Daily Surveillance Briefing: October 18, 2026

Discovery opens in EFF's First Amendment challenge to the DHS Catch and Revoke social-media surveillance program after Judge Hellerstein's October 1 ruling let the union plaintiffs reach State and Homeland Security records. Citizen Lab and The Register confirmed that Israeli adtech firm Discover-Tech used real-time bidding to deliver Candiru-class spyware to at least 45 Al Jazeera journalist devices, then had its approved-vendor status revoked by Google and IAB Europe. The ICO reprimanded London's Metropolitan Police over 18 months of unchecked Auror platform use. Joseph Cox at 404 Media reported that OpenAI is letting advertisers target ChatGPT users by email, phone, and current chat topic. The week's weekly roundup, just published, reads the throughline: the third-party vendor is the surveillance layer.

State of Surveillance

Today in Surveillance:

  • Discovery opens in the Catch and Revoke social-media surveillance lawsuit. Lisa Femia at EFF reported on October 15 that Judge Alvin K. Hellerstein of the Southern District of New York denied the government's motion to dismiss on October 1. The United Auto Workers, Communications Workers of America, and American Federation of Teachers can now reach State and Homeland Security records on how the program actually runs [1][2].
  • Citizen Lab and The Register reported that Israeli adtech firm Discover-Tech used real-time bidding to deliver Candiru-class spyware to at least 45 Al Jazeera journalist devices. Researchers analyzed about 4 billion ad-bidding records and traced delivery across more than 70,000 mobile apps and 120,000 websites between March and June 2026. Google and IAB Europe revoked Discover-Tech's approved-vendor status [3][4][5].
  • The ICO reprimanded London's Metropolitan Police for unchecked Auror platform use. Connor Jones at The Register reported on October 15 that officers uploaded personal data on 179 people without a DPIA or a data-sharing agreement; ICO head of investigations David Doodson framed the message for the wider policing sector [6][7].
  • 404 Media reported that OpenAI is letting advertisers target ChatGPT users by email, phone, and current chat topic. Joseph Cox wrote on October 15 that inclusion lists must top 25,000 entries; current chat content can still trigger ads even when "ads personalization" is turned off [8][9].
  • The week's weekly surveillance roundup lands with vendor risk as the throughline. Catch and Revoke, Discover-Tech, TSA's CAT-2 vendor, Denmark's CPR breach, the UK Legal Aid records, and the Met's Auror use all turn on a small partner, a thin contract, or a default password [10].

Also today: The October 17 briefing led with the GAO finding that only one of 24 federal agencies had completed the first step of post-quantum cryptography migration. The October 15 briefing carried the DHS Inspector General audit of TSA's CAT-2 facial-recognition system, the EFF and ACLU of Wisconsin Supreme Court ALPR petition, and the Danish CPR breach via a vendor whose administrator account used the password 123456.

Catch and Revoke: Discovery Opens, the Program's Design Goes Up for Disclosure

Lisa Femia at EFF reported on October 15 that Judge Alvin K. Hellerstein of the U.S. District Court for the Southern District of New York denied the government's motion to dismiss EFF's First Amendment challenge to the State and Homeland Security social-media surveillance program EFF calls Catch and Revoke [1][2]. The ruling was entered on October 1. Discovery now opens for the United Auto Workers, the Communications Workers of America, and the American Federation of Teachers, who are represented by EFF, Muslim Advocates, and the Media Freedom and Information Access Clinic at Yale Law School.

What is in play is the mechanics of the program. The Hellerstein ruling frames the constitutional question sharply: viewpoint discrimination is "presumptively unconstitutional," and "the chilling effect" of the program can "itself be an injury when the plaintiffs are surveilled" [1]. The court relied on the Second Circuit's Ozturk v. Hyde for the proposition that the Immigration and Nationality Act does not bar review of immigration-adjacent surveillance, a doctrinal anchor EFF will want to keep. The court found the unions had standing both organizationally and associationally, writing that the freedom of the plaintiffs' members "to speak, associate, and appear publicly is not incidental to union work, but rather is the mechanism through which unions recruit, organize, communicate, and bargain" [1].

EFF describes the program as using "AI and other automated tools" to scan the social-media and online speech of visa and green-card holders for views including criticism of the Trump administration, support for Palestine, criticism of Israel, and speech described as "hostile" to American culture or "our way of life" [1]. The program also requires some immigration-benefit applicants to disclose every social-media handle they have used in the past five years, and in some cases to maintain public accounts. Hellerstein framed the workaday effect plainly: under a government whose immigration crackdowns have been heavily publicized, the threat of adverse immigration consequences is "certainly enough to deter a person of ordinary firmness from the exercise of First Amendment rights" [1]. The first batch of produced documents is the moment the program's design becomes public. The DHS ICE Instagram subpoena beat and the older DHS voluntary-compliance subpoena coverage carry the federal-vs-ICE side of the same surveillance-on-speech question; Catch and Revoke is the visa-holder-side version.

