#FactCheck- Old SCO Summit Video Misrepresented as Pakistan-Iran Meeting

Introduction
‍

Meta Platforms is experiencing a long-term surge of lawsuits that not only question particular practices, but also the very design and governance of its platforms, across the United States and beyond. This range of privacy breaches to youth mental health damages and antitrust issues are all indicative of a new era of judicial, regulatory, and civil society scrutiny of the duties of big tech firms. The main question is no longer whether harmful content is placed on platforms, but to what extent they are actively creating harm-producing environments.
‍

From Content to Conduct: A Turning Point in Legal Strategy
‍

Over the years, Meta and other sites have depended on legal safeguards like the US Communications Decency Act, Section 230, which protects companies against liability due to user-created content. New ways of testing that protection are now being tried.

Recent incidents have shifted off the blame of particular content and has placed the emphasis on the design of the platform. Courts are becoming more receptive to consider whether the characteristics of infinite scroll, algorithmic amplification, and engagement-based ranking systems are contributing to quantifiable harm.

In March 2026, a California jury declared that Meta and Google were negligent in creating platforms that led to youth addiction and mental health problems. The jury decided that Meta and Google were to pay off a joint sum of 6 million dollars in damages, with 70 percent of the sum being charged on Meta. It is a bellwether case, which means that it is related to about 2,000 other pending cases by parents and school districts. This change is important as it avoids legal barriers. When the liability is linked to the design decisions instead of user-created content, accountability begins to shift. 
‍

The Youth Harm Cases: A Big Tobacco Moment
‍

Social media are becoming the subject of increased scrutiny by courts and regulators as products that have quantifiable psychological impacts. The most impactful group of lawsuits against Meta is, perhaps, the one concerning youth mental health.

A day prior to the California verdict, a New Mexico jury ordered Meta to pay $375 million in damages due to failure to safeguard young users against child predators on Instagram and Facebook, and found that the company had lied to consumers about the safety of its products and violated state consumer protection laws.

Similar arguments have been presented in other lawsuits filed by attorneys general in over 30 states, and the cases reflect previous regulatory turning points in other industries such as tobacco. The question that courts are not merely asking is whether there is harm or not. They are questioning whether businesses were aware of creating systems that capitalize on behavioral weaknesses. It has been reported in internal documents and accounts of former employees that Meta made a profit by intentionally turning its platforms into addictions to children, with algorithmic functions tailored to drive users into engagement loops, maximising time on platform to the detriment of wellbeing.

Meta has refuted these characterisations, claiming that teen mental health is multifaceted and cannot be blamed on an individual app. The companies have indicated that they will appeal the verdicts.
‍

Privacy and Data Misuse: An Ongoing Fault Line
‍

Platform design is not the only issue that Meta faces in legal matters. Cases centered on privacy have been a recurrent problem in the last ten years, and previous cases have claimed that Facebook monitored users even after they have logged out, scanned personal messages, and utilized personal data in a manner that was beyond user expectations. In more recent times, in April 2026, a class action suit was filed claiming that WhatsApp messages were accessed by Meta employees and third-party contractors, despite the long-standing end-to-end encryption guarantees of the platform.

These instances indicate a structural problem that is consistent. Consent mechanisms and privacy policies tend to be out of date with the reality of data use, and the gap between legal compliance and what users actually know or expect.
‍

Antitrust: A Win, But Not a Clean One
‍

One of the legal fronts was Meta all the way. In November 2025, a judge in the US District Court, James Boasberg, declared that Meta was not a social networking monopoly, finding that the FTC did not demonstrate that the acquisitions of Instagram and WhatsApp by the company were against the antitrust law. The decision has since been appealed by the FTC, which continues to argue that "Meta broke our antitrust laws by acquiring Instagram and WhatsApp, and that American consumers have been harmed by it.

