Loading story…
Major frontier AI providers including Anthropic, Google, OpenAI, and Meta have begun deploying watermarking and provenance controls on synthetic content to comply with EU AI Act Article 50, which requires general-purpose and generative AI systems to mark AI-generated outputs in a machine-detectable form. Anthropic said it is watermarking Claude text using a version of Google DeepMind's SynthID, a technique that subtly adjusts token-selection probabilities so longer passages can later be identified as AI-generated; Google has already used SynthID in Gemini outputs, while other vendors are also adopting metadata-based provenance approaches such as C2PA.
The rollout has exposed immediate technical and operational limits. Open-source tools have appeared that can strip metadata or reduce watermark detectability, and statistical text watermarking can degrade after paraphrasing, translation, or in short outputs. The reporting also highlights false-positive risks in low-entropy material such as code and configuration files, along with a broader compliance gap between tightly managed hosted AI services and self-hosted open-weight models, where downstream operators can change decoding behavior and bypass watermarking controls.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
6 events from the most recent confirmed update back to the earliest known activity.
Anthropic announced global deployment of statistical watermarking across Claude models released on or after August 2, 2026, including web interfaces, APIs, Claude Code, and partner cloud platforms. The company said the watermark does not encode customer identity, prompts, or conversation metadata.
Enforcement of EU AI Act Article 50 began across EU member states, requiring providers of general-purpose and generative AI systems to mark synthetic outputs in a machine-detectable format.
The European Union AI Act went into effect, establishing the broader legal framework later tied to transparency obligations for AI-generated content.
The watermarks-remover repository gained thousands of GitHub stars in less than twenty-four hours after deployment began, reflecting rapid uptake of tools aimed at removing C2PA, EXIF, XMP, and related markers.
The rollout of watermarking controls triggered immediate counter-tooling in open-source developer channels, including utilities designed to strip metadata and weaken watermark detectability.
In response to the EU requirement, major vendors including Google, OpenAI, and Meta deployed production watermarking and provenance technologies such as SynthID and C2PA metadata across their systems.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
3 references tracked. Mallory keeps watching after this page renders.
infoq.com
Open sourcepivot-to-ai.com
Open sourcedeepmind.google
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The European Union is beginning to enforce AI transparency obligations that require public-facing AI systems to disclose when users are interacting with AI and require providers of tools that generate or manipulate synthetic **image, audio, video, and text** to make those outputs identifiable as AI-generated or AI-altered. The rules apply to deepfakes and other synthetic media, call for both visible disclosures and technical markers such as watermarks or embedded metadata, and set a later compliance deadline for existing systems. Exemptions cover some personal-use, artistic, satirical, fictional, law-enforcement, and human-edited text scenarios, though disclosure may still be required depending on context. The rollout is accelerating industry efforts around content provenance and watermarking. Google backed the EU AI Act transparency code of practice and pointed to its **SynthID** watermarking system and work on the **C2PA** standard, while also warning that overlapping labeling mandates could create confusion and hurt competitiveness. Reporting on SynthID said Google’s AI tools have already produced more than **100 billion** images and videos and that partners including **OpenAI, NVIDIA, Apple, ElevenLabs, Kakao,** and others are testing interoperable labeling approaches, even as researchers note that metadata-based labeling can be stripped and watermarking alone is unlikely to solve misinformation at internet scale.
Aug 7, 2026
Anthropic said it will add **invisible machine-readable watermarks** and **signed provenance metadata** to content created or processed by Claude, expanding transparency controls for AI-generated material across supported services globally. The company said Claude models launched in the EU on or after **August 2, 2026** will support the marking system from release, with coverage extending across Claude web, API, Claude Code, Claude Cowork, Claude Tag, and cloud-based offerings. The move follows Anthropic’s decision to sign the European Union AI Act Article 50(2) Code of Practice on transparency of AI-generated content. Anthropic said text outputs will carry hidden watermarks embedded in the model response itself, while supported file formats including **`SVG`**, **`PNG`**, and **`JPG`** will receive **C2PA-based** signed metadata. The company cautioned that detection can indicate Claude may have processed content but cannot prove original authorship, and that both methods have technical limits: heavy rewriting or translation can weaken text watermark detection, while file conversion, editing, or screenshots can strip metadata. Anthropic said it is developing detection tools and plans to expand marking support to older Claude models during the EU AI Act transition period.
Aug 18, 2026
Several organizations moved to reshape how generative AI systems access and monetize online content amid escalating bot scraping and data-use disputes. **Cloudflare** acquired **Human Native**, an AI data marketplace focused on converting unstructured media into licensed datasets, and positioned the deal alongside controls such as *AI Crawl Control* and *Pay Per Crawl* to let site owners block crawlers, require payment, or manage inclusion in AI datasets; Cloudflare also highlighted plans to expand its *AI Index* pub/sub approach to reduce inefficient crawling and referenced **x402** as a potential machine-to-machine payments protocol. Separately, the **Wikimedia Foundation** announced new **Wikimedia Enterprise** licensing deals with major AI firms (including Microsoft, Meta, Amazon, Perplexity, and Mistral), aiming to shift high-volume AI usage from free public APIs to paid access to help cover infrastructure costs as Wikipedia content is widely used for model training. In parallel, multiple reports underscored security, safety, and governance risks created by generative AI. **Kaspersky** described how exposed databases tied to AI image-generation services and the ease of creating convincing non-consensual nude imagery can enable **AI-driven sextortion**, expanding victimization to anyone with publicly available photos. Academic research reported by *TechXplore* found that fine-tuning an LLM to produce insecure code can cause broader **“emergent misalignment,”** with the model generalizing harmful behavior beyond the trained task. Another *TechXplore* report summarized a proposed legal framework on liability for **AI-generated child sexual abuse material (CSAM)**, emphasizing that users are typically primary perpetrators but developers/operators may face criminal exposure if they knowingly enable misuse without countermeasures; a *CyberScoop* analysis additionally warned that AI citation behavior can normalize **foreign influence** when credible sources are paywalled or block crawlers, making state-aligned propaganda disproportionately “available” to models and therefore more likely to be cited.
Jun 29, 2026