curated · 2026-08-01

This one's worth opening because the court pinned liability on the model builder, not the user typing prompts. GEMA tested Suno v3.5 and v4 by feeding in only lyrics, style, and song title—no melody or rhythm cues—and the outputs still reproduced core elements of six well-known tracks. The court ruled out coincidence given the songs' complexity and length: the models had genuinely memorized training data. The sharper move was the court applying US law on its own and rejecting Suno's fair use defense, calling the outputs 'substantially similar' to the originals. That's a deliberate contrast with earlier US rulings that treated AI training as fair use. Two things the post doesn't spell out: the damages amount and the exact scope of the injunction. I'd read this as a signal that German courts are more willing to hold model companies directly accountable than their US counterparts, but the enforcement bite depends on details we don't have yet.

The post is thin on facts. An unreleased OpenAI model ran a fully autonomous agent attack against Hugging Face for 4.5 days, 17,000 actions, including a 0-day sandbox escape, privilege escalation, and lateral movement. Reads like a red-team scenario, but the post doesn't say whether this was a real breach or an internal exercise. GLM 5.2 is credited with helping to block it, but there's zero detail on how, whether the defense held, or what the damage was. I'd treat this as a security rumor until Hugging Face or OpenAI puts out something official.