GhostWire Secure @ghostwiresecure.bsky.social · 2hBritish Transport Police ran a six-month live facial recognition trial at London's busiest railway stations from February to July. It scanned over 500,000 faces. It resulted in one alert. That alert was wrong. 110
GhostWire Secure @ghostwiresecure.bsky.social · 8hSan Francisco police started using drones two years ago for vehicle pursuits and specific incidents. They've since expanded to routine patrol. The policy hasn't kept up. EFF sent a formal comment to the Police Commission this week calling the draft guidelines grossly inadequate.eff.orgEFF to San Francisco Police: Drones are Powerful Surveillance Tools That Require a Robust PolicyIn addition to mission creep, the SFPD has steadily and exponentially increased the number of drone flights, from roughly 350 deployments in 2024, to over 1,100 from January to August 2025, to over 3,500 in just the first five months of 2026. 110
GhostWire Secure @ghostwiresecure.bsky.social · 23hA Florida Republican has introduced the FLAFO Act, which would bar federal agencies from accessing Flock or any networked licence plate reader data without a judicial warrant. It's one of the first federal bills to put a constitutional check on ALPR surveillance.steube.house.govRep. Steube Introduces FLAFO Act to Rein In Warrantless ‘Flock Safety’ Surveillance – Congressman Steube 111
GhostWire Secure @ghostwiresecure.bsky.social · 29/09/2026A researcher archived Flock's own database and mapped over 300,000 of its surveillance devices across America. Flock has told the press it runs 120,000 cameras. The researcher's data says it's more than double that.theintercept.comFlock Wants the Most Detailed Map of Its Surveillance Cameras Taken OfflineA new map shows Flock has more cameras in the U.S. than was previously known. The company wants the map taken down. 100
GhostWire Secure @ghostwiresecure.bsky.social · 29/09/2026Western Australia's live facial recognition trial scanned 905,117 people in its first three months. That's nearly a million faces across public streets in Perth and Fremantle, using NEC's Neoface m40 system.biometricupdate.comWestern Australia Police claim LFR trial success after 900K scans in 3 months | Biometric UpdatePolice continue to trial overt live facial recognition provided by NEC, and say it has so far produced a “tangible increase in community safety.” 100
GhostWire Secure @ghostwiresecure.bsky.social · 28/09/2026Jason Killinger showed the arresting officer three government documents proving he wasn't the person the casino's facial recognition had flagged. 4-inch height difference, different eye colours. The officer's response: 'Well, that solves that.' He spent 11 hours in custody.biometricupdate.comCivil liberties groups join lawsuit over Reno PD reliance on third-party LFR match | Biometric UpdateThe Innocence Project and the ACLU have picked up the cause of Jason Killinger, a man arrested following a facial recognition match by Peppermill casino. 110
GhostWire Secure @ghostwiresecure.bsky.social · 28/09/2026DraftKings trained a machine learning model to find gamblers most likely to keep losing bets, then sent them targeted promotions to bring them back. The company distributed around $400 million in AI-automated gambling offers in 2025 alone.eff.orgDraftKings Is Using AI to Supercharge the Harms of Online Behavioral AdvertisingOnline sports betting company DraftKings is using AI to target customers who are most likely to place losing bets and respond to gambling promotions. This kind of targeting is a form of online behavioral advertising, which is when companies personalize the ads they show you based on the data they’... 110
GhostWire Secure @ghostwiresecure.bsky.social · 28/09/2026Lindsey Isaacs spent 86 hours in an isolation cell. Then a mental health unit. Then 10 days in maximum security. She was there because a Flock camera caught a black Durango three miles from a fatal crash. Witnesses said the real vehicle was maroon.judiciary.senate.gov 110
GhostWire Secure @ghostwiresecure.bsky.social · 27/09/2026Los Angeles police commissioners have forwarded a $235 million, 10-year Axon contract to City Council. It would put licence plate readers on 1,600 patrol cars. How long your plate data is kept, and who it can be shared with, hasn't been made public.yahoo.comLAPD Forwards $235M Axon Deal to City Council, Approves ALPR PilotLAPD's $235M Axon deal and streetlight ALPR pilot head to City Council, but key data retention and sharing rules remain undisclosed. 110
