Daily Surveillance Briefing: February 17, 2026

TL;DR:

DHS shutdown enters Day 4. Congress won't return until February 23. That's at least 10 days of CISA running at one-third capacity while Microsoft's six zero-days from last week remain unpatched across federal networks. ICE keeps operating with full funding. Everyone else works without pay.
Meta plans facial recognition for Ray-Ban glasses this year. Internal documents show a feature called "Name Tag" that identifies people you look at in real time. Meta timed development for "a dynamic political environment where civil society groups...would have their resources focused on other concerns." They're counting on you being too distracted to fight it.
FISA 702 countdown: 62 days. Section 702 expires April 19. The White House held a meeting last week and is pushing for a "clean" reauthorization: no warrant requirement, no reforms. Senators Durbin and Lee plan to reintroduce the SAFE Act when Congress returns. The fight is coming.
Google killed its Dark Web Report today. The tool that scanned for your leaked data is gone. Google says it "didn't provide helpful next steps." Translation: they couldn't figure out how to monetize telling you your data was stolen.
Ring's Flock cancellation fallout continues. Cities are now reconsidering their own Flock contracts. Several municipalities have suspended federal access to their camera networks. Public pressure actually worked: a rare surveillance rollback.

DHS Shutdown Day 4: Congress Is Gone, CISA Is Crippled, ICE Keeps Running

The Department of Homeland Security shutdown entered its fourth day on Monday. Lawmakers left Washington on Thursday without any agreement on DHS funding and aren't scheduled to return until February 23, a day before Trump's State of the Union address. That means at least ten days of this.

CISA remains at roughly one-third capacity. About 1,450 of its 2,341 employees are furloughed. No new vulnerability assessments. No coordinated incident response. No cybersecurity guidance. Microsoft's six zero-days from last Tuesday's Patch Tuesday (including two actively exploited vulnerabilities) are still being used against federal systems. CISA can't even tell agencies which patches to prioritize.

The funding fight centers on ICE oversight. Democrats want body cameras on agents, warrant requirements for home entries, and restrictions on roving patrols. These demands intensified after ICE agents fatally shot two U.S. citizens in Minneapolis on January 20. House Speaker Mike Johnson called them "non-starters." Neither side has budged.

About 90% of DHS's 272,000+ employees continue working without pay: TSA agents, Coast Guard, Border Patrol. ICE is the exception: separately funded through the "One Big Beautiful Bill" passed in January, they're fully operational. The irony writes itself. The surveillance arm has money. The defense arm doesn't.

This shutdown is narrower than the 43-day shutdown last fall that hit every federal agency. But it's targeting the country's cybersecurity infrastructure at exactly the wrong time. Salt Typhoon compromised telecom networks. ShinyHunters is tearing through Okta SSO deployments. And the agency tasked with coordinating federal cyber defense is watching from the bench.

Sources: NBC News, NPR, The Hill, PBS NewsHour

Meta's Plan to Put Facial Recognition on Your Face

Meta is building a feature called "Name Tag" for its Ray-Ban smart glasses that would identify people you look at in real time. According to internal documents reported by the New York Times, the company plans to launch it "as soon as this year."

Here's how it would work: You look at someone. The glasses' camera captures their face. Meta's AI assistant pulls up information about them: their name, their job, where you might know them from. All in real time, projected through the glasses or whispered through the earpiece.

The same internal documents reveal Meta's timing strategy. The company planned development during "a dynamic political environment where civil society groups and policymakers would have their resources focused on other concerns." They're betting that immigration enforcement, FISA reauthorization, and DHS shutdowns will keep privacy advocates too busy to fight smart glasses that identify strangers on the street.

Meta has been here before. In 2021, the company shut down Facebook's facial recognition system used to auto-tag people in photos, citing "the need to weigh the positive use cases...against growing societal concerns." Four years later, they're building the same thing for wearables.

The current plan limits Name Tag to recognizing people you already know through Meta platforms, or public figures with Instagram accounts. But once the infrastructure exists, scope creep is inevitable. Ask anyone who remembers when Ring cameras were just for watching your porch.

Sources: TechCrunch, MacRumors, Futurism, Digital Trends

FISA 702: 62 Days, No Position, No Reforms

Section 702 of the Foreign Intelligence Surveillance Act expires on April 19, 2026. That's 62 days from today. And the White House still hasn't publicly committed to any position on reauthorization.

Last week, the administration held a closed-door meeting with top advisers and lawmakers to discuss renewal. According to reports from Nextgov and The Record, the White House is seeking a "clean" reauthorization of 18 months or three years, with no warrant requirement for searching Americans' communications and no reforms to the data broker provision added in 2024.

