🕵️ RESEARCH & DEEP DIVES
- Federal judge rules Flock license plate search was unconstitutional 'indiscriminate mass surveillance'
An Oklahoma federal judge ruled that a warrantless Flock license plate reader search violated the Fourth Amendment.- Applies to Flock Safety's nationwide ALPR network, used by law enforcement with 120,000+ cameras scanning 20 billion vehicles monthly
- A Tulsa County deputy searched a woman's plate in Flock's system solely because it was from California, then used her month-long travel history to justify a car search that found 91 pounds of meth
- Judge Sara Hill ruled the warrantless ALPR search was 'indiscriminate mass surveillance' approaching 'dragnet-type law enforcement practice' and ordered all evidence thrown out
- Audit logs show more than 100,000 warrantless Flock searches occur every month
- The ruling came the same day Sanders, Ocasio-Cortez, and Merkley introduced the Ban Flock Act to prohibit federal ALPR use and defund state and local contracts
🔓 CVEs & KEV
CVE-2026-103956 — AWS loom — CVSS 10.0 — Missing authentication for critical function in Loom for AWSMissing authentic...
CVE-2026-104019 — AWS sagemaker-distribution — CVSS 9.3 — OS command injection in the Studio Space startup validation script in Amazon ...
CVE-2026-96940 — Microsoft Exchange Server 2016 Cumulative Update 23 — CVSS 8.8 — Microsoft Exchange Server Elevation of Privilege VulnerabilityWeak authorizat...
CVE-2026-103958 — AWS loom — CVSS 8.3 — Server-side request forgery in the tool server and remote agent connection ha...
CVE-2026-103957 — AWS loom — CVSS 8.2 — Server-side request forgery in the OAuth2 discovery handling in Loom for AWSS...
CVE-2026-104988 — Red Hat Certificate System 10 — CVSS 8.1 — Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allo...
📋 ADVISORIES
- 📄 Source for CSRF vulnerability CVE-2026-39718 disclosed in Webriti Wallstreet WordPress theme through 2.8.6 — patchstack.com