The FBI is preparing to spend millions acquiring nationwide access to automated license plate reader data, with procurement records showing the agency wants near real-time feeds from roadside cameras. Documents state the data should cover major highways and diverse locations for maximum law enforcement usefulness. The plan runs counter to bipartisan legislation introduced this week that would restrict ALPR use by state and local police.

Google published a working exploit for a 42-month-old Chromium vulnerability that abuses the Browser Fetch API, allowing any website to install persistent service workers that survive reboots and can monitor activity or route traffic through victim devices. Google pulled the disclosure after realizing no patch had shipped, but the exploit code remains mirrored on archival sites.

GitHub suffered a data breach this week attributed to the cybercrime group TeamPCP, marking a new string of similar attacks on developer platforms. Meanwhile, the DOJ arrested two men for distributing AI-generated sexual content viewed millions of times, the first prosecutions under the Take It Down Act.

The FBI's ALPR procurement plan exposes a growing tension between surveillance expansion and legislative privacy efforts. Google's pulled disclosure shows the risks of publishing exploit code for unfixed vulnerabilities. DOJ's deepfake arrests signal enforcement is starting to catch up with the technology.