LIVE · cybersecurity feed
Live wire
cloud

Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits

A collective of approximately 3,000 lawsuits, initiated by state attorneys general and families, is challenging Meta, Google, ByteDance's TikTok, and Snap over allegations that their platforms are intentionally designed to be addictive and detrimental to the mental health of children and teenagers. The tech companies recently experienced a significant procedural setback in their efforts to…

ZeroDay News ·

Source: Malwarebytes Labs

A collective of approximately 3,000 lawsuits, initiated by state attorneys general and families, is challenging Meta, Google, ByteDance's TikTok, and Snap over allegations that their platforms are intentionally designed to be addictive and detrimental to the mental health of children and teenagers. The tech companies recently experienced a significant procedural setback in their efforts to halt these lawsuits.

The companies had sought to appeal a federal court's decision that permitted the lawsuits to proceed, arguing before the 9th US Circuit Court of Appeals that Section 230 of the Communications Decency Act provided them immunity. This 30-year-old law generally protects platforms from liability for content posted by their users. However, on August 10, the court ruled that Section 230 serves as a defense against liability, not as a barrier to lawsuits themselves, deeming the appeal premature. The core of these cases focuses not on user-generated content, but on the platforms' alleged engineering of their systems to present content in ways that foster addiction.

Techniques cited in the lawsuits, as detailed by the Nebraska Law Review, include the use of unpredictable rewards, such as likes or message responses, to trigger dopamine release and encourage habitual checking. Interface features like the "infinite scroll" are also highlighted as tools designed to maximize user engagement. The inventor of the infinite scroll reportedly described it as "taking [behavioral] cocaine and just sprinkling it all over your interface."

This ruling by the 9th Circuit, while procedurally narrow, carries substantial strategic implications. It establishes that Section 230 is a defense to be argued at trial, rather than a mechanism to prevent lawsuits from reaching court. The Third Circuit has previously gone further, determining that Section 230 does not grant immunity to platforms facing tort lawsuits for injuries caused by their own algorithmic designs, essentially treating the algorithm as a potentially defective product.

Discovery in these cases has already unearthed potentially damaging internal communications. A 2016 email attributed to Mark Zuckerberg reportedly suggested that alerting parents to teens' live videos would "probably ruin the product from the start." A recent court filing also claimed that social media employees have likened their platforms to drugs, with one Meta employee allegedly writing, "we're basically pushers."

Snapchat has also faced scrutiny. A filing in a New Mexico case indicated that by late 2022, Snap employees were receiving approximately 10,000 sextortion reports monthly. An internal investigation reportedly concluded that 70% of victims did not report abuse due to a belief that Snap would not act, and none of the 30% who did report received a response. This information emerged from an unredacted complaint in New Mexico, not from Snap's own disclosures.

The New Mexico case against Meta, which involves similar complaints, recently resulted in a judgment totaling $942 million. The judge added $567 million to the original amount, finding that Meta had "created a public nuisance through its platform design."

Despite the alleged awareness of these issues by executives, effective safety measures have reportedly been lacking. Researchers from NYU and Northeastern University tested 86 youth safety features across various platforms and found that 51 failed their tests. Snapchat's failure rate was 73%, Instagram's 66%, YouTube's 55%, and TikTok's 50%. Nine features could not even be activated during the tests. All tested cyberbullying safeguards reportedly failed, with researchers easily finding bypasses. For example, searching "eating disorder" on Instagram's autocomplete feature reportedly suggested deliberate misspellings used by pro-eating-disorder communities to circumvent platform blocklists.

Parents are advised to independently verify the effectiveness of in-app safety features by creating test accounts and confirming that settings function as advertised. Open family discussions about social media usage and screen time are also encouraged. In cases of online harassment, children should be encouraged to report it immediately, and evidence should be saved. Blocking and reporting accounts are recommended, and involving schools or law enforcement is crucial if threats, blackmail, or sexual exploitation are involved. Reports of sextortion can also be made directly to the National Center for Missing and Exploited Children's CyberTipline, rather than relying solely on platform reporting mechanisms. The coming months are expected to determine whether these lawsuits lead to significant changes in platform design or if settlements are reached.

cloud
ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.