[flock-safety]

September 19, 2026

• Flock Safety ALPR cameras ship with 53 hardcoded passwords across roughly 90,000 units, according to researchers who dumped a camera's contents and found outdated, unpatched software, weak encryption and easy physical access — a large installed base of police surveillance hardware with a shared-credential problem (write-up). · Vulnerabilities & Active Exploitation

in From a Help Forum to OpenAI's Monorepo in 72 Hours

August 22, 2026

• "Have I Been Flocked?" indexes 242 million Flock Safety ALPR searches covering 4.68 million license plates, built from audit logs obtained via FOIA and government transparency portals, and lets anyone check whether their plate was queried (haveibeenflocked.com) (discussion). Context: Bruce Schneier notes police policies actively restrict transparency about Flock use, echoing the Stingray playbook (Schneier). · New Tools & Releases

in A CVSS 10.0 Lands in Entra ID — and Microsoft Can't Keep Its Exploitation Story Straight

August 20, 2026

• WIRED reconstructed code for Flock Safety's "OS Investigate" platform, showing it fuses the vendor's 6,000-community vehicle-camera network with police case files, 911 dispatch logs, arrest records, ballistics data, and commercial identity databases to identify people, map movements, and infer associates — well beyond plate lookups (WIRED, The Register). · Industry & Policy

in Feds Say AI-Written Exploit Code Is Already Hitting Siemens PLCs