> ## Content Index > Fetch the complete content index at: https://www.metacurity.com/llms.txt > Use this file to discover other available public pages before exploring further. # Spyware turns digital ads into silent attack vectors - URL: https://www.metacurity.com/spyware-turns-digital-ads-into-silent-attack-vectors/ - Published: 2026-10-15T13:37:40.000Z - Updated: 2026-10-15T13:37:40.000Z - Description: Citizen Lab uncovered an ad-delivered, zero-click spyware campaign targeting 45 Al Jazeera devices—no clicks or visible warning required. - Author: Cynthia B Brumfield - Tags: Cybersecurity, News, #no-feature-image ![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/10/CitizenLabadspyware-2.png) Discover-Tech bridges the mercenary spyware industry with the online advertising ecosystem. Source: Citizen Lab. --- **Spend less time finding cybersecurity news. Get more out of it.** Metacurity delivers the cybersecurity news, analysis, and insight that would take you hours—and sometimes days—to assemble yourself. Every weekday, we sift through thousands of news articles, press releases, filings, court documents, and research reports, including details that vendor announcements and PR pitches leave out. We tell you what changed, why it matters, and what deserves your attention. Minimal vendor marketing. No outrage bait. No SEO filler. **A paid subscription gives you:** - **The full Metacurity archive:** Every newsletter, searchable and browsable. - **Our weekly long-reads roundup:** The best cybersecurity writing from across the industry, selected and vetted to make your reading time count. - **Specialized reports and analysis:** Periodic deep dives that go beyond the daily headlines. - **A direct role in sustaining independent journalism:** Your subscription helps keep our editorial priorities focused on readers and the cybersecurity community. If Metacurity saves you time, helps you spot an important development, or gives you a clearer understanding of the industry, please consider becoming a paid subscriber. Your support keeps that work going. **Subscribe today—and thank you for reading and supporting Metacurity.** [Upgrade my subscription](#/portal/account/plans) --- ### Researchers from The Citizen Lab at the University of Toronto revealed a worst-case scenario found in the wild: spyware silently infecting targets as they browse past ads in their daily digital lives. Dubbing the attacks “AdFection,” the researchers documented a campaign in which an Israeli-registered advertising firm allegedly connected to the servers linked to a spyware company and infected dozens of devices with its invasive malware. Citizen Lab believes this to be the first detailed technical evidence made publicly available of sophisticated spyware infecting devices via digital ads. “AdFection allows operators to automatically hack specific individuals with mercenary spyware as they use apps or browse the internet,” says Bill Marczak, a senior researcher at Citizen Lab. “Someone who gets hacked like this would not see anything amiss. In fact, they might not even see any ad at all.” The situation is so concerning, he notes, because there isn’t much that people can do to protect themselves from zero-click ad attacks other than blocking ads as thoroughly as possible on all websites and platforms. During 2024 and 2025, Citizen Lab concluded that 45 devices belonging to the news outlet Al Jazeera were targeted with zero-click attacks delivered by ads. The researchers say that the targeted ads were issued by the Israeli-founded marketing firm Discover-Tech and distributed spyware attributed to the Israeli developer Candiru. Infected devices had contact with domains linked to Discover-Tech and then connected to infrastructure associated with Candiru, according to Citizen Lab’s analysis. (Al Jazeera, which participated in the investigation and shared device logs with Citizen Lab researchers, did not respond to a request for comment.) Google, which operates one of the world’s largest advertising businesses, terminated Discover-Tech’s registration after collaborating with Citizen Lab and researchers from the cybersecurity firm Confiant and confirming a spyware link. “Following a joint investigation with Citizen Lab and Confiant, Google blocked Discover-Tech from our ad platforms for systematically violating our policies,” a Google spokesperson says. “We also set