Cyber Security News

Google Uses Gemini AI to Stop Malicious Ads From Threat Actors – 8.3 billion ads Blocked

Threat actors are increasingly leveraging generative AI to launch sophisticated advertising scams at an unprecedented scale.

In response, Google has integrated its advanced Gemini AI models into its security infrastructure to neutralize these threats actively.

According to Google’s newly released 2025 Ads Safety Report, this artificial intelligence upgrade dramatically enhanced its defensive capabilities.

The security system successfully caught over 99% of policy-violating ads before they ever reached internet users.

Moving Beyond Keyword Detection

Traditional keyword-based security filters are no longer sufficient against modern cybercriminals who constantly evolve their evasion tactics.

To counter these advanced methods, Google’s Gemini AI models now analyze hundreds of billions of diverse data signals in real time.

By evaluating specific metrics like account age, behavioral cues, and broader campaign patterns, the artificial intelligence can accurately understand the true intent behind an advertisement.

This proactive security approach allows Google to spot complex malicious content and block it preemptively, even when attackers try to hide their tracks.

The integration of Gemini AI yielded massive takedown numbers throughout the last year.

Google’s automated defense systems and security teams successfully executed the following actions in 2025:

  • Blocked or removed over 8.3 billion malicious advertisements globally.
  • Suspended 24.9 million advertiser accounts for severe policy violations.
  • Intercepted 602 million ads specifically tied to fraudulent scam operations.
  • Disabled 4 million accounts directly associated with active scam campaigns.

Neutralizing AI-Generated Scams

As cybercriminals use automated tools to create deceptive ads at scale, Google uses Gemini to deliver real-time defense, with most Responsive Search Ads reviewed instantly by the end of 2025.

According to Google’s 2025 Ads Safety Report, harmful content is now blocked at the point of submission, preventing threats from entering the advertising ecosystem.

Google plans to expand this instant-review capability to additional ad formats throughout this year. Additionally, Gemini has dramatically improved the efficiency of user report processing.

Google handled four times as many user reports in 2025 compared to the previous year, allowing human security experts to focus on complex threat investigations.

While aggressive threat blocking is necessary for user safety, it can accidentally disrupt legitimate business operations.

Gemini’s advanced ability to analyze beyond basic text and image patterns enables it to distinguish between a genuine marketing offer and a sophisticated phishing lure.

This highly nuanced detection capability led to an 80% reduction in incorrect advertiser suspensions last year.

Combined with a strict advertiser verification program that validates identities upfront, Google is effectively prioritizing the removal of harmful content while ensuring honest businesses can keep their campaigns running securely.

Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.

Abinaya

Abi is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.

Recent Posts

Yandex Data Center Outage Disrupts Access to Cloud Files Following Drone Attack

Yandex has confirmed a major service outage after drone attacks damaged three data centers in…

12 minutes ago

WordPress Plugin Vulnerability Exploited in Attacks to Upload and eEecute Arbitrary PHP code

Attackers are targeting a critical security flaw in the Bricksforge WordPress plugin that lets them…

30 minutes ago

LG webOS Flaws Let Remote Attackers Execute Commands as Root Without Authentication

Security researchers have disclosed four serious vulnerabilities in LG webOS smart TVs that could allow…

33 minutes ago

Ahold Delhaize Takes Systems Offline Following Cybersecurity Incident

Ahold Delhaize has taken some systems offline after identifying a security issue within its network,…

12 hours ago

Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions

A critical vulnerability in Google’s shared DevSite platform could have allowed an unauthenticated attacker to…

13 hours ago

Critical GitLab Vulnerability Enables Arbitrary Code Execution Attacks on Servers

GitLab has released urgent security updates to fix a critical vulnerability that could allow attackers…

13 hours ago