The case also demonstrates a significant drawback of the antitrust law as a form of regulation of tech companies. By the time the trial occurred five years after the lawsuit was initiated, the social media market had evolved such that Tik Tok was a major competitor, undermining the market definition claims of the FTC. The structural issue of whether a few platforms are too powerful in the communication of the masses is not answered, although the legal claim in this instance might have been unsuccessful.
‍

Policy Takeaways: What This Means Going Forward
‍

The accumulating number of lawsuits against Meta provides a number of valuable lessons to policymakers.

1. Platform design has become a regulatory topic. Laws should go beyond content regulation and deal with the construction of systems. Engagement maximising features can also increase harm, and this trade-off must be governed explicitly.
2. Transparency should be mandatory and not discretionary. Privacy policies and disclosures on platforms are usually too complicated or ambiguous. Regulators might be required to make more transparent and standardised disclosures regarding the use of data and the operation of recommendation systems.
3. Section 230 safeguards are under reinterpretation. Courts are becoming open to restrict immunity in cases where the harm is associated with the conduct of the platform and not the content of the user. This would redefine the law of all digital platforms, and not only Meta.
4. Cross-border coordination is needed. Meta is an international company, yet the regulatory reaction is still divided. This will require more coordination among jurisdictions to guarantee uniform enforcement and to eliminate regulatory arbitrage.
   ‍

Conclusion
‍

The lawsuits of Meta are not single cases. They are a more general reconsideration of the regulation of digital platforms and the accountability of those responsible when design decisions have harm at scale. In the wider context of the technology ecosystem, the implications are structural. Courts are starting to question not only what is hosted on them, but how they work and why they are constructed in the manner they are.

The age of minimal responsibility is being supplanted by a more challenging requirement: that platforms should foresee, quantify, and alleviate the harms they produce. The result of these cases will not only decide the future of Meta in terms of legal matters. They will influence the regulations of the digital economy in the years to come.

‍

References
‍

1. https://www.npr.org/2026/03/25/nx-s1-5746125/meta-youtube-social-media-trial-verdict 
2. https://www.pbs.org/newshour/show/jury-finds-meta-and-youtube-liable-in-landmark-youth-addiction-case
3. https://www.cbsnews.com/news/meta-ftc-whatsapp-instagram/
4. https://www.cnbc.com/2026/01/20/ftc-appeals-metaruling-antitrust-instagram-whatsapp.html‍
5. https://www.bbc.com/news/articles/czjw0zgz9zyo

Introduction

‍

In the hyperconnected world, cyber incidents can no longer be treated as sporadic disruptions; such incidents have become an everyday occurrence. The attack landscape today is very consequential and shows significant multiplication in its frequency, with ransomware attacks incapacitating a health system, phishing attacks hitting a financial institution, or state-sponsored attacks on critical infrastructures. Towards counteracting such threats, traditional ways alone are not enough, they gravely rely on manual research and human intellect. Attackers exercise speed, scale, and stealth, and defenders are always four steps behind. With such a widening gap, it is deemed necessary to facilitate incident response and crisis management with the intervention of automation and artificial intelligence (AI) for faster detection, context-driven decision-making, and collaborative response beyond human capabilities.

‍

Incident Response and Crisis Management

‍

Incident response is the structured way in which organisations deal with responding to detecting, segregating, and recovering from security incidents. Crisis management takes this even further, dealing not only with the technical fallout of a breach but also its business, reputation, and regulatory implications. Echelon used to depend on manual teams of people sorting through logs, cross-correlating alarms, and generating responses, a paradigm effective for small numbers but quickly inadequate in today's threat climate. Today's opponents attack at machine speed, employing automation to launch attacks. Under such circumstances, responding with slow, manual methods means delay and draconian consequences. The AI and automation introduction is a paradigm change that allows organisations to equate the pace and precision with which attackers initiate attacks in responding to incidents.

