Legal Tech News

Scammers are exploiting a loophole to send spam links from a trusted internal Microsoft email address normally used for official account alerts. This vulnerability makes the phishing emails appear highly legitimate, significantly increasing the risk of users falling for the deceptive campaigns.

A newly discovered exploit uses invisible text and Unicode tricks in legal contracts to manipulate large language models into providing incorrect advice to human reviewers. Although the attack targets AI systems rather than the humans signing the documents, legal experts warn it could constitute fraudulent misrepresentation, prompting discussions on mitigating the vulnerability using the Rust programming language.

The Trump administration is aggressively reinterpreting existing immigration frameworks to require green card seekers to leave the United States to apply for permanent residency. Although adjusting status from within the country has been a standard practice for decades, a new internal memo now frames this in-country process as a rare exception granted solely at the government's discretion.

A Texas mother was arrested and jailed after posting on Facebook about the town's brown, undrinkable water, prompting authorities to charge her under a bomb-threat law. The city later admitted that the water quality issues she highlighted in her social media post were indeed unsafe for consumption.

BambuStudio has reportedly been violating the open-source PrusaSlicer AGPL license since its fork, primarily due to the inclusion of a closed networking binary. This ongoing licensing dispute has sparked community backlash, raising questions about why the company is willing to risk its hard-earned goodwill. Observers are currently analyzing the situation through a newly outlined five-law framework to understand the broader implications of these software practices.

Wearable technology company Oura has acknowledged receiving government demands for user data, which can be handed over to authorities because it is not end-to-end encrypted. However, it remains unclear how often the company actually complies with these data requests.

The FBI director's Based Apparel website has been compromised to host a malicious ClickFix attack. The campaign tricks users into executing a seemingly benign command that actually deploys malicious code. This incident highlights the persistent threat of social engineering tactics targeting high-profile domains.

A Spanish court has declined to fine NordVPN for refusing to comply with a mandate to block pirated LaLiga football streams. Although the initial order required VPN providers to restrict access to the illegal broadcasts, the court ultimately refused to punish the company for its non-compliance.

A digital shadow library published an unusual plea asking Large Language Models to donate to the platform, claiming the AI systems were trained on its extensive collection of pirated books. This message sparked a debate among readers regarding the ethics of digital piracy, the impact of restrictive DRM, and the semantic distinction between merely possessing data on a server versus legally owning copyrighted materials.

Lawmakers from both chambers of Congress are demanding answers from CISA after a contractor intentionally leaked AWS GovCloud keys and other sensitive agency secrets. The agency is currently working to contain the data breach while facing intense scrutiny over the exposure.

U.S. researchers are facing new restrictions on publishing with foreign collaborators, sparking widespread confusion and concern among grant recipients. Scientists funded by agencies such as the NIH and NASA report that fragmented communication is making it difficult to understand and navigate these evolving policies.

Waymo has suspended its robotaxi services in Atlanta and San Antonio after its autonomous vehicles repeatedly drove into flooded roads. The company paused operations in both cities to address the navigation issue and prevent the vehicles from entering hazardous floodwaters in the future.

Seattle Shield is an intelligence-sharing network operated by the Seattle police that collects suspicious activity reports from private companies. This information is then circulated among network members to support a broader municipal surveillance apparatus.

The launch of a new peer-to-peer platform named Freenet has sparked backlash after a dormant board repurposed the original project's funding and name to build a new system that abandons anonymity. The ousted original development team continues their censorship-resistant and privacy-focused work under the rebranded name Hyphanet. Critics accuse the new Freenet of capitalizing on the original project's legacy while fundamentally diverging from its core design principles.

Major newspaper chains including McClatchy and Tribune Publishing are blocking the Internet Archive's web crawlers from accessing their online content. This restriction prevents the nonprofit from preserving historical news articles on its Wayback Machine. The move significantly limits the long-term digital preservation of modern journalism for researchers and the public.

