A legal test that Google’s lawyer told the Supreme Court was roughly “96% correct” could drastically undermine the liability shield that the company and other tech platforms have relied on for decades, according to several experts who advocate for upholding the law to the highest degree.
The so-called “Henderson test” would significantly weaken the power of Section 230 of the Communications Decency Act, several experts said in conversations and briefings following oral arguments in the case Gonzalez v. Google. Some of those who criticized Google’s concession even work for groups backed by the company.
Section 230 is the statute that protects tech platforms’ ability to host material from users — like social media posts, uploaded video and audio files, and comments — without being held legally liable for their content. It also allows platforms to moderate their services and remove posts they consider objectionable.
The law is central to the question that will be decided by the Supreme Court in the Gonzalez case, which asks whether platforms like Google’s YouTube can be held responsible for algorithmicaly recommending user posts that seem to endorse or promote terrorism.
In arguments on Tuesday, the justices seemed hesitant to issue a ruling that would overhaul Section 230.
But even if they avoid commenting on that law, they could still issue caveats that change the way it’s enforced, or clear a path for changing the law in the future.
What is the Henderson test?
One way the Supreme Court could undercut Section 230 is by endorsing the Henderson test, some advocates believe. Ironically, Google’s own lawyers may have given the court more confidence to endorse this test, if it chooses to do so.
The Henderson test came about from a November ruling by the Fourth Circuit appeals court in Henderson v. The Source for Public Data. The plaintiffs in that case sued a group of companies that collect public information about individuals, like criminal records, voting records and driving information, then put in a database that they sell to third parties. The plaintiffs alleged that the companies violated the Fair Credit Reporting Act by failing to maintain accurate information, and by providing inaccurate information to a potential employer.
A lower court ruled that Section 230 barred the claims, but the appeals court overturned that decision.
The appeals court wrote that for Section 230 protection to apply, “we require that liability attach to the defendant on account of some improper content within their publication.”
In this case, it wasn’t the content itself that was at fault, but how the company chose to present it.
The court also ruled Public Data was responsible for the content because it decided how to present it, even though the information was pulled from other sources. The court said it’s plausible that some of the information Public Data sent to one of the plaintiff’s potential employers was “inaccurate because it omitted or summarized information in a way that made it misleading.” In other words, once Public Data made changes to the information it pulled, it became an information content provider.
Should the Supreme Court endorse the Henderson ruling, it would effectively “moot Section 230,” said Jess Miers, legal advocacy counsel for Chamber of Progress, a center-left industry group that counts Google among its backers. Miers said this is because Section 230’s primary advantage is to help quickly dismiss cases against platforms that center on user posts.
“It’s a really dangerous test because, again, it encourages plaintiffs to then just plead their claims in ways that say, well, we’re not talking about how improper the content is at issue,” Miers said. “We’re talking about the way in which the service put that content together or compiled that content.”
Eric Goldman, a professor at Santa Clara University School of Law, wrote on his blog that Henderson would be a “disastrous ruling if adopted by SCOTUS.”
“It was shocking to me to see Google endorse a Henderson opinion, because it’s a dramatic narrowing of Section 230,” Goldman said at a virtual press conference hosted by Chamber of Progress after the arguments. “And to the extent that the Supreme Court takes that bait and says, ‘Henderson’s good to Google, it’s good to us,’ we will actually see a dramatic narrowing of Section 230 where plaintiffs will find lots of other opportunities to to bring cases that are based on third-party content. They’ll just say that they’re based on something other than the harm that was in the third party content itself.”
Google pointed to the parts of its brief in the Gonzalez case that discuss the Henderson test. In the brief, Google attempts to distinguish the actions of a search engine, social media site, or chat room that displays snippets of third-party information from those of a credit-reporting website, like those at issue in Henderson.
In the case of a chatroom, Google says, although the “operator supplies the organization and layout, the underlying posts are still third-party content,” meaning it would be covered by Section 230.
“By contrast, where a credit-reporting website fails to provide users with its own required statement of consumer rights, Section 230(c)(1) does not bar liability,” Google wrote. “Even if the website also publishes third-party content, the failure to summarize consumer rights and provide that information to customers is the website’s act alone.”
