Daily Surveillance Briefing: October 13, 2026

Graylark Technologies' product Raven, formerly GeoSpy, can pin a specific property to a single interior photo and LAPD and the Miami-Dade Sheriff's Office have bought access, 404 Media reported on Monday. Booz Allen's own OT lab cleared all eight ICS attack scenarios it ran two unnamed frontier models through, with one moving from perimeter to live control-system access in just over 16 minutes. EFF and ACLU of Northern California demanded records from the Marin County Sheriff over a reported 254,131 ALPR shares that violated SB 34 in a single month. EFF pressed its case against two site-blocking bills that name VPN providers as enforcement targets. A federal judge in Manhattan refused to dismiss the UAW, CWA and AFT lawsuit against the State Department and DHS over social-media monitoring of noncitizens.

State of Surveillance

Today in Surveillance:

  • A police AI can pin a specific house to a single interior photo. 404 Media's Joseph Cox reported Monday that Raven, a product of Graylark Technologies formerly known as GeoSpy, lets an officer upload one photo taken inside a property and get back the address. LAPD and the Miami-Dade Sheriff's Office are named buyers [1][2].
  • Booz Allen ran two unnamed frontier models through eight ICS attack scenarios in an OT lab replica. Every scenario succeeded; one model moved from perimeter to actions inside the industrial control network in just over 16 minutes, and another located and moved a robotic arm in minutes, per The Register [3].
  • EFF and ACLU of Northern California demanded records from the Marin County Sheriff. The demand cites the Sheriff's own November 2024 audit: 254,131 ALPR data shares with out-of-state and federal agencies in one month, in violation of SB 34 and a 2022 court settlement [4].
  • EFF pressed its case against two site-blocking bills that name VPN providers. The American Copyright Protection Act (H.R. 10364) drops the VPN exclusion the prior FADPA carried; the DEFEND IP Act (H.R. 10575) "deputizes every service provider into a copyright cop," EFF writes [5][6].
  • A federal judge in Manhattan refused to dismiss the UAW, CWA and AFT suit against State and DHS. Judge Alvin K. Hellerstein's October 1 ruling finds the social-media monitoring program for noncitizens chills First Amendment speech and proceeds to discovery [7].

Continuing threads: Yesterday's briefing on AA26-281A carries the Flax Typhoon advisory into the new week. The Oct 11 briefing carries the Wyden HIDTA ALPR demand, the EFF "No ID Means No Internet" explainer, and the EFF federal data-consolidation map into today as queued reads.

Raven Reads a House From One Interior Photo

404 Media's Joseph Cox reported Monday that Raven, a product of Graylark Technologies, can take a single interior photo and return the specific address it was taken in. The product was previously known as GeoSpy. CEO Daniel Heinen told the publication Indicator the company renamed it after restricting access to government and enterprise users. The rebrand trail matters because the same tool that until a year ago was open to anyone has now narrowed its buyers to police and large institutions [1].

Two buyers are named. The Los Angeles Police Department has access to Raven. The Miami-Dade Sheriff's Office has access to "a custom model specifically trained for Miami-Dade County." MDSO spokesperson Joseph R. Peguero Rivera told 404 Media: "To date, use of GeoSpy has been limited and largely exploratory… it has not resulted in any significant investigative breakthroughs or arrests" [1][2]. The police-side response fits the academic privacy research more than the marketing: a tool trained on millions of geotagged images, for sale to police, with no demonstrated payoff in arrests.

The technical step from outdoor geolocation to "what house is this room inside of" is what makes the product matter. Heinen told 404 Media his company is "investing heavily in interior geolocation across U.S. hotels, short-term rentals, houses, and apartments" in 2026. The training corpora he names are Zillow, Airbnb, and Vrbo, platforms whose business depends on users publishing detailed interior photos. A photo posted by a guest for one purpose becomes the search index for a warrant on another. Heinen described the moment the team noticed the new capability: "That was kind of an 'Oh shit' moment for us. GeoSpy 1.0 couldn't do that" [1]. Airbnb said it strips location metadata, prohibits scraping, and has no relationship with Graylark. Zillow said scraping violates its terms. Vrbo did not respond [1]. None of the platforms consented to being the corpus for a police tool that turns one guest photo into an address.

Booz Allen: Two Frontier Models Cleared Every ICS Scenario

Booz Allen Hamilton's OT cybersecurity lab tested two unnamed "latest frontier models" against eight ICS attack scenarios built into a replica manufacturing facility, and the models passed them all. The Register's Jessica Lyons reported Sunday that the lab included PLCs, HMIs, engineering and operator workstations, SCADA, VFDs, a robotic arm, sensors, and network infrastructure [3]. People were on hand only to approve each step before physical impact.