‍

How Automation Reinvents Response

‍

Cybercrime automation liberates cybercrime analysts from boring and repetitive tasks that consume time. An analyst manually detects potential threats from a list of hundreds each day, while automated systems sift through noise and focus only on genuine threats. Malware can automatically cause infected computers to be disconnected from the network to avoid spreading or may automatically have its suspicious account permissions removed without human intervention. The security orchestration systems move further by introducing playbooks, predefined steps describing how incidents of a certain type (e.g., phishing attempts or malware infections) should be handled. This ensures fast containment while ensuring consistency and minimising human error amid the urgency of dealing with thousands of alerts.

Automation takes care of threat detection, prioritisation, and containment, allowing human analysts to refocus on more complex decision-making. Instead of drowning in the sea of trivial alerts, security teams can now devote their efforts to more strategic areas: threat hunting and longer-term resilience. Automation is a strong tool of defence, cutting response times down from hours to minutes.

‍

The Intelligence Layer: AI in Action

‍

If automation provides speed, then AI is what allows the brain to be intelligent and flexible. Working with old and fixed-rule systems, AI-enabled solutions learn from experiences, adapt to changes in threats, and discover hidden patterns of which human analysts themselves would be unaware. For instance, machine learning algorithms identify normal behaviour on a corporate network and raise alerts on any anomalies that could indicate an insider attack or an advanced persistent threat. Similarly, AI systems sift through global threat intelligence to predict likely attack vectors so organisations can have their vulnerabilities fixed before they are exploited.

AI also boosts forensic analysis. Instead of searching forever for clues, analysts let AI-driven systems trace back to the origin of an event, identify vulnerabilities exploited by attackers, and flag systems that are still under attack. During a crisis, AI is a decision support that predicts outcomes of different scenarios and recommends the best response. In response to a ransomware attack, for example, based on context, AI might advise separating a single network segment or restoring from backup or alerting law enforcement. 

‍

Real-World Applications and Case Studies

‍

Already, this mitigation has been provided in the form of real-world applications of automation and AI. Consider, for example, IBM Watson for Cybersecurity, which has been applied in analysing unstructured threat intelligence and providing analysts with actionable results in minutes, rather than days. Like this, systems driven by AI in DARPA's Cyber Grand Challenge demonstrated the ability to automatically identify an instant vulnerability, patch it, and reveal the potential of a self-healing system. AI-powered fraud detection systems stop suspicious transactions in the middle of their execution and work all night to prevent losses. What is common in all these examples is that automation and AI lessen human effort, increase accuracy, and in the event of a cyberattack, buy precious time.

‍

Challenges and Limitations

‍

While promising, the technology is still not fully mature. The quality of an AI system is highly dependent on the training data provided; poor training can generate false positives that drown teams or worse false negatives that allow attackers to proceed unabated. Attackers have also started targeting AI itself by poisoning datasets or designing malware that does not get detected. Aside from risks that are more technical, the operational and financial costs involved in implementing advanced AI-based systems present expensive threats to any company. Organisations will have to make expenditures not only on technology but also for the training of staff to best utilise these tools. There are some ethical and privacy issues to consider as well because systems may be processing sensitive personal data, so global data protection laws such as the GDPR or India's DPDP Act could come into conflict.

‍

Creating a Human-AI Collaboration

‍

The future is not going to be one of substitution by machines but of creating human-AI synergy. Automation can do the drudgery, AI can provide smarts, and human professionals can use judgment, imagination, and ethical decisions. One would want to build AI-fuelled Security Operations Centres where technology and human experts work in tandem. Continuous training must be provided to AI models to reduce false alarms and make them most resistant against adversarial attacks. Regular conduct of crisis drills that combine AI tools and human teams can ensure preparedness for real-time events. Likewise, it is worth integrating ethical AI guidelines into security frameworks to ensure a stronger defence while respecting privacy and regulatory compliance.