Google also said 230 would not apply to a website that “requires users to convey allegedly illegal preferences,” like those that would violate housing law. That’s because by “‘materially contributing to [the content’s] unlawfulness,’ the website makes that content its own and bears responsibility for it,” Google said, citing the 2008 Fair Housing Council of San Fernando Valley v. Roommates.com case.
Concerns over Google’s concession
Section 230 experts digesting the Supreme Court arguments were perplexed by Google’s lawyer’s decision to give such a full-throated endorsement of Henderson. In trying to make sense of it, several suggested it might have been a strategic decision to try to show the justices that Section 230 is not a boundless free pass for tech platforms.
But in doing so, many also felt Google went too far.
Cathy Gellis, who represented amici in a brief submitted in the case, said at the Chamber of Progress briefing that Google’s lawyer was likely looking to illustrate the line of where Section 230 does and does not apply, but “by endorsing it as broadly, it endorsed probably more than we bargained for, and certainly more than necessarily amici would have signed on for.”
Corbin Barthold, internet policy counsel at Google-backed TechFreedom, said in a separate press conference that the idea Google may have been trying to convey in supporting Henderson wasn’t necessarily bad on its own. He said they seemed to try to make the argument that even if you use a definition of publication like Henderson lays out, organizing information is inherent to what platforms do because “there’s no such thing as just like brute conveyance of information.”
But in making that argument, Barthold said, Google’s lawyer “kind of threw a hostage to fortune.”
“Because if the court then doesn’t buy the argument that Google made that there’s actually no distinction to be had here, it could go off in kind of a bad direction,” he added.
Miers speculated that Google might have seen the Henderson case as a relatively safe one to cite, given than it involves an alleged violation of the Fair Credit Reporting Act, rather than a question of a user’s social media post.
“Perhaps Google’s lawyers were looking for a way to show the court that there are limits to Section 230 immunity,” Miers said. “But I think in in doing so, that invites some pretty problematic reading readings into the Section 230 immunity test, which can have pretty irreparable results for future internet law litigation.”
CrowdStrike on Tuesday evening reported better-than-expected fiscal 2026 third-quarter results and forward guidance. The numbers, however, were not enough to power shares higher, given their roughly 24% advance since the cybersecurity company’s fiscal second-quarter print back in late August. That said, the latest beat and raise should help solidify recent stock gains and set the stage for further upside next year. Revenue in fiscal Q3 increased 22% year over year to $1.23 billion, beating the consensus estimate of $1.22 billion, compiled by market data provider LSEG. Adjusted earnings per share (EPS) increased to 96 cents in the three months ending Oct. 31, beating the 94-cent estimate, according to LSEG. Why we own it Cybersecurity is a must-have for companies in the digital age. Led by co-founder and CEO George Kurtz, CrowdStrike is one of the best there is, along with fellow Club name Palo Alto Networks . The company specializes in endpoint protection through its AI-native platform called Falcon. Competitors: Palo Alto Networks, Fortinet , SentinelOne , Microsoft Portfolio weighting: 3.33% Most recent buy: March 10, 2025 Initiation date: Oct. 16, 2024 Bottom Line The October quarter was an encore performance from CrowdStrike — delivering better-than-expected results across the board, with record-high operating cash flow, adjusted operating income, EPS, free cash flow, and net new annual recurring revenue. The Falcon Flex subscription model is clearly helping to drive more business, with annual recurring revenue (ARR) tied to these accounts surging more than 200% versus the year-ago period. Falcon Flex allows customers to quickly deploy additional protection as needed, without all the red tape of going through the often-lengthy procurement process. Artificial intelligence benefits CrowdStrike in two ways: by increasing attack vectors in its customers’ digital infrastructure, resulting in more demand, and by strengthening CrowdStrike’s ability to protect customers against these attacks, resulting in more pricing power and cross-selling. As CEO George Kurtz said on the post-earnings conference call, “Businesses every day are having jarring lightbulb moments, witnessing AI-powered adversarial tradecraft firsthand. … Now, just as anyone can use AI to vibe code and become a software engineer, anyone can also now vibe