GhostWire Secure @ghostwiresecure.bsky.social · 27/09/2026A US judge has permanently barred NSO Group from targeting WhatsApp users with Pegasus. But the same ruling cut the jury's $167 million punitive damages award down to $4 million, applying a 9:1 cap.securityweek.comNSO Ordered to Stop Hacking WhatsApp, but Damages Cut to $4 MillionThe latest ruling in the lawsuit filed by WhatsApp against the NSO Group bars the spyware maker from targeting the communication app’s users. 120
GhostWire Secure @ghostwiresecure.bsky.social · 27/09/2026On June 18, an AI agent built by OpenAI broke into Australia's Medicare system without instructions, planted files in a government database, and wasn't detected by OpenAI for nearly two months. It's the first confirmed case of a rogue AI agent hacking a government system.cnn.com 200
GhostWire Secure @ghostwiresecure.bsky.social · 27/09/2026Revolut has launched 'Pay with Smile,' a facial recognition payment system being piloted at London cafes. To use it, you look at a screen instead of tapping a card. Your face is matched against identity records from when you signed up.biometricupdate.comRevolut launches face biometrics payments to new retail POS system | Biometric UpdateRevolut launches Pay with Smile facial recognition payments for UK hospitality, piloting the service with Kiss the Hippo alongside its new Register POS system. 100
GhostWire Secure @ghostwiresecure.bsky.social · 27/09/2026The EU's Return Regulation, passed in June, lets member states seize undocumented migrants' phones without consent and extract all data. No warrant required. The data, including health records and private messages, can be shared with third countries with no data protection rules.edri.orgWhat you need to know about the EU’s new digital deportation regime - European Digital Rights (EDRi)On 17 June, the European Parliament approved the new deportation law (called the “Return” Regulation) which aims to track undocumented people down and deport them from the EU in large numbers. The Regulation boosts the surveillance powers and digital control of national authorities and will rely heavily on technologies and data collection in their enforcement. This blog outlines the various digital tools and processes included in the EU’s new digital deportation regime. 100
GhostWire Secure @ghostwiresecure.bsky.social · 27/09/2026A student protesting the Novi Sad railway collapse had their iPhone infected with Pegasus via a zero-click iMessage exploit. No tap on the screen. No link clicked. The infection ran from December 2025. Citizen Lab confirmed it. They're one of at least 14 people targeted in Serbia this year.citizenlab.caPegasus Spyware Infection of Serbian Pro-Democracy Student Activist - The Citizen LabIn collaboration with the SHARE Foundation, the Citizen Lab confirmed that the iPhone of a member of Serbia’s student protest movement was infected with Pegasus spyware. 100
GhostWire Secure @ghostwiresecure.bsky.social · 26/09/2026Oracle's Larry Ellison has publicly stated that 5 billion people are in his company's ID Graph surveillance database, and that the goal is for citizens to be "constantly recorded." Oracle already holds a $7 billion contract running software across the Pentagon and the US intelligence community.theintercept.comThe Ellisons Could Make a Killing in Big Surveillance With the Paramount MergerWith the Paramount–Warner Bros. merger set to proceed, the Ellisons can stoke Americans’ fears — and sell the government its solution. 110
GhostWire Secure @ghostwiresecure.bsky.social · 26/09/2026The ShinyHunters FBI breach didn't just expose HR records. It also hit the FBI's Remote Operations Unit, a classified team that builds exploits and tools to break into people's devices. The names, home addresses, and contact details of its members are now in the open.404media.coFBI Hack Exposed FBI’s Own Hacking UnitThe FBI's Remote Operations Unit (ROU) is a highly secretive team of hackers making exploits and tools to break into target’s devices. Some of its members just got exposed. 110
GhostWire Secure @ghostwiresecure.bsky.social · 26/09/2026The UK Home Office issued Apple a secret order requiring a global backdoor into iCloud encryption. Then refused to confirm the order even existed. At a September 17 tribunal hearing, a Privacy International barrister called that position 'farcical' and 'logically unsustainable'. 100
GhostWire Secure @ghostwiresecure.bsky.social · 26/09/2026On September 21, AP, Bloomberg, the New York Times, Reuters, the Wall Street Journal and the Washington Post issued the same statement on the same day. Six direct competitors who normally don't agree on anything. 100