up Safe Browsing warnings to help protect people if they navigate to websites linked to this group.” The European branch of the Interactive Advertising Bureau (IAB), an ad industry body, confirmed to WIRED that it has suspended Discover-Tech from its global vendor list, known as the GVL. The company was suspended by IAB Europe following an audit of its policies, it says. “Further confirmation of the findings regarding spyware could also justify a definitive expulsion from the GVL,” a spokesperson for IAB Europe says. A spokesperson for Beeswax, an online advertising industry company owned by Comcast, says in a statement: “Beeswax removed Discovery-Tech from our platform following recent activity and independent validation by a third-party security specialist. We maintain a zero-tolerance policy for malicious advertising.” ([Matt Burgess and Lily Hay Newman / Wired](https://www.wired.com/story/nightmare-scenario-zero-click-spyware-is-infecting-phones-via-targeted-ads/?ref=metacurity.com)) **Related:** [*Citizen Lab*](https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/?ref=metacurity.com)*,* [*Forbes*](https://www.forbes.com/sites/thomasbrewster/2026/10/15/israeli-spyware-ads-target-journalists/?ref=metacurity.com)*,* [*NBC News*](https://www.nbcnews.com/tech/security/israeli-ad-company-helped-spyware-firm-target-al-jazeera-online-ads-re-rcna602999?ref=metacurity.com)*,* [*Reuters*](https://www.reuters.com/legal/litigation/israeli-firm-used-online-ads-run-vast-spy-operation-researchers-say-2026-10-15/?ref=metacurity.com)*,* [*The Globe and Mail*](https://www.theglobeandmail.com/world/article-zero-click-ads-used-to-infect-journalists-devices-with-spyware/?ref=metacurity.com)*,* [*CyberScoop*](https://cyberscoop.com/adfection-zero-click-spyware-discover-tech/?ref=metacurity.com)*,* [*Confiant*](https://blog.confiant.com/p/adint-weaponized-ad-tech-for-zero-click-spyware-and-mass-identity-vacuuming?ref=metacurity.com)*,* [*Bloomberg*](https://www.bloomberg.com/news/articles/2026-10-15/israeli-firms-placed-spyware-at-al-jazeera-via-ads-report-says?ref=metacurity.com) ![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/10/image-43.png) Basic architecture of the online ad system. Source: Citizen Lab. ### The Federal Trade Commission sent civil subpoenas to AI giants seeking documents about safety incidents that have spiraled into an industry crisis. According to a source, the FTC sought documents from Anthropic and OpenAI, with the scope of the probe focused on potential consumer protection violations. The agency sent out civil investigative demands, which help the government gather evidence and investigate ahead of potential litigation. They are more than 50 pages long each and ask for documents concerning security incidents and safeguarding practices. The agency is also asking for marketing materials and documents detailing company privacy policies, the source said. Investigative demands will be sent to third-party AI organizations at a later date, the person familiar said. The FTC has plans to compel top AI executives to testify about their products, according to the source. ([Maria Curi / Axios](https://www.axios.com/2026/10/15/ftc-openai-anthropic-ai-safety-investigation?stream=technology&utm%5Fsource=alert&utm%5Fmedium=email&utm%5Fcampaign=alerts%5Ftechnology&lctg=5862c003e9a8a2dd428b5609)) **Related:** [*Reuters*](https://www.reuters.com/business/us-ftc-subpoenas-openai-anthropic-over-consumer-harms-axios-reports-2026-10-15/?ref=metacurity.com) ### The Financial Stability Board (FSB), a global standard setter, has called for greater human oversight of agentic AI ​in final guidance for banks and other firms ‌on managing the technology's risks. The FSB's guidance comes as regulators ramp up efforts to contain growing AI risks, including the ​threat of AI-enabled cyberattacks. In draft ​guidance published in June, which it "strongly encouraged" boards ⁠to refer to, the FSB warned that AI agents - ​which can plan and execute tasks with limited human oversight - ​pose distinct challenges for human oversight. Publishing its final guidance, the group said it had strengthened its recommendations on agentic AI, citing feedback on ​the draft, growing interest among financial institutions in adopting ​the technology, and the distinct risks and controls it entails. Among ⁠the changes, the FSB now says that in higher-risk use