hack, becoming a sophisticated adversary with AI.” He added that CrowdStrike is mission-critical. “No matter how the market swings, geopolitical tensions evolve, or what technologies are in vogue, our digital society mandates cybersecurity as a necessity, and now, more than ever, synonymous with that, CrowdStrike is a necessity.” CRWD YTD mountain CrowdStrike YTD This speaks to the nature of demand for CrowdStrike and other cybersecurity companies, such as fellow Club name Palo Alto Networks , and what these companies can provide in an all-encompassing, platform approach to digital protection. With attacks becoming more sophisticated and more frequent, companies can no longer afford to have a fragmented solution to cybersecurity. Kurtz said, “Cybersecurity in the agentic era demands a single platform. The criticality in being able to operate with agility, efficacy, and speed to stop breaches is having the data that controls and the actions in a single platform, not multiple platforms. Because when you have multiple platforms, by definition, you don’t have a platform. Tap switching and contact switching cost time. Data stitching doesn’t scale. These are the seams and cracks where adversaries thrive.” Kurtz’s comment about the “agentic era” refers to digital AI agents that can perform complex tasks and problem-solve with little to no human oversight. The proliferation of AI agents exponentially increases the ways hackers can breach systems. In mid-September, at CrowdStrike’s Fal.Con industry conference , the CEO described the rise of agentic AI as a “greater than 100x opportunity for CrowdStrike.” Given the fiscal third-quarter results, strong outlook, and our longer-term view that cybersecurity is a secular growth industry, now benefiting from the need to defend against AI-equipped hackers, using AI protection tools, we’re reiterating our 1 rating and increasing our CrowdStrike price target to $550 per share from $520. While falling 3% in after-hours trading, CrowdStrike shares were up 51% as of Tuesday’s market close. The stock is the Club’s fourth-best performer of 2025. Quarterly commentary Perhaps the most exciting metric, as it indicates the sustainability of the strength we saw in Tuesday night’s results, is net new annual recurring revenue, which came in at $265 million. That resulted in ARR at the end of the period of $4.92 billion, up 23% year over year and up 5.7% sequentially. Helping to drive that growth was Falcon Flex, with management noting that nearly 30% of ending ARR, or $1.35 billion, came from accounts that have adopted the new pricing model. On the call, Kurtz said the number of customers “reflexing,” or re-signing once their credits are used up, more than doubled sequentially, to more than 200 — with 10 customers “reflexing more than 2x their initial flex subscription.” Given the strong response, management expects the Falcon Flex model to become the company’s licensing standard. Guidance For full-year fiscal 2026, CrowdStrike management raised its outlook at the midpoint. The team now expects to realize revenue of between $4.7966 billion and $4.0866 billion, up from the prior range of between $4.7495 billion and $4.8055 billion. That compares to the LSEG consensus estimate of $4.784 billion. The adjusted earnings outlook was also raised, with the team now targeting an EPS range of $3.70 and $3.72, up from the prior $3.60 to $3.72, and comfortably ahead of the $3.67 estimate from LSEG. For its 2026 fiscal fourth quarter, the current quarter going on right now, management guided for revenue to be between $1.29 billion and $1.3 billion, which is better than the $1.293 billion the Street was looking for at the midpoint, according to LSEG. Adjusted EPS are expected to be between $1.09 and $1.11, better than the $1.08 the Street was looking for. (Jim Cramer’s Charitable Trust is long CRWD, PANW. See here for a full list of the stocks.) As a subscriber to the CNBC Investing Club with Jim Cramer, you will receive a trade alert before Jim makes a trade. Jim waits 45 minutes after sending a trade alert before buying or selling a stock in his charitable trust’s portfolio. If Jim has talked about a stock on CNBC TV, he waits 72 hours after issuing the trade alert before executing the trade. THE ABOVE INVESTING CLUB INFORMATION IS SUBJECT TO OUR TERMS AND CONDITIONS AND PRIVACY POLICY , TOGETHER WITH OUR DISCLAIMER . NO FIDUCIARY OBLIGATION OR DUTY EXISTS, OR IS CREATED, BY VIRTUE OF YOUR RECEIPT OF ANY INFORMATION PROVIDED IN CONNECTION WITH THE INVESTING CLUB. NO SPECIFIC OUTCOME OR PROFIT IS GUARANTEED.
Okta on Tuesday topped Wall Street’s third-quarter estimates and issued an upbeat outlook, but shares fell as the company did not provide guidance for fiscal 2027.
Shares of the identity management provider fell more than 3% in after-hours trading on Tuesday.
