More than 50 ads containing AI-generated child sexual abuse material appeared on Facebook, Instagram, Messenger, and Threads, with some running as recently as this week, according to Meta's ad library data.
Meta's advertising systems failed to prevent the distribution of more than 50 ads containing AI-generated child sexual abuse imagery across its platforms. The offending ads appeared on Facebook, Instagram, Messenger, and Threads, with recent publications occurring within days of discovery.
The ads were identified through Meta's own ad library data, which the company maintains for transparency purposes. The presence of such material represents a significant content moderation failure, as child sexual abuse imagery—whether generated by AI or not—violates both Meta's policies and laws in most jurisdictions.
AI-generated child sexual abuse material has emerged as a growing concern for tech platforms and law enforcement. Unlike traditional CSAM, AI-generated versions do not involve real child victims, but their creation and distribution remain illegal in many countries and violate platform policies worldwide.
Meta has faced repeated criticism over content moderation failures across its platforms. The company employs automated systems and human reviewers to catch policy violations, but this incident suggests gaps remain in detecting ads containing illegal or harmful material.
The discovery raises questions about Meta's ad review process and how such content bypassed automated screening systems designed to catch violations. Advertisers typically must undergo approval before running ads, and ads are theoretically scanned for policy violations.
Meta has not publicly detailed what actions it took regarding the offending ads or accounts responsible for placing them. The company has also not disclosed whether it reported the material to the National Center for Missing and Exploited Children or other authorities, as is standard practice when platforms discover CSAM.
This incident adds to ongoing scrutiny of Meta's content moderation practices, particularly regarding child safety. Lawmakers and advocacy groups have increasingly pressured tech companies to strengthen safeguards against child exploitation material on their platforms.
Cyberattacks against hedge funds and private equity firms have been attributed to UNC6671, an extortion group connected to the BlackFile threat actors. The campaign represents an escalating threat to the financial sector.
A Go-based malware distributed through ClickFix attacks is targeting macOS users to steal cryptocurrency, passwords, and Apple Keychain data. The infostealer campaign combines social engineering with credential harvesting.
A former NSA official has warned against connecting water infrastructure controllers to the internet following suspected Iranian cyberattacks on U.S. water systems.
Security researchers scanning Polish government websites discovered critical vulnerabilities that could expose courts, hospitals, and airports to cyberattacks. The vulnerabilities stem from common software used to manage and display web content.