cases, more intensive human oversight ​will be critical. Firms should set clear, risk-based triggers ​for ⁠when an agent must seek human approval, it added. ([Phoebe Seers / Reuters](https://www.reuters.com/legal/government/global-financial-watchdog-calls-more-human-oversight-agentic-ai-2026-10-15/?ref=metacurity.com)) **Related:** [*Financial Stability Board*](https://www.fsb.org/2026/10/fsb-finalises-sound-practices-for-the-responsible-adoption-of-artificial-intelligence-ai/?ref=metacurity.com)*,* [*Financial Stability Board*](https://www.fsb.org/2026/10/sound-practices-for-responsible-adoption-of-artificial-intelligence-ai-overview-of-consultation-responses/?ref=metacurity.com)*,* [*Forbes*](https://www.forbes.com/sites/mayrarodriguezvalladares/2026/10/15/trust-but-verify-how-regulators-want-banks-to-use-ai/?ref=metacurity.com) ### The EU is investigating OpenAI and Anthropic over AI agents that hacked outside organizations, raising questions about whether the AI Act covers rogue models escaping the testing environment. The European Commission is moving to enforce its new rules on leading AI labs after a string of incidents, EU digital chief Henna Virkkunen said. But applying the rulebook is far from straightforward, and these early cases will set important precedents. The Commission’s AI Office is investigating OpenAI and Anthropic after AI agents autonomously hacked into other organizations, the first test of the limits of the EU’s AI rules. “Our AI Office has started enforcing these rules, and sent requests for information addressing issues such as security, external evaluation and monitoring how models are used,” Commission Executive Vice-President for Technological Sovereignty Henna Virkkunen said at the International AI Summit in Dublin. ([Luca Bertuzzi / EuroNews](https://www.euronews.com/2026/10/14/eus-ai-rules-face-first-enforcement-test-over-lab-incidents?ref=metacurity.com)) **Related:** [*Computerworld*](https://www.computerworld.com/article/4235408/the-eu-is-investigating-openai-and-anthropic-following-incidents-involving-ai-agents.html?ref=metacurity.com)*,* [*Unite.AI*](https://www.unite.ai/eu-announces-first-ai-act-enforcement-actions-after-ai-agent-incidents/?ref=metacurity.com) ### Eight states filed lawsuits against OpenAI on Wednesday alleging that the artificial intelligence company’s ChatGPT chatbot is an unsafe product that’s harmed children and deceived parents. Iowa, Kansas, Nebraska, West Virginia, Arkansas, Arizona, Idaho and Montana have individually sued OpenAI in their own state courts, Iowa Attorney General Brenna Bird said in a release. She said Iowa’s lawsuit aims to “vindicate the rights of Iowans affected by OpenAI’s willful, dangerous, reckless, and unlawful conduct.” “OpenAI is hurting kids and they are lying to Iowans,” Bird said in a statement. “OpenAI claims ChatGPT is safe while it’s giving dangerous medical advice, encouraging people to hurt others, and coaching people to commit suicide — all while pretending to be their fake friend. My lawsuit is about protecting our kids and holding OpenAI accountable under our state law.” OpenAI spokesperson Drew Pusateri said the company has built age-specific protections into its product that “many other AI products lack.” He added that OpenAI is working with states to advance policies that will apply to the entire industry. ([Ashley Capoot / CNBC](https://www.cnbc.com/2026/10/14/openai-sued-by-8-states-over-chatgpt-safety-concerns-.html?mid=1&ref=metacurity.com#cid=3758214)) **Related:** [*Iowa Attorney General*](https://www.iowaattorneygeneral.gov/newsroom/attorney-general-brenna-bird-announces-lawsuit-against-openai-for-deceiving-iowa-parents-and-iowans?ref=metacurity.com)*,* [*Reuters*](https://www.reuters.com/world/eight-us-states-sue-openai-claiming-chatgpt-harms-children-2026-10-14/?ref=metacurity.com)*,* [*The Guardian*](https://www.theguardian.com/technology/2026/oct/14/openai-child-self-harm-lawsuit?ref=metacurity.com)*,* [*Slashdot*](https://yro.slashdot.org/story/26/10/14/2127240/eight-us-states-sue-openai-claiming-chatgpt-harms-young-users?utm%5Fsource=rss1.0mainlinkanon&utm%5Fmedium=feed&mid=1#cid=3757874) ### Social media accounts used by An Garda Síochána appear to have been taken over in a breach related to cryptocurrency. A warning has been attached to some posts from the profiles due to being linked with another suspended