‍

Conclusion

‍

Cyber-attacks are an eventuality in this modern time, but the actual impact need not be so harsh. The organisations can maintain the programmatic method of integrating automation and AI into incident response and crisis management so that the response against the very threat can be shifted from reactive firefighting to proactive resilience. Automation gives speed and efficiency while AI gives intelligence and foresight, hence putting the defenders on par and possibly exceeding the speed and sophistication of the attackers. But an utmost system without human inquisitiveness, ethical reasoning, and strategic foresight would remain imperfect. The best defence is in that human-machine relationship symbiotic system wherein automation and AI take care of how fast and how many cyber threats come in, whereas human intellect ensures that every response is aligned with larger organizational goals. This synergy is where cybersecurity resiliency will reside in the future-the defenders won't just be reacting to emergencies but will rather be driving the way.

‍

References

‍

• https://www.sisainfosec.com/blogs/incident-response-automation/
• https://stratpilot.ai/role-of-ai-in-crisis-management-and-its-critical-importance/
• https://www.juvare.com/integrating-artificial-intelligence-into-crisis-management/
• https://www.motadata.com/blog/role-of-automation-in-incident-management/

‍

Introduction

Twitter Inc.’s appeal against barring orders for specific accounts issued by the Ministry of Electronics and Information Technology was denied by a single judge on the Karnataka High Court. Twitter Inc. was also given an Rs. 50 lakh fine by Justice Krishna Dixit, who claimed the social media corporation had approached the court defying government directives.

As a foreign corporation, Twitter’s locus standi had been called into doubt by the government, which said they were ineligible to apply Articles 19 and 21 to their situation. Additionally, the government claimed that because Twitter was only designed to serve as an intermediary, there was no “jural relationship” between Twitter and its users.

The Issue

In accordance with Section 69A of the Information Technology Act, the Ministry issued the directives. Nevertheless, Twitter had argued in its appeal that the orders “fall foul of Section 69A both substantially and procedurally.” Twitter argued that in accordance with 69A, account holders were to be notified before having their tweets and accounts deleted. However, the Ministry failed to provide these account holders with any notices.

On June 4, 2022, and again on June 6, 2022, the government sent letters to Twitter’s compliance officer requesting that they come before them and provide an explanation for why the Blocking Orders were not followed and why no action should be taken against them.

Twitter replied on June 9 that the content against which it had not followed the blocking orders does not seem to be a violation of Section 69A. On June 27, 2022, the Government issued another notice stating Twitter was violating its directions. On June 29, Twitter replied, asking the Government to reconsider the direction on the basis of the doctrine of proportionality. On June 30, 2022, the Government withdrew blocking orders on ten account-level URLs but gave an additional list of 27 URLs to be blocked. On July 10, more accounts were blocked. Compiling the orders “under protest,” Twitter approached the HC with the petition challenging the orders.

Legality

Additionally, the government claimed that because Twitter was only designed to serve as an intermediary, there was no “jural relationship” between Twitter and its users.

Government attorney Additional Solicitor General R Sankaranarayanan argued that tweets mentioning “Indian Occupied Kashmir” and the survival of LTTE commander Velupillai Prabhakaran were serious enough to undermine the integrity of the nation.

Twitter, on the other hand, claimed that its users have pushed for these rights. Additionally, Twitter maintained that under Article 14 of the Constitution, even as a foreign company, they were entitled to certain rights, such as the right to equality. They also argued that the reason for the account blocking in each case was not stated and that Section 69a’s provision for blocking a URL should only apply to the offending URL rather than the entire account because blocking the entire account would prevent the creation of information while blocking the offending tweet only applied to already-created information.

Conclusion

The evolution of cyberspace has been substantiated by big tech companies like Facebook, Google, Twitter, Amazon and many more. These companies have been instrumental in leading the spectrum of emerging technologies and creating a blanket of ease and accessibility for users. Compliance with laws and policies is of utmost priority for the government, and the new bills and policies are empowering the Indian cyberspace. Non Compliance will be taken very seriously, and the same is legalised under the Intermediary Guidelines 2021 and 2022 by Meity. Referring to Section 79 of the Information Technology Act, which pertains to an exemption from liability of intermediary in some instances, it was said, “Intermediary is bound to obey the orders which the designate authority/agency which the government fixes from time to time.”