Loading story…
The European Commission said Meta appears to have breached EU antitrust rules by blocking third-party AI assistants from interfacing with users via WhatsApp, warning the restriction could prevent competitors from entering or expanding in the fast-growing market for AI assistants. The Commission indicated it intends to require Meta to lift the block in Europe after Meta has an opportunity to respond.
Competition Commissioner Teresa Ribera stated the Commission is considering interim measures to keep the market open during the ongoing investigation, citing the need for swift action given the pace of development in AI assistants. Ribera argued the EU cannot allow dominant platforms to illegally leverage market power to give themselves an unfair advantage in an emerging technology market.
Track how attackers are adapting to this technology.
5 events from the most recent confirmed update back to the earliest known activity.
Meta rejected the Commission's position, arguing the WhatsApp Business API is not a key distribution channel for AI assistants because users can access such services through app stores, devices, websites, and partnerships. The company also pointed to the suspended Brazilian injunction in support of its position.
The European Commission said Meta likely breached EU antitrust law by blocking third-party AI assistants from interfacing with users via WhatsApp, warning the conduct could foreclose competition in the AI assistant market. It issued a statement of objections and said it may impose interim measures to force Meta to lift the block in Europe while the investigation continues.
Meta postponed the launch of Meta AI in Europe because of concerns about using data for AI training under EU privacy rules. The rollout later proceeded under a GDPR 'legitimate interests' basis, according to the reports.
Brazilian authorities issued an order similar to the EU's concerns over Meta blocking third-party AI assistants on WhatsApp. Meta said the injunction was later suspended by a court.
Italy's competition authority imposed interim measures requiring WhatsApp to permit external AI assistants to interface with users in Italy. As a result, Italy was excluded from the European Commission's later objections, and Meta is appealing the Italian measures.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The European Commission issued two binding decisions under the Digital Markets Act requiring Google to expand interoperability on Android and provide certain Google Search data to qualifying rivals. Under the Android ruling, third-party AI assistants must be allowed access to capabilities that Google Gemini already uses, including microphone, camera, screen interaction, ambient sensor data, hotword activation, background execution, and app-driving automation, with most changes tied to **Android 18** and a broader compliance deadline of **1 August 2027**. For a smaller set of more sensitive functions, Google may require certification through a **Qualified AI Assistant Programme**, but the Commission limited Google’s discretion and required equal treatment with Gemini. A second ruling compels Google to share anonymized search query, click, and ranking data with eligible rival search engines and AI chatbots that perform search, with rollout beginning in **2027** under contractual, audit, and independent review safeguards. Google said the measures could weaken privacy and security protections, expose sensitive search histories and trade secrets, and create broader national security risks, while the Commission said the final terms include tighter safeguards than earlier drafts. Google is expected to appeal the decisions.
Jul 18, 2026
A new class-action lawsuit filed in the U.S. District Court for the Northern District of California alleges **Meta** misled WhatsApp users by marketing “unbreakable” end-to-end encryption while allegedly retaining and analyzing message content and enabling employee access via internal tools. The complaint—brought by plaintiffs from multiple countries and seeking global class certification—cites unnamed whistleblowers but reportedly provides no technical proof (e.g., logs or code) to substantiate claims that Meta can decrypt or read message contents; Meta spokesperson Andy Stone denied the allegations as “categorically false,” reiterating WhatsApp’s use of the **Signal Protocol** for end-to-end encryption. Separately, **Google** agreed to pay **$68 million** to settle a class-action lawsuit alleging **Google Assistant** unlawfully recorded users’ private conversations when inadvertently triggered (e.g., via “Hey Google” misfires) and shared recordings with third parties for advertising-related purposes. The preliminary settlement, also filed in Northern California federal court, still requires judicial approval and applies to purchasers of Google devices dating back to May 2016; Google reportedly settled without admitting wrongdoing. Together, the cases underscore ongoing legal and regulatory exposure tied to consumer privacy representations, data handling, and the gap between product claims and alleged internal access/collection practices.
Jun 29, 2026
The European Commission’s AI Office and national authorities have begun enforcing the **EU AI Act**, opening a new compliance phase for AI systems used or sold in the bloc. The rollout includes multiple reporting mechanisms for suspected violations, including a general complaints tool, an anonymous whistleblower channel, and a downstream provider complaints process tied to obligations for general-purpose AI models. Officials can impose penalties of up to **€15 million or 3% of worldwide annual turnover**, although early enforcement is expected to emphasize corrective and suspension orders that could disrupt providers more than one-time fines. The enforcement push is landing as organizations assess how the Act applies to **AI agents**, even though the law does not explicitly use that term. Guidance cited by industry observers indicates that agents accessible to EU users are generally treated as covered AI systems and must at least meet **Article 50** transparency duties, such as informing users they are interacting with AI and labeling perceptible AI-generated synthetic content. Providers that materially modify models beyond defined thresholds may face added obligations under **Articles 53 to 55**, while agents used in safety components or other **high-risk** use cases can also fall under the Act’s stricter Chapter III requirements.
Aug 13, 2026