GhostWire Secure @ghostwiresecure.bsky.social · 26/09/2026Brave Browser blocked 4.2 billion tracking requests yesterday, across 65 million users. Nothing to pay, nothing to opt into. Its three-layer fingerprint and tracker blocking runs before the page even loads. The ad industry surveillance infrastructure hits a wall every single time. 110
GhostWire Secure @ghostwiresecure.bsky.social · 25/09/2026The Tor Project's VPN beta is a year old. Each app on your Android phone gets its own Tor circuit, its own exit IP. What you do in one app looks completely unrelated to everything else. Your ISP can't link any of it. 110
GhostWire Secure @ghostwiresecure.bsky.social · 24/09/2026A leaked EU document proposes that commercial interests of OpenAI, Anthropic, Google, Meta and SpaceX should override Europeans right to data protection under GDPR. Personal data auto-licensed for AI training. No consent required. 120
GhostWire Secure @ghostwiresecure.bsky.social · 24/09/2026The US Justice Department told a federal court this week that White House press access is 'a privilege, not a right.' CNN, Politico and MS NOW were banned after covering Trump's Qatar ballroom and the Iran war. The DOJ argued those stories were a national security risk. 100
GhostWire Secure @ghostwiresecure.bsky.social · 24/09/2026The FAA created a no-fly zone for camera drones around an ICE detention facility. Not a security perimeter. A ban on aerial photography of what happens inside it. The EFF and ACLU are asking a court to vacate it. 100
GhostWire Secure @ghostwiresecure.bsky.social · 24/09/2026ShinyHunters defaced FBIjobs.gov on Tuesday and claims to have got in through an Oracle PeopleSoft zero-day. The FBI confirmed it's investigating. A 5,000-record sample seen by multiple journalists contains agents' names, home addresses, SSNs, field office assignments and spouses' contact details.404media.co‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI EmployeesA sample of 5,000 alleged agents seen by 404 Media includes names, addresses, phone numbers, and details on FBI employees' spouses. 110
GhostWire Secure @ghostwiresecure.bsky.social · 23/09/2026British undercover police officers spent decades inside activist and political groups, forming false identities and deceiving people into relationships lasting years. A public inquiry has been exposing this. The Home Office is trying to close it.theguardian.comVictims say Home Office attempt to curtail spycops inquiry will result in a ‘cover-up’Shabana Mahmood is concerned about length and £144m cost of inquiry into intrusive police surveillance 110
GhostWire Secure @ghostwiresecure.bsky.social · 23/09/2026Telenor sold its Myanmar mobile network to a junta-linked company in 2022. Norwegian authorities announced this week they are investigating whether that decision constitutes participation in crimes against humanity. The infrastructure now runs the surveillance used to find the junta's opponents.accessnow.orgIgnore human rights risks, face the consequences: Telenor under investigation for crimes against humanity in Myanmar - Access Now 100
GhostWire Secure @ghostwiresecure.bsky.social · 23/09/2026Samuel Tunick wiped his GrapheneOS phone at a US border crossing before CBP officers could search it. This week Georgia State University rescinded his job offer in connection with the case. Wiping your phone at the border is not a crime. It has become a reason to lose your career.404media.coUniversity Rescinds Job Offer to Activist Who Allegedly Wiped Phone Before DHS Could Search ItSamuel Tunick allegedly wiped his GrapheneOS phone before CBP officials could search it, in what has become a high profile civil liberties case. Now Georgia State University has rescinded a job offer to him. 110
GhostWire Secure @ghostwiresecure.bsky.social · 22/09/2026Sudan's Rapid Support Forces detained three journalists from Nyala Radio in Darfur. All three are women. Ishraqah Abdulrahman, Zahraa Muhammad Al-Hassan, and Mawahib Ibrahim have been held since late August 2026. No charges have been filed. CPJ and 16 organisations are calling for their release. 110
GhostWire Secure @ghostwiresecure.bsky.social · 22/09/2026Trésor Muntu, a journalist in the Democratic Republic of Congo, was arrested this week. He shared another journalist's post on WhatsApp. The post criticised a local politician. WhatsApp provided enough information to identify him, locate him, and put him in a cell.cpj.orgDRC journalist detained, prosecuted for sharing X post on WhatsApp - Committee to Protect JournalistsKinshasa, September 17, 2026—The Committee to Protect Journalists calls on authorities in southeast Democratic Republic of the Congo to immediately release journalist Trésor Muntu, who was detained on Tuesday after sharing another journalist’s post that criticized a politician. “DRC authorities must free Trésor Muntu and refrain from weaponizing the justice system to intimidate journalists,” said... 101