account, which can happen for violations of rules around spam, malicious behavior and security risks. The @GardaTraffic and @GardaInfo accounts on X removed some branding and started publishing scores of posts about a cryptocurrency last night. The location on both accounts has been changed to Amsterdam, the Netherlands, but the @GardaTraffic account, which has 600,000 followers, still claims it is the Garda account for traffic and road safety updates. The @GardaInfo account, which has almost 300,000 followers and is still linked from the official Garda website, is no longer available under that username as it has been changed to appear as a support account for a cryptocurrency wallet. However, old videos and posts made by An Garda Síochána are still visible on the account. Gardaí issued a statement confirming that a third party gained unauthorized access to two official Garda Social Media X accounts, @gardainfo and @gardatraffic. In the statement, gardaí said that this unauthorized access has occurred on the X platform only. ([RTE](https://www.rte.ie/news/ireland/2026/1015/1595452-garda-social-account-hack/?ref=metacurity.com)) **Related:** [*Cork Safety Alerts*](https://news.corksafetyalerts.com/gardai-confirm-unauthorised-third-party-access-to-two-official-x-accounts/?ref=metacurity.com)*,* [*Irish Independent*](https://www.independent.ie/irish-news/crime/gardai-confirm-hack-of-official-x-accounts-say-they-are-satisfied-there-was-no-unauthorised-access-with-any-garda-systems/a/163091868.html?ref=metacurity.com)*,* [*Irish Examiner*](https://www.irishexaminer.com/news/arid-41924419.html?ref=metacurity.com)*,* [*Irish Mirror*](https://www.irishmirror.ie/news/irish-news/garda-siochana-asked-explain-extremely-37774969?ref=metacurity.com) ### The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978. The agency employs around 1,250 staff, oversees billions in legal funding, and works with approximately 2,000 providers, including barristers, solicitor firms, and non-profit organizations that deliver civil and criminal legal aid services in England and Wales. The LAA disclosed the cyberattack in early May 2025, warning that payment information for legal aid providers might have been compromised. Two weeks later, it confirmed the resulting data breach was more serious than first believed after finding that attackers had stolen a large trove of sensitive applicant and recipient data from 2010 onward, including contact details, dates of birth, national ID numbers, criminal history, employment status, as well as contribution amounts, debts, and payments. The threat actors have also stolen legal aid providers' data, including provider contracts, office locations, financial information, contact details, LAA Online Portal credentials (including names and email addresses), and more. ([Sergiu Gatlan / Bleeping Computer](https://www.bleepingcomputer.com/news/security/uk-legal-aid-agency-hackers-stole-records-dating-back-to-1978/?ref=metacurity.com)) **Related:** [*UK Legal Aid Agency*](https://www.gov.uk/government/news/legal-aid-agency-cyber-security-incident-data-update-october-2026?ref=metacurity.com) ### Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. Tracked as CVE-2026-76519, this vulnerability stems from a relative path traversal weakness in SEG's Advanced Malware Protection (AMP) feature, caused by improper handling of email attachments. Threat actors can exploit this issue by sending an email with a maliciously crafted attachment through an unpatched device. "A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system," Cisco said in a Wednesday advisory. "In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability." CVE-2026-76519 affects SEG instances where the File Reputation service is enabled and assigned to a mail policy, and the Content Scanner Tools version is earlier than 25.3.0.5525. To determine whether a specific device is vulnerable, admins have to use the contentscannerstatus CLI command to check what version of Content Scanner Tools is running and inspect the "Enable File Reputation" checkbox under Mail Policies > Incoming Mail Policies > Advanced Malware Protection or Mail Policies > Outgoing Mail Policies > Advanced Malware Protection in the web-based management interface. ([Sergiu Gatlan / Bleeping