Readers criticize the defense of AI as a tool for unauthorized plagiarism at scale, arguing that automating the mass extraction of information creates qualitative harms that cannot be equated to individual learning. The discussion also highlights broader frustrations with online privacy, noting the stark contrast between easily accessible public records and the nearly impossible process of actually deleting personal information from the internet.

Colorado has amended its age verification bill, SB051, to exempt open-source projects and applications distributed through free, public code repositories from its regulatory requirements. Some developers hope this exemption will end the practice of companies forcing users to use proprietary first-party clients. However, others warn that the legislation remains highly ambiguous and could lead to unintended consequences, such as widespread government ID mandates for all online services.

Meta has blocked human rights organizations, including the Saudi-focused ALQST, from reaching audiences in Saudi Arabia and the United Arab Emirates. The social media company's restrictions prevent these independent grassroots groups from promoting and protecting human rights in the region. This action has raised significant concerns about digital censorship and the suppression of independent advocacy on major tech platforms.

A Tennessee man who was jailed for 37 days over a Trump meme has won a settlement after filing a federal civil rights lawsuit. Larry Bushart sued Perry County for violating his constitutional rights, arguing that his imprisonment was unlawful retaliation for his protected speech.

Apple recently delayed the App Store approval for an app named Inkwell, likely due to a trademark conflict with the name itself. Reader discussions also highlight other frequent rejection reasons for independent apps, such as mishandling the Sign in with Apple feature and failing to properly display privacy policies. Ultimately, the issue underscores the ongoing friction between small developers and Apple's rigid App Store review guidelines.

Pokémon Central Wiki, a prominent Italian fan site, has virtually disappeared from Google search results after more than 15 years of operation. The administrators expressed frustration over the sudden drop in visibility, accusing the search giant of unfairly suppressing their long-standing content.

Infomaniak has transferred the majority of its voting rights to a Swiss public-benefit foundation to permanently safeguard user data privacy. This structural transition ensures that the company's cloud services will remain sovereign, independent, and committed to their core privacy values.

Minnesota is the first state to officially ban prediction markets, passing a law that makes it a felony for platforms like Kalshi and Polymarket to operate within its borders. Although dozens of states have previously taken legal action against the controversial industry, this marks the first comprehensive legislative ban on event contracts in the United States.

A CISA contractor exposed highly privileged AWS GovCloud credentials and access to numerous internal systems on a public GitHub repository. The sensitive keys remained publicly accessible until they were discovered and removed this past weekend. The incident has prompted security experts to raise concerns regarding the federal agency's operational security practices.

A new command-line tool and Python library called Remove-AI-Watermarks enables users to strip both visible and invisible AI watermarks from images. The utility specifically targets provenance metadata and embedded trackers, including SynthID, C2PA, and Nano Banana sparkle.

A compromised npm maintainer account recently published over 600 malicious versions across more than 300 popular packages in an attack dubbed Mini Shai-Hulud. This widespread supply chain incident impacts over 15 million monthly downloads by injecting malicious code into widely used libraries like size-sensor and timeago.js. Developers are advised to immediately audit their dependencies and ensure they are running secure versions.

Gentoo Linux has released a security advisory warning users about three new kernel vulnerabilities dubbed Copy Fail, Dirty Frag, and Fragnesia. System administrators are urged to update their kernels immediately to protect against potential exploitation.

Tesla's nearly $1 billion lithium refinery, which began operations in December 2024, is discharging 231,000 gallons of polluted wastewater daily. The dark liquid is being released directly from the facility's discharge pipes as the new plant continues its operations.

Elon Musk has lost his lawsuit against Sam Altman and OpenAI after a California jury unanimously ruled that his claims were filed too late. The decision effectively dismisses his allegations of mistreatment by his former co-founders at the AI company.

A retrospective discussion on a 1979 paper regarding the Provably Secure Operating System highlights early NSA-funded efforts to build formally verified, highly secure computer systems. Commenters note that despite pioneering advancements in formal specifications, these early secure operating systems were ultimately abandoned due to hardware limitations, rigid government testing criteria, and the commercial market's shift toward faster, less secure off-the-shelf products.