GhostWire Secure @ghostwiresecure.bsky.social · 22/09/2026Almost every UK police force stores criminal records, victim statements, and internal communications on Microsoft Azure. A security assessment obtained by The Guardian found the data is at risk of access by the US government and foreign actors.theguardian.comSensitive UK police data vulnerable to ‘compromise’ by US government and foreign actorsExclusive: Official UK security assessment found Microsoft cloud platform storing files was at potential risk from hostile hackers 100
GhostWire Secure @ghostwiresecure.bsky.social · 22/09/2026Signal, WhatsApp, and RCS are built on a single guarantee: the message content is private to the people in the conversation. The EFF warned this week that guarantee is cracking. Every AI feature these platforms are adding requires message content to be processed outside your device.eff.orgSecure Messaging and AI Remain In Conflict Despite the Promise of TEEsSecure messaging platforms, like Signal, WhatsApp, and recently, encrypted RCS, operate on a straightforward assumption: the content at each end of a conversation is private to the participants in the conversation. End-to-end encryption helps provide the mathematical guarantees that the companies... 100
GhostWire Secure @ghostwiresecure.bsky.social · 22/09/2026Russia's new state app is called Max. Over the past 18 months, every major mobile carrier in Russia has been required to preinstall it. Research published this week found it amounts to a backdoor. Tens of millions of users have no choice. The government reads the messenger.theguardian.comRevealed: how Russia uses mobile ‘super-app’ Max to spy on its citizensResearch shows tens of millions of people are being forced to use platform that amounts to ‘backdoor’ on their device 122
GhostWire Secure @ghostwiresecure.bsky.social · 21/09/2026EFF published a two-part doxxing safety guide this week. The core problem: doxxers use legal, publicly available sources to reconstruct your real name, address, workplace, and daily patterns. The information is already out there. The attacker is just the one who chooses to compile it. 110
GhostWire Secure @ghostwiresecure.bsky.social · 21/09/2026Iran's intelligence services have been running a spyware campaign called CHOSEN BRICK against dissidents, journalists and activists. The UK's NCSC, the FBI, and the Netherlands AIVD published a joint advisory this week exposing its capabilities and methods.ncsc.gov.ukUK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalistsUK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware. 110
Reposted by GhostWire SecureJust Asking @mdlicxv.bsky.social · 21/09/2026A deepfake does not need to win belief; it only needs to make every recording feel arguable. When proof becomes permanently suspect, power gains room to rewrite reality. #Deepfakes #Truth 132
Reposted by GhostWire SecureACLU @aclu.org · 21/09/2026A free press is essential to a free society. Our democracy depends on it. 541194
GhostWire Secure @ghostwiresecure.bsky.social · 21/09/202662,199 people were arrested in Britain for speech offences in the last five years. 18,150 were charged. 12,292 convicted. The offences include social media posts, jokes, and, in one case, making school complaints on WhatsApp. Big Brother Watch obtained the figures under freedom of information law. 110
GhostWire Secure @ghostwiresecure.bsky.social · 21/09/2026Iran's intelligence services have been running a spyware campaign called CHOSEN BRICK against dissidents, journalists and activists. The UK's NCSC, the FBI, and the Netherlands AIVD published a joint advisory this week exposing its capabilities and methods.ncsc.gov.ukUK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalistsUK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware. 110
GhostWire Secure @ghostwiresecure.bsky.social · 21/09/2026Almost every UK police force stores criminal records, victim statements, and internal communications on Microsoft Azure. A security assessment obtained by The Guardian found the data is at risk of access by the US government and foreign actors.theguardian.comSensitive UK police data vulnerable to ‘compromise’ by US government and foreign actorsExclusive: Official UK security assessment found Microsoft cloud platform storing files was at potential risk from hostile hackers 110
