A federal judge in New Mexico ordered Meta to pay $25bn after a two-week trial found the company intentionally lied for years about how it handled and controlled Facebook user data. Evidence presented at trial included communications among senior executives, including Mark Zuckerberg, that the judge found were designed to mislead the public. The court concluded the deceptive conduct reached beyond specific data practices and went to the heart of Meta’s core business operations that rely on user information from Facebook, Instagram and WhatsApp.
The court calculated an initial penalty of $219bn based on thousands of violations of state law, then reduced the judgment to $25bn. The fine is the largest imposed against Meta to date; the company has faced multiple other legal actions and settlements this year, including an $18bn agreement with California. Meta did not immediately respond to requests for comment.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A PHP vulnerability currently has no working exploit, despite many fake PoCs circulating online. LLMs have falsely been portrayed as able to develop exploits, but practical testing shows no effective attack exists yet. (eliastaylor.com)
The Trump administration denaturalized two individuals who obtained U.S. citizenship by hiding their criminal activities. The move aims to revoke citizenship from those who gained it through fraudulent means. (justice.gov)
Meta's new enterprise terms state that if its AI makes a mistake, the customer is legally responsible. The terms also expand liability to content from partners and give Meta rights to scrape and use user content. (cio.com)
A vulnerability in HTTP/3 implementations allows remote clients to cause servers to allocate excessive memory by exploiting QPACK header compression. Seven of ten tested implementations are vulnerable, with some already patched to prevent resource exhaustion. (foxio.io)
Oracle has issued a security alert for CVE-2026-91403, affecting multiple Java and GraalVM products. Patches are available for supported versions, and Oracle recommends upgrading to ensure security. (oracle.com)
Help desks are increasingly targeted by social engineering attacks to reset MFA accounts. Effective verification methods for remote staff and contractors are being explored to prevent breaches. (news.ycombinator.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.