Nonconsensual intimate imagery (NCII) is sexual images or videos of a person that are shared, altered, or created without that person’s permission. NCII can be real footage, edited material, or fully synthetic content such as deepfakes. The key security issue is not just privacy harm: NCII is often distributed through anonymous domains, mirrored sites, encrypted chats, and disposable hosting that make takedown and attribution difficult.
In cyber security, NCII matters because it combines identity abuse, content manipulation, and infrastructure abuse. Attackers may scrape source photos, generate sexualized media, then publish or sell it through ordinary web services. Defenders use reporting workflows, evidence preservation, and provenance checks to trace origin and edits. Standards such as C2PA can help by attaching tamper-evident media credentials, but they work best when applied before content is copied or stripped. Domain disruption can reduce access, but it does not remove every repost or copy.