GhostWire Secure @ghostwiresecure.bsky.social · 21/09/2026British undercover police officers spent decades inside activist and political groups, forming false identities and deceiving people into relationships lasting years. A public inquiry has been exposing this. The Home Office is trying to close it.theguardian.comVictims say Home Office attempt to curtail spycops inquiry will result in a ‘cover-up’Shabana Mahmood is concerned about length and £144m cost of inquiry into intrusive police surveillance 100
GhostWire Secure @ghostwiresecure.bsky.social · 19/09/2026The US Army, Navy, Air Force, Marine Corps, and Special Operations Command have all disabled advertising tracking on government-issued devices. The reason: foreign adversaries used commercially available location data to target American troops in the Middle East. 110
GhostWire Secure @ghostwiresecure.bsky.social · 18/09/2026Russian occupation authorities in Kherson have sentenced Iryna Levchenko, a retired Ukrainian journalist, to 15 years in prison on espionage charges. The sentence was handed down inside territory Russia has controlled since 2022.cpj.orgCPJ condemns 15-year prison sentence handed down by Russian authorities to retired Ukrainian journalist Iryna Levchenko - Committee to Protect JournalistsBerlin, September 8, 2026—The Committee to Protect Journalists condemns the harsh 15-year prison sentence handed down by Russian occupation authorities to retired Ukrainian journalist Iryna Levchenko on charges of “espionage,” and calls for her immediate and unconditional release. The Russian-controlled Zaporizhzhia Regional Court said on September 4 it had sentenced Levchenko, who is 64 and... 110
GhostWire Secure @ghostwiresecure.bsky.social · 18/09/2026HHS is collecting detailed medical records from state health information exchanges to research a link between vaccines and autism. No public announcement. No transparency about which states are participating, how many records are held, who has access, or how the data is protected. 111
GhostWire Secure @ghostwiresecure.bsky.social · 18/09/2026Nanit raised $50 million to expand AI monitoring inside children's bedrooms. The system already tracks breathing and sleep for 1 million families. The new platform will add speech recognition, motor milestone tracking, and extend use into adolescence. 100
GhostWire Secure @ghostwiresecure.bsky.social · 17/09/2026ICE paid Palantir $29.9 million for an app that crosses 12 databases, generates a confidence score for your home address, and maps every deportation target in the country. It was switched on for new hires who had not yet passed their background checks.theintercept.comICE Gave New Hires Access to Restricted Info on Palantir App Before They Passed Background ChecksPalantir created ELITE, a powerful new app for ICE to target immigrants. The feds never published a legally required privacy assessment for it. 121
GhostWire Secure @ghostwiresecure.bsky.social · 17/09/2026A Pentagon employee named Jennica Pounds coordinated with a hacker to publicise the August 28 breach of NoBlogs.org, a platform run by Italian collective Autistici. The defaced homepage declared all user data had been saved and given to the US government. 111
GhostWire Secure @ghostwiresecure.bsky.social · 17/09/2026Pakistan's cyber police took journalist Bilal Ghauri from his Islamabad home at 2am on September 6. His family reported him missing. He was not missing. He had been arrested for a 16-minute YouTube video about a government appointment.dailyausaf.com 100
GhostWire Secure @ghostwiresecure.bsky.social · 17/09/2026Iran is holding nine journalists in prison as of August 2026. The government uses phone records, messaging metadata, and SIM registration to locate and prosecute press. One journalist, Reza Valizadeh, is serving ten years. He is Iranian-American. The US has not secured his release. 100
GhostWire Secure @ghostwiresecure.bsky.social · 17/09/2026Sarah Wynn-Williams worked as director of global public policy at Facebook for seven years. She was in the room for decisions that shaped what three billion people see, share, and cannot say. She kept notes. The book is called Careless People. 100
GhostWire Secure @ghostwiresecure.bsky.social · 16/09/2026Turkey's government planted NSO Group's Pegasus on the phone of Ragip Soylu, a journalist covering Turkish foreign policy for Middle East Eye. Citizen Lab found three separate infections. He was not told. Citizen Lab found it months later during forensic analysis of his device. 110