[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1DBfUUERTZ5DWon8io1C-3DbyvzS63kjTmda0-Pt8NQ":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":125},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"c51f4fce-5470-435a-97a6-995e27a3f87b","Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features","hundreds-of-mundane-ai-apps-are-hiding-sexually-abusive-deepfake-features-7f7db7","WIRED uncovered some 400 apps and websites linked to Chinese-language developers that look like regular AI tools but had secret features that let users create violent AI-generated images and video.","A WIRED investigation uncovered over 400 apps and websites, often developed by Chinese entities, that masquerade as innocuous services like pet portrait generators or AI workout coaches. However, these applications secretly load interfaces to create explicit AI-generated images and videos, including violent and sexually abusive content, when triggered under specific conditions. The network was promoted through tens of thousands of ads on Meta platforms, some containing child sexual abuse material, leading to investigations by global regulators.","Hundreds of AI apps disguised as benign tools secretly generate abusive deepfake content.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fhundreds-of-mundane-ai-apps-are-hiding-abusive-deepfake-features\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6adfc11328ba980ed3d0219a\u002Fmaster\u002Fpass\u002FSecurity_ChinaAppsBehindDeepFakes_v1.jpg","2026-11-02T10:00:00+00:00","2026-11-02T11:00:26.322847+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Meta","vendor",{"name":21,"type":22},"Facebook","product",{"name":24,"type":22},"Instagram",{"name":26,"type":22},"Apple Pay",{"name":28,"type":22},"Google Pay",{"name":30,"type":31},"KeLing Technology Limited","threat_actor","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":32,"icon":34,"name":35,"slug":36},null,"AI Security","ai-security",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[],[18,21,24],{"controls":58,"vendors":113},[59,85],{"slug":60,"name":61,"problem":62,"products":63},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.",[64,71,77],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":66,"url":69,"description":70},"obsidian-security","Obsidian Security","\u002Fvendor-logos\u002Fobsidian-security.png","obsidian","https:\u002F\u002Fwww.obsidiansecurity.com\u002F","SaaS posture management and detection of account and integration compromise.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":72,"product_name":73,"url":75,"description":76},"appomni","AppOmni","\u002Fvendor-logos\u002Fappomni.png","https:\u002F\u002Fappomni.com\u002F","SaaS security posture management for platforms such as Salesforce, Microsoft 365 and ServiceNow.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-shield","Falcon Shield","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Ffalcon-shield\u002F","SaaS security posture management, from CrowdStrike's acquisition of Adaptive Shield.",{"slug":36,"name":86,"problem":87,"products":88},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[89,97,105],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",[114,120],{"slug":115,"name":116,"logo_path":117,"roles":118},"apple","Apple","\u002Fvendor-logos\u002Fapple.png",[119],"affected",{"slug":121,"name":122,"logo_path":123,"roles":124},"google","Google","\u002Fvendor-logos\u002Fgoogle.png",[119],{"slug":126,"title":127,"body":128,"framework_refs":129,"framework_notes":137},"disguised-ai-apps-secretly-generate-deepfake-abuse-content","Disguised AI Apps Secretly Generate Deepfake Abuse Content","Over 400 apps and websites concealed deeply harmful capabilities—including the generation of child sexual abuse material and violent deepfakes—beneath the surface of benign-looking AI services like pet portrait generators. These applications exploited the trust users place in mainstream platforms by advertising extensively on Meta, meaning the supply chain of app distribution became a vector for serious harm. The case highlights how malicious actors can weaponize AI tooling while hiding behind innocuous branding, making platform-level vetting and regulatory oversight critical. Without robust app review processes and transparent capability disclosure, end users have no reliable way to know what a downloaded application actually does.",[130,131,132,133,134,135,136],"CIS Control 14: Security Awareness and Skills Training","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","GDPR Article 32","NIS2 Article 21(2)(b)","MITRE ATT&CK T1566: Phishing","CIS Control 17: Incident Response Management",{"GDPR Article 32":138,"NIS2 Article 21(2)(b)":139,"MITRE ATT&CK T1566: Phishing":140,"CIS Control 17: Incident Response Management":141,"CIS Control 14: Security Awareness and Skills Training":142,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":143,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":144},"Apps processing user data while covertly generating abusive content failed to implement appropriate technical and organisational measures to ensure lawful, transparent processing—a direct GDPR Article 32 obligation.","NIS2 requires incident handling and supply chain security measures; the covert capabilities embedded in these apps represent exactly the kind of supply chain risk that operators and platforms are now obligated to manage under EU law.","The deceptive advertising on Meta—some containing CSAM—functioned as a social engineering lure to direct victims toward harmful platforms, mirroring phishing techniques that exploit trust in legitimate distribution channels.","Global regulators only launched investigations after WIRED's exposé, indicating that no proactive incident response or platform monitoring program had detected or escalated the abuse at scale before public disclosure.","Users lacked the awareness to recognize that benign-looking AI apps could secretly host abusive content generators; structured security awareness training would help individuals critically evaluate applications before use.","Organizations consuming third-party AI tools must assess those tools for hidden or undisclosed functionality as part of ongoing vulnerability management, a discipline this incident shows was absent across the distribution chain.","Platform-level identity and access controls on app marketplaces should enforce verified developer accountability, which could have restricted these deceptive applications from reaching tens of thousands of users via Meta ads."]