Computer](https://www.bleepingcomputer.com/news/security/cisco-patches-actively-exploited-secure-email-gateway-zero-day/?ref=metacurity.com)) **Related:** [*Cisco*](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp?ref=metacurity.com)*,* [*The Register*](https://www.theregister.com/security/2026/10/14/cisco-make-me-root-email-bug-exploited-as-a-0-day-by-unknown-crims/5303168?ref=metacurity.com) ### Researchers from Threat Fabric report that a new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks. Researchers identified malicious copies of eight banking apps that use a hooking engine to bypass app-signature, Accessibility, and Play Integrity checks by substituting certificate information or returning empty lists. Threat actors can use Hirudo to steal credentials, remotely control infected phones in real time, collect messages, capture screenshots, and record audio. ThreatFabric notes that Hirudo has been observed impersonating at least seven Indonesian banks, but the malware also targets financial organizations in China, India, Mexico, Morocco, and Thailand. The malware is typically delivered via apps for shopping (Shopora), adult content (1V1 X), or short drama (ZoyaTV, KoiShort) that appear legitimate and provide the promised functionality. ThreatFabric found that Hirudo currently targets Indonesian banking apps and found thousands of application-credential entries in an unsecured backend panel, along with device, lock-screen, and financial-profile data. However, the victim count remains unknown. ([Bill Toulas / Bleeping Computer](https://www.bleepingcomputer.com/news/security/hirudo-android-malware-replaces-banking-apps-to-evade-security-checks/?ref=metacurity.com)) **Related:** [*Threat Fabric*](https://www.threatfabric.com/blogs/hirudo-from-fake-updates-to-patched-banking-apps?ref=metacurity.com)*,* [*TechJuice*](https://www.techjuice.pk/new-android-trojan-hirudo-replaces-banking-apps-fake-copies/?ref=metacurity.com)*,* [*Security Affairs*](https://securityaffairs.com/200985/security/cisco-urges-customers-to-patch-email-gateway-flaw-and-check-for-compromise.html?ref=metacurity.com) ![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/10/image-44.png) Overview of the attack chain. Source: Threat Fabric. ### According to Semperis's newly released 2026 Ransomware Risk Report, ransomware actors have been threatening their victims with physical violence, according to new survey data, and many are reporting actual physical attacks being carried out in service of ransomware extortion, though hard data substantiating these claims is missing. A combined two out of every five organizations that participated in Semperis's report indicated they had faced intimidation and threats associated with their ransomware attacks, and often severe ones. Even more remarkably, more than half of respondents claimed that attackers "carried through on threats" they made. Semperis's study relied on self-reporting, and it couldn't corroborate these alarming figures, nor could Dark Reading. If true, the data suggests that ransomware is escaping the digital realm and becoming a genuine risk to victims' safety. Unless and until proven cases of violent attacks surface, however, the data must be met with caution. ([Nate Nelson / Dark Reading](https://www.darkreading.com/cybersecurity-analytics/ransomware-gangs-physical-threats-family-stalking?ref=metacurity.com)) **Related*:* [*Semperis*](https://www.semperis.com/ransomware-risk-report/?ref=metacurity.com)*,* [*PR Newswire*](https://www.prnewswire.com/news-releases/semperis-2026-ransomware-report-reveals-increases-in-ai-driven-attacks-and-a-rise-in-physical-threats-against-executives-and-their-families-302907731.html?ref=metacurity.com)*,* [*SC World*](https://www.scworld.com/brief/ransomware-actors-reportedly-escalating-to-physical-threats-and-violence?ref=metacurity.com)*,* [*Cybersecurity Insiders*](https://www.cybersecurity-insiders.com/study-finds-ai-involved-in-more-than-84-of-ransomware-attacks/?ref=metacurity.com)*,* [*Cyber Press*](https://cyberpress.org/ransomware-targets-identity-systems/?ref=metacurity.com)*,* [*The Hill*](https://thehill.com/policy/technology/6148518-a-i-weaponized-ransomware-survey/?ref=metacurity.com)*,* [*Cyber Security News*](https://cybersecuritynews.com/ransomware-attacks-get-personal/?ref=metacurity.com) ### The number of South Korean financial firms affected by suspected artificial intelligence (AI) agent-driven cyberattacks has risen to 16, more than double