surveillance9 articles
Military Apps Riddled With Chinese and Russian Code, Study Finds
A study by researchers from Purdue University, West Point, and Florida International University found that over one in eight apps marketed to US military personnel contain code from companies in adversarial nations, including China and Russia, potentially enabling foreign governments to track troop movements and locations. Nearly two-thirds of the 220+ examined apps included third-party tracking software, with roughly 7 percent carrying code from Pentagon-designated adversaries, and 40 percent collected more data than disclosed in their store listings. Despite growing evidence of real-world threats — including a US Central Command acknowledgement that adversaries have exploited commercial location data to target troops in the Middle East — service members receive little institutional guidance on app privacy, and neither major app store discloses the national origin of code running inside apps.
Apple Pings Users in 110 Countries Over Mercenary Spyware Threats
Apple has sent threat notifications to users in 110 countries who may have been targeted by mercenary spyware attacks, bringing the total number of countries notified since 2021 to over 150. These sophisticated attacks typically target high-profile individuals such as journalists, activists, politicians, and diplomats, and represent some of the most advanced digital threats in existence. Apple delivers alerts via the iPhone lock screen, email, and the user's Apple Account page, and recommends protective measures such as enabling Lockdown Mode, using two-factor authentication, and keeping devices updated.
AI on the Battlefield: How Automated Kill Chains Leave Humans Mostly Out of the Loop
A report by transparency watchdog Airwars, titled *Anatomy of an AI Kill Chain*, examines how AI and machine learning systems drive modern military targeting decisions across six stages, from surveillance to post-strike assessment, with humans involved in only a minority of steps. The report uses a fictitious but realistic kill chain to highlight the compounding errors possible at each stage, including flawed translations, misidentification by computer vision, and automation bias that makes it difficult for humans to meaningfully intervene. Co-author Sophia Goodfriend argues that the fundamental flaws in these machine learning systems are not merely teething problems, but inherent limitations that militaries cannot rely on when making life-and-death decisions.
Anti-Flock Vandal Forgot About All The Other Cameras Watching Him
Marcus Bee, a 40-year-old Californian, was arrested and jailed after allegedly destroying three Flock automated license plate reader (ALPR) cameras in Monterey County, causing thousands of dollars in damage — only to be caught on other nearby surveillance cameras he failed to disable. The arrest is part of a broader trend of Americans targeting Flock cameras across the country, driven by concerns over privacy, potential immigration enforcement use, and alleged constitutional violations. While law enforcement defends the cameras as vital investigative tools, critics including the ACLU raise concerns about mass data collection, and there have been documented cases of officers misusing the technology to stalk individuals.
Russian Intel Is Using Your CCTV Camera to Watch NATO Weapons Shipments
Russian intelligence services are systematically compromising internet-connected security cameras across Europe and Ukraine to monitor military logistics, weapons shipments, and troop movements, according to a July 10 advisory from Dutch intelligence agencies. In Ukraine, the access has gone beyond surveillance, being used to target military personnel and equipment, while across NATO states it is gathering broader military intelligence. Entry is typically straightforward, exploiting default passwords, outdated firmware, and publicly exposed devices, with image-recognition software then automating the search for military vehicles and cargo.
The MEP Investigating Pegasus Got Hacked With Pegasus. Yes, Really.
Citizen Lab researchers have revealed that Stelios Kouloglou, a former Member of the European Parliament who served on a committee investigating spyware abuse, had his iPhone repeatedly hacked with Pegasus spyware during his tenure in 2022 and 2023. Forensic analysis found the attacks exploited a zero-click vulnerability in Apple's HomeKit software, potentially giving attackers access to confidential documents and committee deliberations. While no specific government has been attributed responsibility, Citizen Lab identified an overlap with a separate campaign targeting Russian and Belarusian-speaking journalists and activists in Europe, suggesting a Pegasus operator licensed to conduct surveillance across multiple EU countries was likely responsible.
Predatorgate Victims Sue Intellexa for €8M Over Greek Spyware Scandal
Eight victims of Greece's "Predatorgate" spyware scandal have filed an €8 million lawsuit against Athens-based Intellexa SA and 13 associated individuals, including founder Tal Dilian, seeking €1 million each in moral damages for having their devices hacked between 2020 and 2021. The scandal involved Predator spyware being used to target at least 87 high-profile Greeks, including journalists, lawyers, and intelligence officials, through malicious SMS links exploiting zero-day vulnerabilities. Key figures behind the spyware have already been convicted and sentenced in Greece, and several Intellexa entities were added to the US Treasury's sanctions list in 2024, though the Greek government has consistently denied any state involvement in the attacks.
Play Ransomware Claims MyPillow Scalp — Lindell Says It's a Political Stitch-Up
The Russian-language ransomware group Play has claimed to have stolen sensitive financial and personal data from Mike Lindell's MyPillow, setting a Friday deadline for the company to make contact before publishing the data. Lindell has denied the breach, dismissing the claims as a politically motivated "hit job" related to his gubernatorial campaign. Play has targeted over 900 organisations since 2022 and is known for data theft and extortion tactics.
China Is Bolting AI Onto Its Creaking Camera Grid. The Upgrade Is Significant.
China is upgrading its extensive legacy camera network with AI-powered systems from manufacturers like Hikvision and Huawei, enabling automated behavioral analysis, crowd detection, and text-based video search without manual review. The modernization follows a 2024 government directive issued after a series of violent attacks, shifting the system's focus from reactive individual identification to large-scale, proactive behavioral monitoring. Human rights experts and Anthropic have raised alarm, warning that the upgrades represent a far more sweeping surveillance capability that China could scale significantly by 2028.