FBI Seeks Real-Time Nationwide ALPR Access Amid Privacy Concerns and Deepfake Crackdown

The Federal Bureau of Investigation (FBI) is reportedly seeking extensive, "near real-time" access to data from automated license plate readers (ALPRs) across the United States. This revelation comes as a bipartisan group of US lawmakers simultaneously attempts to curb the use of this surveillance technology by state and local governments. Procurement records from the FBI Directorate of Intelligence indicate plans to spend millions to acquire nationwide access to ALPR data, which captures images of every passing vehicle, logging its license plate, location, time, and date into searchable databases. The FBI asserts a "crucial need" for this data to provide "a diverse and reliable range of collections across the United States," particularly along major highways and various locations for maximum law enforcement utility. This push for expanded surveillance capabilities by the FBI stands in stark contrast to legislative efforts aimed at protecting privacy. While the FBI seeks to monitor vehicle movements almost instantaneously, lawmakers are proposing measures that would effectively prevent local authorities from utilizing ALPRs for police tracking. This creates a tension between national security interests and civil liberties, highlighting ongoing debates about the scope of government surveillance in the digital age and the potential for misuse of such powerful tracking tools. In other significant developments this week, the "Take It Down Act" officially came into effect in the US, empowering individuals to demand the removal of nonconsensual intimate images from websites and other platforms. This legislation is already being actively enforced, with the Federal Trade Commission (FTC) issuing warnings to 12 companies offering "nudifying" services that use AI to create fake nude images. The FTC emphasized the need for these services to implement clear processes for victims to request image removal. Furthermore, the Department of Justice (DOJ) has made arrests in connection with the sharing of thousands of AI-created deepfake sexual abuse images, including those of celebrities and private individuals, underscoring a growing crackdown on this harmful use of artificial intelligence. Meanwhile, a critical, unpatched vulnerability in Chromium, the open-source codebase powering popular browsers like Chrome, Microsoft Edge, and Opera, has been publicly disclosed by Google. The flaw, first reported 42 months ago, abuses the Browser Fetch API, allowing any visited website to establish a persistent service worker on a user's device. This connection can be exploited to monitor browsing activity, route traffic through the victim's machine, or even pull the device into a proxied DDoS network. These connections are resilient, surviving browser restarts and sometimes even system reboots. While Firefox and Safari remain unaffected, Google is reportedly working on a fix, urging users to be wary of unexplained download prompts. Separately, GitHub, the Microsoft-owned code repository, experienced a data breach attributed to the cybercrime group TeamPCP, part of a novel series of similar attacks.