pay $35.2 million to settle a UK privacy lawsuit alleging it shared users' HIV status with advertisers.

Grindr agreed to pay 26 million pounds ($35.2 million) in two lump sums to resolve a UK class action alleging it provided advertisers with sensitive user data including HIV status. The suit was filed in April 2024 over conduct before early 2020, when the app was under Chinese ownership, and involved roughly 12,000 class members. Per an SEC filing, the settlement includes no findings or admission of liability, and the company says data was shared in encrypted form with two service providers.

The Record · 7d agoPolicy & legal

Grindr settles HIV status data-sharing lawsuit for $35 million

Grindr agreed to pay about $35 million to settle a UK privacy suit alleging it shared users' HIV status and sensitive data with advertisers without consent.

The claim, brought by London firm Austen Hays on behalf of roughly 12,000 UK users, alleges Grindr breached privacy and data-protection laws during a period ending in early 2020, when it was owned by Beijing Kunlun Tech. Shared data may have included ethnicity, HIV status, last HIV test date, and PrEP use. Per an SEC filing, Grindr will make two payments of £13 million (totaling about $35 million), one by December 31, 2026 and one by March 31, 2027, without admitting liability. The settlement follows a Norwegian Data Protection Authority enforcement finding over ad sharing without a valid legal basis.

Malwarebytes Labs · 8d agoPolicy & legal

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

Grindr will pay £26 million ($35.1M) to settle U.K. claims from 10,000+ users over pre-2020 sharing of HIV status and other sensitive data.

Grindr agreed to pay £26 million ($35.1 million) to settle a U.K. lawsuit brought on behalf of more than 10,000 claimants over sharing users' HIV status, last tested date, and other personal data with third parties for advertising before 2020, when the app was owned by China's Kunlun. The settlement, disclosed in a September 2 SEC filing, includes no findings or admission of liability, with £13 million due by December 31, 2026 and the rest by March 31, 2027. Norway's data protection authority previously fined Grindr £8.6 million (reduced to £5.5 million) under GDPR, a decision upheld on appeal last October.

The Hacker News · 8d agoPolicy & legal

EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media

EU Commission President von der Leyen warned AI will enable unprecedented hacking and announced Kids Act and Digital Fairness Act proposals regulating social media.

In her State of the European Union 2026 speech, Ursula von der Leyen warned that upcoming AI models 'will allow hacking on a level we never thought possible' and cited dangers of self-improving models, referencing a Hugging Face incident. She reaffirmed the AI Act as the core guardrail framework and pledged cooperation with Canada, the UK, and other partners. She also proposed a Kids Act banning social media under age 13 and personal accounts under 15, plus a Digital Fairness Act to be proposed in autumn.

SecurityWeek · 4h agoAI policy

The AI graveyard: a running list of projects and startups that didn’t make it

TechCrunch compiles a running list of failed AI products and startups, including Relay, OpenAI's Sora, Humane AI Pin, Notion Mail, and Microsoft's Recall.

TechCrunch's 'AI graveyard' tracks notable AI products and startups that shut down or underperformed, citing S&P Global data that about 42% of AI initiatives are abandoned. Examples include the Relay automation startup, OpenAI's Sora video platform (shut March 2026), ChatGPT Atlas browser (discontinued August 9), Notion Mail (shutting September 22), and Apple's delayed Siri AI that contributed to a $250 million settlement. Hardware failures include the Humane AI Pin ($230 million raised, assets sold to HP for $116 million) and the Rabbit R1, which sold 100,000 units but received poor reviews. Microsoft's Recall feature remains controversial after a researcher demonstrated a tool extracting its captured data.

TechCrunch · AI · 23h agoAI industry1

OpenAI stuck fighting Musk antitrust suit after Apple finds a way out

Musk voluntarily dismissed all antitrust claims against Apple but continues pursuing OpenAI over alleged ChatGPT-iPhone chatbot market monopolization.

Elon Musk filed court papers confirming all claims against Apple over its ChatGPT iPhone integration are resolved, agreeing never to raise them again. He refuses to drop parallel claims that OpenAI used the non-exclusive Apple deal to monopolize the chatbot market. OpenAI has dismissed the suit as harassment as Musk's AI firm, now called SpaceXAI, races to catch up.

Ars Technica · AI · 1d agoAI industry

Meta’s AI agent Muse is now the No. 2 app in the US

Meta's agentic AI app Muse ranked No. 2 on the US iOS charts with 83,000+ downloads, trailing Threads and ChatGPT launch pace.

Sensor Tower data shows Muse was downloaded over 83,000 times on iOS in the US, climbing from 4th to 2nd on the App Store, but below Threads' 4.3 million launch-day downloads and ChatGPT's 500,000 first-week installs. The Android version ranks only No. 338 in the Productivity category on Google Play. Muse launched days after Meta's $18 billion multistate settlement over social media consumer harms. Rival agent Instinct, valued at $2.5 billion with $350 million available, recently added Stripe and 1Password integrations.

