LIVE · cybersecurity feed
Live wire
security

Meta agrees to $18 billion settlement over teen social media harms

Meta has reached a proposed settlement of up to $18 billion with a bipartisan coalition of 52 state attorneys general, addressing allegations that its Facebook and Instagram platforms were intentionally designed to foster compulsive use among children and teenagers. The agreement, which is currently awaiting court approval, resolves a 2023 lawsuit initiated by California Attorney General Rob…

ZeroDay News ·

Source: BleepingComputer

Meta has reached a proposed settlement of up to $18 billion with a bipartisan coalition of 52 state attorneys general, addressing allegations that its Facebook and Instagram platforms were intentionally designed to foster compulsive use among children and teenagers. The agreement, which is currently awaiting court approval, resolves a 2023 lawsuit initiated by California Attorney General Rob Bonta and other state attorneys general.

The lawsuit contended that Meta engineered features to drive addictive behavior in young users while simultaneously misleading the public, families, and users about the inherent risks of its platforms. Additionally, the attorneys general accused Meta of unlawfully collecting and utilizing data from children under 13, in violation of federal and state statutes, including the Children's Online Privacy Protection Act (COPPA), California's False Advertising Law, and California's Unfair Competition Law.

Under the terms of the settlement, Meta will implement new restrictions for users under 18 on both Facebook and Instagram. These include a default two-hour daily usage limit, which can only be overridden with parental consent. This limit would be further reduced to one hour if YouTube and TikTok agree to similar provisions. Meta will also, by default, block teens from using its applications between midnight and 6 a.m. and mute most notifications between 10 p.m. and 7 a.m., as well as during school hours. Parents will have the option to modify these nighttime and school-hour notification settings, though direct messages and certain account security or safety alerts are exempt from some of these restrictions.

Further requirements include concealing like and reaction counts from teenagers, prohibiting cosmetic surgery filters, offering an option for a non-personalized feed, enhancing parental supervision tools, and deploying additional age-verification technologies to identify users under 18 and remove those under 13. An independent auditor will oversee Meta's adherence to the agreement, and the company will be barred from making false or misleading statements about its safety features.

Meta has stated that the agreement involves approximately $18 billion in payments spread over ten years. Participating states are slated to receive roughly $12.7 billion. An additional $5.3 billion will only be disbursed if YouTube and TikTok adopt comparable changes, including one-hour daily limits, nighttime restrictions, and age-assurance measures, and each makes a matching payment. Meta indicated that this structure is intended to encourage industry-wide adoption of these protective measures.

California anticipates receiving between $1.5 billion and $2.1 billion from the settlement. Attorney General Bonta's press release stated that a significant portion of California's payment is earmarked for purposes related to the prevention or remediation of mental health or other harms to young Californians associated with social media use, with the final allocation to be determined by the Legislature and Governor. Meta expects to incur approximately $10 billion in legal expenses related to this agreement in the third quarter of 2026.

Most of the new protections are mandated to remain in effect for ten years. The agreement also establishes an independent research foundation dedicated to studying teen well-being and social media use.

ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.