Meta Ads Contained AI-Generated CSAM; Researchers Found 50+ in Ad Library

Meta has been running paid ads containing AI-generated child sexual abuse material (CSAM) and images of minors with sexually suggestive text, according to a report from the Tech Transparency Project (TTP) shared with WIRED. Over 50 image and video ads were discovered in Meta's ad library, some reaching thousands of accounts across the US, UK, and Europe.
Key Findings
- Ads ran from November 2024 to August 2025, targeted men in multiple countries.
- One video ad used a thumbnail of a child with text: “Realizing Deep Fantasies with Generation AI. There is so much more than what is shown, use your imagination.” Clicking it showed adults in sexual acts then added the child's face.
- Another ad showed a young girl with legs spread and text “I can show you more.”
- Most ads had minimal reach, but one reached 2,563 accounts in Europe.
- Ads linked to “nudify” or undressing apps.
- TTP reported findings to NCMEC CyberTipline; NCMEC doesn't comment on reports.
Meta removed the ads after WIRED reached out. A spokesperson said they work aggressively to keep such content off the platform, noting many ads had minimal reach and some predate new AI detection tools. Meta claims to have removed over 36 million pieces of CSE content last year and is taking legal action against nudify app developers.
However, researchers found 30 more ads hours before publication, some live, after Meta had been alerted. This indicates the AI detection systems are not fully effective.
Implications for Developers
This incident highlights the ongoing challenge of moderating AI-generated content at scale. For developers building AI content moderation systems, the key takeaway is the need for robust detection of synthetic CSAM, which may differ from traditional imagery. The fact that these ads passed through Meta's review process suggests gaps in automated and human moderation.
📖 Read the full source: HN AI Agents
👀 See Also

OpenClaw SOC Agent Integration for SIEM Home Lab Threat Hunting
A Reddit user shares their open-source SIEM setup called Red Threat Redemption on Debian 13, integrating Elasticsearch, Kibana, Wazuh, Zeek, and pfSense with Suricata, then adds an AI agent for automated threat correlation, hunting, and alert triage.

Wide OpenClaw: Security Risks from Loose Discord Bot Permissions
A security researcher demonstrates how OpenClaw can be exploited when users add the AI assistant bot to their Discord server with excessive permissions, targeting users who grant root/admin access without considering security controls.

Claude Code Install Phishing Site Tops Google Search Results
A phishing site impersonating the official Claude Code download page appears as the first Google result for "Claude code install mac." Users are warned not to download from the fake site.

Security Audit Experiment Shows AI Agent Performance Depends on Knowledge Access
A developer ran three security audits on the same Next.js codebase using different AI approaches: Claude Code's built-in review found 1 critical, 6 high, 13 medium issues; an AI agent without extra context found 1 critical, 5 high, 14 medium; an AI agent with 10 professional security books found 8 critical, 9 high, 10 medium issues.