That provision, Section 702(i)(2), expanded the definition of "electronic communication service provider" so broadly that civil liberties groups warn it could compel almost any business touching the internet to assist NSA surveillance. Privacy advocates call it the "everyone's a spy" clause. The administration wants to keep it.

Senators Durbin and Lee are expected to reintroduce the SAFE Act when Congress returns on February 23. The bill would require a warrant for queries of U.S. person communications collected under 702, the reform that narrowly failed in 2024. A classified Senate hearing last week "erupted in frustration" when intelligence officials refused to state whether the administration supports any reforms.

The clock is running. If Congress does nothing, 702 authorities lapse on April 20. Intelligence agencies lose a tool they call essential. Privacy advocates get a sunset they've wanted for years. Neither side seems to know what happens next.

Sources: Nextgov, The Record, Nextgov, Brookings

Google Kills Dark Web Report: "Didn't Provide Helpful Next Steps"

Google officially discontinued its Dark Web Report feature today, February 17. The tool scanned dark web forums for your leaked personal information and alerted you if it found matches. It's gone now. Google says it "didn't provide helpful next steps."

Translation: people found out their data was stolen, but Google couldn't tell them what to do about it. The company decided to "focus on tools that give you more clear, actionable steps to protect your information online." What those tools are remains unclear.

The shutdown happened in two phases. New dark web scanning stopped on January 16. Today, the tool itself is gone, and Google is deleting all monitoring profile data from its servers. If you had a monitoring profile set up, it's already erased.

Google One subscribers got access first in 2023. The company expanded it to all Google account holders in July 2024. Now, barely a year and a half later, it's dead. The timing is unfortunate: ShinyHunters just hit Harvard, Figure Technology, and Match Group in a single month. AT&T's "zombie breach" is resurfacing with enriched data. More people than ever need dark web monitoring.

Alternatives exist. Proton offers dark web monitoring through its premium plans. Have I Been Pwned remains free for basic breach checking. Mozilla Monitor provides similar services. If you relied on Google's tool, pick one of these before your next breach notification comes from a credit monitoring service you never signed up for.

Sources: TechCrunch, Proton, The Hacker News, Malwarebytes

Quick Hits

Ring-Flock fallout spreads to cities: Following Ring's cancellation of its Flock partnership, several municipalities are reconsidering their own Flock contracts. At least two cities have suspended federal access to their ALPR networks pending review. We covered the growing rebellion against Flock federal access last week. The Super Bowl backlash accelerated it. [CBS News]

Treasury lifted spyware sanctions without explanation: The Trump administration quietly removed three individuals linked to Predator spyware from the Treasury sanctions list. Sara Aleksandra Fayssal Hamou, Andrea Nicola Constantino Hermes Gambazzi, and Merom Harpaz were sanctioned for developing and distributing Predator in 2024. Treasury says they "demonstrated measures to separate themselves from the Intellexa Consortium." No details on what those measures were. Predator is still being deployed worldwide. [The Hacker News]

ICE surveillance spending hits $180M since inauguration: New analysis shows ICE has committed over $180 million to surveillance technology contracts since January 20. The spending includes Clearview AI access, Palantir's ELITE platform, location data brokers, and social media monitoring tools. Congress still hasn't received a complete accounting of post-inauguration surveillance purchases. [WBUR]

Discord backlash over age verification: Discord announced all users must verify their ages to access adult content by uploading government IDs or video selfies. Privacy advocates immediately flagged risks of centralizing biometric and identity data. Discord hasn't explained how long verification data will be retained or who will have access. [Ars Technica]

Mobile Fortify usage exceeds 100,000 scans: According to a lawsuit filed by Illinois and Chicago, DHS has used the Mobile Fortify facial recognition app in the field more than 100,000 times since launch. The app lets ICE agents scan faces against 200 million images in government databases. It's being used on both immigrants and U.S. citizens. [NBC News]

What to Watch

DHS shutdown timeline: Congress returns February 23. State of the Union is February 24. Expect a rushed funding deal or a continuing resolution that kicks the fight down the road. Either way, CISA stays gutted for at least six more days.
FISA 702 countdown, 62 days: The SAFE Act reintroduction is coming. Watch for whether the White House publicly opposes the warrant requirement or stays silent. A classified hearing on Friday may reveal more about the administration's position.
Meta Name Tag development: No launch date announced, but "this year" means anytime. The feature is currently limited to people you know or public figures. Watch for any expansion of scope or opt-out mechanism details.
Ring Search Party status: Ring cancelled the Flock partnership. They haven't cancelled the AI-powered lost pet feature that triggered the backlash. The underlying camera network remains intact. Watch for a quieter relaunch.
ShinyHunters campaign: Harvard, Figure, Penn, Match Group, all breached through Okta SSO in the past month. If your organization uses Okta, assume you're a target. Check MFA settings now.