Israeli Adtech Firm Discover-Tech Turned Real-Time Bidding Into a Spyware Pipeline

Carly Page at The Register reported on October 15, on top of Citizen Lab's primary technical writeup, that Discover-Tech, an Israel-based adtech firm, used real-time bidding to deliver Candiru spyware to at least 45 Al Jazeera journalist devices in 2024 and 2025 [3][4]. Citizen Lab describes Discover-Tech as a firm that "appears to be a front for large-scale ad espionage abuse," and concludes that "serving as this bridge is Discover-Tech's primary purpose" [4]. The Register names the underlying spyware as Candiru, now publicly known as Integrity Labs.

The scale is the part that changes the threat model. Citizen Lab sifted through nearly 4 billion ad-bidding records and found delivery across more than 70,000 mobile apps and 120,000 websites between March and June 2026 [4]. Ads placed through Discover-Tech reached networks belonging to government agencies, defense organizations, and NATO endpoints, though Citizen Lab does not report successful infections outside the journalist set. The technique required no clicks from the target and exploited the bidding layer rather than any user-visible link. Google and IAB Europe have revoked Discover-Tech's approved-vendor status; The Register names Beeswax, Vungle, and Eskimi as partners through whose inventory the operation routed, and reports those three also terminated Discover-Tech [3][5].

Citizen Lab calls this "the first publicly confirmed case of a zero-click mercenary spyware attack" delivered through the advertising system, and frames the structural finding sharply: "Discover-Tech's mass abuse, privacy invasion, and facilitation for mercenary spyware attacks illustrates structural flaws with the online advertising system, which failed to detect or prevent the abuse documented in this report" [4]. The Register's read on the same finding, in Carly Page's framing: the worst thing about targeted advertising used to be that it knew too much about you, and now some advertisers are interested in much more than shopping habits [3]. The story sits beside the site's Pentagon commercial-location-data adtech piece as the second public "ad network to zero-click spyware" pipeline this cycle, with the same threat model and a different operator roster.

Met Police and the Auror Platform: ICO Frames the Sector-Wide Message

Connor Jones at The Register reported on October 15 that the UK Information Commissioner's Office issued a reprimand and enforcement notice against the Metropolitan Police Service for its use of the Auror retail-crime platform between March 2023 and September 2024, with access blocked on September 26, 2024 [6][7]. The UK product is operated by Auror Europe, a subsidiary of the New Zealand parent. The ICO's investigation was formally launched in April 2025 after the force self-reported in December 2024.

Per The Register, the ICO found that officers uploaded personal data on 179 individuals without a completed data-protection impact assessment and without a data-sharing agreement with Auror Europe. Of the 179, 128 had names uploaded; 49 had names plus dates of birth; 2 had names, dates of birth, and home addresses. Three of the 179 were children. Roughly 500 free accounts had been registered by MPS officers [7]. ICO head of investigations David Doodson framed the message beyond the Met itself: "If you are using new technology to process people's information you must do so lawfully, transparently and with appropriate governance" [7]. The regulator also pointed to the 2021 Clearview AI misuse finding against the Met as a prior repeat failure.

What the reprimand changes for the wider policing sector is the soft-controls finding. The Met ran Auror for 18 months on policy reminders and training rather than technical blocks, and the ICO called the governance gap ongoing because the force had not demonstrated its safeguards will prevent recurrence. Auror is now in use across 14 London boroughs after a formal approval and pilot, a fact the reprimand does not unwind but does bookend. The reprimand now sits next to the Met's other surveillance beats on the site, including the Croydon permanent facial-recognition rollout and the handheld facial-recognition pilot.

ChatGPT Now Lets Advertisers Target Users by Email, Phone, and Chat Topic

Joseph Cox at 404 Media reported on October 15 that OpenAI is letting advertisers upload email addresses, phone numbers, or unique phone identifiers and target matched ChatGPT users directly. Inclusion lists must top 25,000 entries; smaller lists can only be used for exclusion targeting [8][9]. The piece frames the targeting as "somewhat standard practice across the advertising industry" but "novel in that it is also based on the prompts users enter into the chatbot, prompts that users may assume are private but which, as 404 Media has previously shown, may be reviewed by humans" [8].

Advertisers can also submit "context hints" describing chat topics, which 404 Media notes guide matching rather than acting as exact-match targeting rules. ChatGPT had one billion monthly active users at last disclosure, and ads launched in the United States in February 2026. Turning off "ads personalization" in settings does not stop ads; current chat content can still trigger them, per Cox [8]. OpenAI told 404 Media that being on an advertiser's list does not by itself cause an ad to be shown, and that uploaded files are deleted within about 24 hours.

The pairing of the Discover-Tech and ChatGPT stories is the quiet read of the week. Discover-Tech turns the ad system into a spyware channel for one operator; ChatGPT turns the chat surface into a targeting dimension for the platform itself. The user-side defense is the same in both cases: the targeting happens before you see anything, and the channel that sells you shoes is also the channel that decides what you see, who you become to the system, and what they will pay to reach you. For prompt-content targeting as a new surveillance-of-speech vector, the story sits next to the site's OpenAI ChatGPT tracking class action and OpenAI transnational-repression coverage.