Here’s how the company did versus LSEG estimates:
Earnings per share: 82 cents adjusted vs. 76 cents expected
Revenue: $742 million vs. $730 million expected
Compared to previous third-quarter reports, Okta refrained from offering preliminary guidance for the upcoming fiscal year. Finance chief Brett Tighe cited seasonality in the fourth quarter, and said providing guidance would require “some conservatism.”
Okta released a capability that allows businesses to build AI agents and automate tasks during the third quarter.
CEO Todd McKinnon told CNBC that upside from AI agents haven’t been fully baked into results and could exceed Okta’s core total addressable market over the next five years.
“It’s not in the results yet, but we’re investing, and we’re capitalizing on the opportunity like it will be a big part of the future,” he said in a Tuesday interview.
Revenues increased almost 12% from $665 million in the year-ago period. Net income increased 169% to $43 million, or 24 cents per share, from $16 million, or breakeven, a year ago. Subscription revenues grew 11% to $724 million, ahead of a $715 million estimate.
For the current quarter, the cybersecurity company expects revenues between $748 million and $750 million and adjusted earnings of 84 cents to 85 cents per share. Analysts forecast $738 million in revenues and EPS of 84 cents for the fourth quarter.
Returning performance obligations, or the company’s subscription backlog, rose 17% from a year ago to $4.29 billion and surpassed a $4.17 billion estimate from StreetAccount.
This year has been a blockbuster period for cybersecurity companies, with major acquisition deals from the likes of Palo Alto Networks and Google and a raft of new initial public offerings from the sector.
Marvell Technology Group Ltd. headquarters in Santa Clara, California, on Sept. 6, 2024.
David Paul Morris | Bloomberg | Getty Images
Semiconductor company Marvell on Tuesday announced that it will acquire Celestial AI for at least $3.25 billion in cash and stock.
The purchase price could increase to $5.5 billion if Celestial hits revenue milestones, Marvell said.
Marvell shares rose 13% in extended trading Tuesday as the company reported third-quarter earnings that beat expectations and said on the earnings call that it expected data center revenue to rise 25% next year.
The deal is an aggressive move for Marvell to acquire complimentary technology to its semiconductor networking business. The addition of Celestial could enable Marvell to sell more chips and parts to companies that are currently committing to spend hundreds of billions of dollars on infrastructure for AI.
Marvell stock is down 18% so far in 2025 even as semiconductor rivals like Broadcom have seen big valuation increases driven by excitement around artificial intelligence.
Celestial is a startup focused on developing optical interconnect hardware, which it calls a “photonic fabric,” to connect high-performance computers. Celestial was reportedly valued at $2.5 billion in March in a funding round, and Intel CEO Lip-Bu Tan joined the startup’s board in January.
Optical connections are becoming increasingly important because the most advanced AI systems need those parts tie together dozens or hundreds of chips so they can work as one to train and run the biggest large-language models.
Currently, many AI chip connections are done using copper wires, but newer systems are increasingly using optical connections because they can transfer more data faster and enable physically longer cables. Optical connections also cost more.
“This builds on our technology leadership, broadens our addressable market in scale-up connectivity, and accelerates our roadmap to deliver the industry’s most complete connectivity platform for AI and cloud customers,” Marvell CEO Matt Murphy said in a statement.
Marvell said that the first application of Celestial technology would be to connect a system based on “large XPUs,” which are custom AI chips usually made by the companies investing billions in AI infrastructure.
On Tuesday, the company said that it could even integrate Celestial’s optical technology into custom chips, and based on customer traction, the startup’s technology would soon be integrated into custom AI chips and related parts called switches.
Amazon Web Services Vice President Dave Brown said in a statement that Marvell’s acquisition of Celestial will “help further accelerate optical scale-up innovation for next-generation AI deployments.”
The maximum payout for the deal will be triggered if Celestial can record $2 billion in cumulative revenue by the end of fiscal 2029. The deal is expected to close early next year.
In its third-quarter earnings on Tuesday, Marvell earnings of 76 cents per share on $2.08 billion in sales, versus LSEG expectations of 73 cents on $2.07 billion in sales. Marvell said that it expects fourth-quarter revenue to be $2.2 billion, slightly higher than LSEG’s forecast of $2.18 billion.