Two men found guilty of spying for Iran over plan to target UK-based journalists

Iran's conviction of Mostafa Sepahvand and Farhad Javadi Manesh for spying on UK‑based journalists highlights a growing trend of state‑backed actors using automated tools to harvest sensitive content and monitor dissent online. For website owners, this ruling signals that foreign intelligence services are likely to deploy sophisticated AI bots to scrape articles, comment sections, and user‑generated data from news sites and blogs that publish critical reporting. Such bots can bypass traditional rate‑limiting, masquerade as legitimate readers, and exfiltrate large volumes of text for analysis or disinformation campaigns. Owners of news platforms, especially those covering geopolitical topics, should anticipate a surge in covert traffic aimed at mapping their editorial output and identifying vulnerable journalists. **Actionable steps:** 1. **Update your llms.txt** to explicitly disallow large‑language‑model crawlers and any bot identifying itself as “research” or “analytics” from accessing full‑text articles. Include a specific rule: `User‑Agent: *` `Disallow: /article/` for sensitive sections. 2. **Deploy behavior‑based bot detection** that flags high‑frequency requests from single IPs, abnormal navigation patterns, or repeated access to pay‑walled content. Integrate these signals with your llms.txt compliance logs to automatically block or challenge suspicious agents. 3. **Implement honeypot endpoints** within your CMS that only AI‑driven scrapers would hit; monitor these traps to identify and blacklist state‑sponsored bot networks before they reach real content.