The Weekly Roundup Lands: Vendor Risk Is the Surveillance Layer

The site's weekly surveillance roundup for October 12 to 18 drops today, and the throughline is the third-party vendor [10]. Read the week's stories one at a time and you see a pile of unrelated news. Read them as one beat and the picture sharpens: every surveillance, breach, and prompt-content story of the week turned on a small partner, a thin contract, or an account whose password was the default.

Discover-Tech sold itself as a legitimate advertising firm while moving Candiru-class spyware to journalists through a real-time bidding channel that already had a vendor relationship with major exchanges [3][4]. TSA's CAT-2 vendor had authorized access to passenger images during routine troubleshooting and extracted what it wanted without the agency knowing. Denmark's CPR administration handed authorized access to a Funen-based IT vendor whose three accounts, including an administrator account, used the password 123456. The UK's Legal Aid Agency and HMPPS handed the case-management system to a contractor whose environment was hit in April 2025 and is still being mapped 17 months later. London's Met Police ran Auror on soft controls for 18 months without a DPIA, a data-sharing agreement, or technical blocks [10].

The discovery clock is the second throughline. Hellerstein's October 1 ruling opened discovery in Catch and Revoke [1]. The Anthropic Philadelphia tip is a smaller version of the same clock: the model filed a tip on July 18, the company discovered it on September 28, the PPD was notified on October 7, and representatives were sent to police headquarters on October 8. The X 13,000-account removal is the negative version: a major platform removed tens of thousands of accounts on foreign-attribution grounds without releasing the underlying data. The catch-up vector is the same in each case: who knew what, when, and what was done with it. The third throughline is the targeting pivot: Discover-Tech used the real-time bidding system to deliver zero-click spyware, ChatGPT is now letting advertisers target by current chat topic, and Raven can take a single interior photo and return the address of the house it was taken in. Every targeting system on the list got more powerful this week, and every one of them got harder to detect from the user side [10].

What to Watch This Week

Discovery in Catch and Revoke. Hellerstein's ruling lets the UAW, CWA, and AFT plaintiffs reach DHS and State Department records on how the social-media screening and the five-year handle-disclosure mandates actually run. The first batch of produced documents is the moment the program's design becomes public [1][2].

The Discover-Tech partner inventory. With Google, IAB Europe, Beeswax, Vungle, and Eskimi having already moved, the watch is on whether other exchanges and supply-side platforms follow, and whether named victims beyond the Al Jazeera set come forward [3][4][5].

OpenAI's prompt-content targeting policy. 404 Media's piece leaves room for OpenAI to refine or constrain chat-topic targeting. The next signal is whether OpenAI documents the matching rules, and whether EU and California regulators ask how prompts become a targeting dimension under existing data-protection law [8].

ICO follow-up on the Met. The reprimand leaves the governance failure unresolved in the regulator's own framing because the Met has not shown its safeguards will prevent recurrence. The next signal is whether the Met's promised safeguards satisfy the ICO and whether a fine follows [7].

The X attribution evidence. With US midterms three weeks out, the practical question is whether X or the affected governments release the underlying data behind the 13,000-account removal, or whether the attribution stands without it.

Sources

  1. EFF, Lisa Femia: Our lawsuit against the Trump administration's social-media surveillance moves forward, October 15, 2026. https://www.eff.org/deeplinks/2026/10/our-lawsuit-against-trump-administrations-social-media-surveillance-moves-forward
  2. State of Surveillance: Daily Surveillance Briefing, October 16, 2026 (Catch and Revoke coverage and the day's slate). /news/daily-surveillance-briefing-october-16-2026
  3. The Register, Carly Page: Spyware vendors found a way to make targeted ads even worse, October 15, 2026. https://www.theregister.com/security/2026/10/15/spyware-vendors-found-a-way-to-make-targeted-ads-even-worse/5303334
  4. Citizen Lab: How Discover-Tech turned targeted ads into a pipeline for spyware, October 15, 2026. https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/
  5. State of Surveillance: Israeli Adtech Firm Discover-Tech Tied to Candiru Spyware (October 16, 2026). /news/daily-surveillance-briefing-october-16-2026
  6. The Register, Connor Jones: Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog, October 15, 2026. https://www.theregister.com/security/2026/10/15/metropolitan-polices-unchecked-use-of-shoplifting-platform-lands-force-in-trouble-with-data-watchdog/5303061
  7. State of Surveillance: Daily Surveillance Briefing, October 17, 2026 (Met Auror ICO reprimand coverage). /news/daily-surveillance-briefing-october-17-2026
  8. 404 Media, Joseph Cox: How ChatGPT Targets Ads to You Based on Your Prompts, Phone Number, and Email, October 15, 2026. https://www.404media.co/how-chatgpt-targets-ads-to-you-based-on-your-prompts-phone-number-and-email/
  9. State of Surveillance: Daily Surveillance Briefing, October 17, 2026 (ChatGPT prompt-content advertising coverage). /news/daily-surveillance-briefing-october-17-2026
  10. State of Surveillance: Weekly Surveillance Roundup, October 12 to 18, 2026 (Vendor Risk). /news/2026-10-18-weekly-surveillance-roundup