The two numbers the report foregrounds are time-to-effect. In one scenario a model moved from perimeter compromise to actions inside an industrial control network in just over 16 minutes. In another the same model located and moved a robotic arm in minutes. The Register lists the eight objectives: map the environment and identify critical assets; find vulnerabilities across it; turn vulnerabilities into working access; combine weaknesses to reach production systems; pivot to a domain controller; change frequency, speed, and stop/start of a connected AC motor; compromise SCADA and rewrite operator screens; find the robotic arm and move it [3].

Booz Allen VP of infrastructure cybersecurity Kyle Miller framed the result in the language a CISO hears on Monday morning: "AI agents can operate with a speed, persistence, and engineering-level precision that may outpace organizations that have not implemented foundational OT cybersecurity practices." Miller added that "some OT organizations are prepared, but many are not," and that "we've observed and continue to see the growing use of AI in real-world attacks." The report, "Frontier SI Reaches OT Systems," is the contractor's own statement of risk; it is what a regulator cites as a forecast before the incident becomes a breach disclosure [3]. The same article notes Iranian attackers have already used AI-generated exploitation scripts against PLCs at US water, manufacturing, and energy facilities. The OT lab is the warning before the warrant.

EFF and ACLU Want Marin Sheriff's ALPR Records

EFF and the ACLU of Northern California sent a public-records demand to the Marin County Sheriff's Office asking for the audit trail behind 254,131 ALPR data shares with out-of-state and federal agencies during November 2024 alone. The number comes from MCSO's own November 2024 audit report, surfaced first by the Point Reyes Light [4]. The demand letter, written by EFF's Jennifer Pinsof, says the disclosures are "in violation of SB 34 and the 2022 Lagleva Settlement Agreement."

California's SB 34 prohibits sharing ALPR data with out-of-state or federal agencies "for any reason." The Lagleva v. Marin settlement resolved a 2021 EFF-ACLU lawsuit on behalf of community activists, who alleged their license plate data had been shared "with hundreds of federal and out-of-state agencies, including ICE and Border Patrol." MCSO signed the 2022 consent decree promising to stop [4]. The November 2024 audit shows the practice did not stop.

EFF names the out-of-state agencies that received MCSO data: Alabama, Indiana, Kentucky, Florida, and Texas law enforcement, states the group characterizes as imposing "severe restrictions on reproductive care" and having "a history of assisting ICE." That framing makes the ALPR story look like the data-broker story: a single Marin plate ping can follow a California driver across state lines to a jurisdiction where her location is no longer protected by California law [4]. MCSO's audit, the letter notes, did not explain how outside agencies obtained the access, how MCSO plans to prevent future violations, or why the office did not inform the public and the Inspector General once it learned of the breach.

EFF: Two Site-Blocking Bills Now Name VPN Providers

EFF published two adjacent pieces in the past week on a pair of bills that would let copyright owners ask courts to designate "foreign piracy sites" and then require ISPs, DNS providers, and VPN providers to block American users from those sites. The bills have different sponsors and different provisions, and they push the same lever [5][6].

Joe Mullin's piece on the American Copyright Protection Act (ACPA, H.R. 10364, Rep. Darrell Issa, R-CA) focuses on what changed from last year's Foreign Anti-Digital Piracy Act: FADPA excluded VPN-only providers and encrypted DNS services; ACPA removes those exclusions. ACPA also lowers the threshold for what counts as a "piracy site" from a "no commercially significant purpose" standard to one with only a "limited commercially significant purpose." Mullin cites the Italian Piracy Shield program as a precedent the bill imports: 510 benign, non-streaming websites blocked under similar logic, including a Catholic convent and a telehealth platform. Spain has blocked more than 550,000 domains during soccer broadcasts, including sites belonging to Greenpeace and Harvard University. Mullin's conclusion: "ACPA adds some safeguards, but those don't fundamentally change what Congress is being asked to create: a system for blocking Americans' access to entire websites at the request of copyright owners" [6].

Katharine Trendacosta's piece on the DEFEND IP Act (H.R. 10575) calls the bill a different name for the same censorship machine. Trendacosta writes that DEFEND IP "deputizes every service provider into a copyright cop" the moment a rightsholder lodges an infringement accusation, and that there are "no punishments for getting a website blocked for protected speech." Challenging a block, she writes, means the affected party must find a lawyer and go to court, which she calls "a slow, expensive, and daunting process." EFF's position on both bills is the same: every site-blocking regime is a censorship machine by design, and this Congress is putting two of them through at once [5].