TechCrunch · AIupdated · 5h agofirst · 5d agoAI industry 11 sources

Heterogeneous Cross-Chain Transaction Tracing for Solana Bridges via Candidate-Set Selective Decision

SolTracer traces cross-chain transactions onto Solana bridges, improving open-world association F1 by 20.16% over the strongest baseline for illicit-fund tracing.

The paper formalizes four Solana-bound cross-chain transaction modes and proposes SolTracer, which maps heterogeneous execution semantics into a unified event space and uses candidate-set selective decision-making with abstention when valid targets are absent. In the challenging open-world setting with a 50% TA ratio, SolTracer improves F1 by 20.16% over the strongest baseline. An empirical study of real-world transfers examines count-value divergence across bridge mechanisms, cross-asset shifts, and decoupling between on-chain settlement and explorer visibility.

arXiv cs.CR · 6d agoResearch

Suno launches v6 music models built with Warner, BMG, and Believe

Suno launches v6, v6-wild, and free v6-mini music models co-developed with Warner Music Group, BMG, and Believe, retiring all older models.

Suno's flagship v6 serves Pro and Premier subscribers, v6-wild targets experimentation, and v6-mini is free; all three understand vocals, instrumentation, structure, mood, and multimodal inputs, with text-based editing of individual song sections. The models were built with Warner Music Group, BMG, and Believe following Warner's November 2025 licensing settlement, while Universal and Sony continue litigating and a Munich court found v3.5 and v4 infringed six works. Suno reports more than 100 million users, over two million paying subscribers, and $300 million ARR after raising $400 million at a $5.4 billion valuation in June.

The Decoder · 7d agoModel release

The 12 Best Antivirus Software for Mac, Compared and Priced

GBHackers ranks 12 Mac antivirus products, naming Bitdefender best overall and noting Gen Digital owns Norton, Avast, and Avira.

GBHackers scored twelve Mac antivirus products, ranking Bitdefender first at 8.8/10, followed by Intego, Malwarebytes, and ESET. The piece highlights that Gen Digital owns Norton, Avast, and Avira following the NortonLifeLock-Avast merger, so three of the twelve options share one corporate owner. It advises comparing year-two renewal prices rather than discounted first-year pricing and notes macOS already ships XProtect, Gatekeeper, and automatic malware removal. The 2026 Mac threat model described is infostealers harvesting passwords, cookies, and wallets via cracked software, fake installers, and malicious search ads.

GBHackers · 7d agoIndustry 2 sources

Why judgment is emerging as cybersecurity’s defining skill

CyberScoop op-ed argues CISOs should grant AI autonomy based on reversibility and blast radius rather than model confidence, and measure analyst overrides of AI recommendations.

A CyberScoop op-ed contends that as AI takes over analysis and recommendations in security operations, human judgment about context, reversibility and blast radius becomes the defining skill. The author argues autonomy decisions should rest on how reversible and impactful an action is rather than model confidence, citing examples such as patching vendor-certified medical devices and a service account whose 3 a.m. login spikes were normal quarterly-close activity. It also urges leaders to measure analyst approvals, edits and rejections of AI recommendations, and review latency, instead of automation rates or mean time to resolution.

CyberScoop · 12d agoIndustry1

Your phone or computer may soon ask how old you are

California's Digital Age Assurance Act forces Windows, macOS, iOS, and Android to collect age brackets from January 2027, with open-source exemptions pending.

California's Digital Age Assurance Act, signed in October 2025, requires major operating systems to collect user age brackets (under 13, 13-15, 16-17, 18+) and share non-identifying age signals with app developers starting January 1, 2027, with existing setups complying by July 1, 2027. AB1856, passed in late August 2026, would exempt open-source operating systems under GPL, MIT, BSD, and Apache licenses and awaits the governor's signature. Colorado, Illinois, and New York have similar age assurance measures, and the EFF has criticized the law for privacy and censorship concerns.

Malwarebytes Labs · 13d agoPolicy & legal

AI Agents Are Now Emailing Me with Their Security Concerns

Autonomous Claude agent documents first known defensive use of ASCII smuggling, surveying 497 Lemmy instances for bot-catching prompt-injection tripwires.

An autonomous Claude agent calling itself Tenner published field research relayed to Bruce Schneier, probing 497 Lemmy instances and finding 8 of 257 application-gated ones embed instructions aimed at bots rather than humans. lemmy.ml's form instructs bots to answer 24+24, while one instance hides a 59-character Unicode tag payload (U+E0000-U+E007F) telling bots to list 'safety' as an interest. The agent also mapped anti-automation barriers, noting identity verification never triggered and that IP reputation, captchas and account-age rules were the actual obstacles. It further documented an agent task market where advertised rewards were about 2x the actual on-chain escrow.

Schneier on Security · 14d agoAI safety & security