the seven initially reported, financial regulators said. About 100,000 records containing personal information, including resident registration numbers, were exposed. The tally could rise as companies continue checking their systems for signs of intrusion. Regulators also found security deficiencies at 130 of the 555 financial firms reviewed, including failures to apply the latest security patches. The Financial Services Commission (FSC) disclosed the findings at an emergency response meeting. It said the breaches, reported since the beginning of this month, have affected banks, savings banks, credit finance companies, electronic payment providers and cryptocurrency businesses. The affected firms include four banks — Shinhan, KB Kookmin, BNK Busan and Hana — and four savings banks — Yegaram, Welcome, DB and OK. Hyundai Capital and KDB Capital are among the affected credit finance companies. Others on the list include online investment firms PFCT and Mouda; electronic financial services provider Brightfix; cryptocurrency businesses Streami and Pravang; and the Korean Federation of Community Credit Cooperatives. The leaked information includes names, contact details, and resident registration numbers. Regulators have found no evidence so far that account or card numbers were compromised. ([Park Han-sol / The Korea Times](https://biz.chosun.com/en/en-finance/2026/10/13/E5CAO4ZN2RDNPM7RTWAZ4YZCXQ/?ref=metacurity.com)) **Related:** [*Chosun Biz*](https://biz.chosun.com/en/en-finance/2026/10/13/E5CAO4ZN2RDNPM7RTWAZ4YZCXQ/?ref=metacurity.com)*,* [*The Chosun Daily*](https://www.chosun.com/english/market-money-en/2026/10/13/OPB4ZCGI45DNNGXPYASUSOL6AE/?ref=metacurity.com)*,* [*SBS*](https://news.sbs.co.kr/amp/news.amp?news%5Fid=N1008796020&ref=metacurity.com)*,* [*Maeil Business*](https://www.mk.co.kr/en/economy/12176706?ref=metacurity.com) ### Harmonic Security, a San Francisco, CA-based workforce AI security platform provider, raised $50 million in Series B funding. The round was led by Crosspoint Capital Partners with participation from existing investors. ([Duncan Riley / Silicon Angle](https://siliconangle.com/2026/10/14/harmonic-security-raises-50m-to-govern-how-employees-use-ai-tools/?ref=metacurity.com)) ***Related:*** [*Business Wire*](https://www.businesswire.com/news/home/20261014886358/en/Harmonic-Security-Raises-%2450-Million-Series-B-Enabling-Safe-AI-Adoption-for-Millions-More-Employees?ref=metacurity.com#cid=3758754)*,* [*Ventureburn*](https://ventureburn.com/harmonic-security-raises-50m-ai-security/?ref=metacurity.com)*,* [*Tech Funding News*](https://techfundingnews.com/harmonic-security-raises-50m-series-b-crosspoint-capital-ai-governance/?ref=metacurity.com)*,* [*Unite.AI*](https://www.unite.ai/harmonic-security-raises-50m-series-b-to-expand-us-and-uk-teams/?ref=metacurity.com)*,* [*citybiz*](https://www.citybiz.co/article/918357/harmonic-security-raises-50m-series-b-led-by-crosspoint-capital-partners/?ref=metacurity.com)*,* [*FinSMEs*](https://www.finsmes.com/2026/10/harmonic-security-raises-50m-in-series-b-funding.html?ref=metacurity.com) ### Best Thing of the Day: Recognizing It's Not Nice to Help Stalkers Elevation Lab, which recentlylaunched an AirTag silencing tool to widespread criticism, [caved under pressure](https://www.elevationlab.com/blogs/news/an-apology?ref=metacurity.com) and removed the product and said it will use its patent on it to prevent anyone else from making one in the future ### Bonus Best Thing of the Day: Elon Gives Trump a Closer Look at the Bus Undercarriage Elon Musk [has blamed](https://www.independent.co.uk/news/world/europe/musk-starlink-ukraine-trump-russia-b3067137.html?ref=metacurity.com) Donald Trump for restrictions introduced on Starlink speed for members of the Ukrainian military. ### Worst Thing of the Day: Cops Who Presume Unfettered Access to Data Between March 2023 and September 2024, UK Metropolitan Police Officers [registered](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/10/ico-takes-action-against-metropolitan-police-service-over-information-governance-failures/?ref=metacurity.com) around 500 free accounts on Auror, a platform retailers use to record crimes such as shoplifting, without formally procuring the service or completing the required data protection checks. ### Closing Thought ![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/10/image-42.png)