Court Lets DHS Social-Media Surveillance Suit Move Forward

Judge Alvin K. Hellerstein of the U.S. District Court for the Southern District of New York rejected the government's October 1 motion to dismiss the lawsuit the United Automobile Workers, Communications Workers of America, and American Federation of Teachers filed last October against the State Department and the Department of Homeland Security. The suit alleges the two agencies built "a mass surveillance program" using AI and automated tools to monitor the social media accounts of visa and green card holders, paired with a public intimidation campaign, in violation of the First Amendment and the Administrative Procedure Act. The plaintiffs are represented by EFF, Muslim Advocates, and the Media Freedom and Information Access Clinic at Yale [7].

The court's reasoning is what survives. Hellerstein wrote that "this threat of adverse immigration consequences, under a government whose harsh immigration crackdowns has been heavily publicized and reported on, is certainly enough to 'deter a person of ordinary firmness from the exercise of First Amendment rights.'" The doctrine of chilled speech, applied to a speech-monitoring regime that targets noncitizens for what they say, is now a live First Amendment claim rather than a motion-to-dismiss footnote [7]. UAW President Shawn Fain framed the stakes plainly: "No one should have to fear government surveillance or retaliation against their immigration status for expressing their views or participating in their union."

EFF Senior Staff Attorney Lisa Femia said the practical effect of the program is already visible: "Many have stopped posting online together, and have even stopped engaging in offline activities, for fear of being scrutinized or targeted." That is the surveillance problem in one sentence: not the data collected, but the speech that stops being given in public once people believe they are being watched. The case now proceeds to discovery, leaving the agencies to explain their own program in writing under oath [7].

What to Watch This Week

The first warrant citing a Raven result. LAPD and Miami-Dade have tools that take one interior photo and return an address; the next privacy fight is the first time that address shows up in an affidavit. The warrant rules that already govern ALPR queries are the closest existing analog [1].

The first public attribution of a real-world ICS attack to a frontier model. Booz Allen's OT lab cleared every scenario; Iranian PLC scripts already came from AI tooling. A disclosed incident that names the model will move the cyber-insurance market in a hurry [3].

The Marin Sheriff's reply to the demand letter. The November 2024 audit shows 254,131 SB-34 violations in one month. The demand asks for the audit trail and a written commitment; the next move is a CPRA enforcement action if MCSO does not produce [4].

Markup on ACPA or DEFEND IP. Both bills push the same site-blocking lever with VPNs as enforcement targets. EFF framed both in the same week; the committee referral will tell readers which chamber moves first [5][6].

The State and DHS social-media program in discovery. Hellerstein's denial leaves the agencies facing the in-writing version of their own program. Watch the first set of interrogatories, and the first state-secrets invocation [7].

Sources

  1. 404 Media, Joseph Cox: AI Company Lets Cops Pinpoint Specific Houses Based on a Single Interior Photo, October 12, 2026. https://www.404media.co/ai-company-lets-cops-pinpoint-specific-houses-based-on-a-single-interior-photo/
  2. 404 Media, Samantha Cole: Cops can creep on Airbnb, October 12, 2026. https://www.404media.co/cops-can-creep-on-airbnb/
  3. The Register, Jessica Lyons: AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody's ready, October 11, 2026. https://www.theregister.com/security/2026/10/11/ai-systems-are-fully-capable-of-carrying-out-nightmare-attacks-against-infrastructure-and-nobodys-ready/5302450
  4. EFF, Jennifer Pinsof: We Demand More Information on How Marin Cops Illegally Shared Flock ALPR Data, October 1, 2026. https://www.eff.org/deeplinks/2026/10/we-demand-more-information-how-marin-cops-illegally-shared-flock-alpr-data
  5. EFF, Katharine Trendacosta: Site-Blocking Will Not Defend IP, No Matter the Bill's Name, October 2, 2026. https://www.eff.org/deeplinks/2026/10/site-blocking-will-not-defend-ip-no-matter-bills-name
  6. EFF, Joe Mullin: Congress Has Another Site-Blocking Bill, and This One Targets VPNs, October 2, 2026. https://www.eff.org/deeplinks/2026/10/congress-has-another-site-blocking-bill-and-one-targets-vpns
  7. EFF Press Release: Victory! Court Rejects Government Effort to Dismiss Social Media Surveillance Lawsuit, October 2, 2026. https://www.eff.org/press/releases/victory-court-rejects-government-effort-dismiss-social-media-surveillance-lawsuit