[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyVEki88-nzYL4inXI_Fc2SekUuH28Fkf6pPBNW5yjDc":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":113},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"285854a5-cbba-4e1a-bcc5-fddae96320d3","Feds Got Warrants to Use Fake Cell Towers to Hunt Down Don Lemon’s Producer","feds-got-warrants-to-use-fake-cell-towers-to-hunt-down-don-lemon-s-producer-d5315a","Investigators also sought permission to use an invasive surveillance tool called a cell-site simulators against journalist Georgia Fort and a Minnesota state Senate candidate.","US law enforcement obtained warrants to use cell-site simulators, also known as Stingrays, to track a college student involved in producing coverage of an anti-ICE protest. Warrants were also sought for journalist Georgia Fort and a Minnesota state Senate candidate, though it's unclear if those were approved or used. Privacy advocates criticize these devices for their dragnet surveillance capabilities, potentially impacting journalists and innocent bystanders.","US feds sought warrants to use cell-site simulators on journalists and a political candidate.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Ffeds-got-warrants-to-use-fake-cell-towers-to-hunt-down-don-lemons-producer\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6ac94a7a4676236d922d7944\u002Fmaster\u002Fpass\u002FSecurity_Feds%20Got%20Warrants%20to%20Use%20Fake%20Cell%20Towers%20to%20Hunt%20Down%20Don%20Lemon%E2%80%99s%20Producer_v1.jpg","2026-10-12T11:00:00+00:00","2026-10-12T12:00:15.274651+00:00",7,[17,20,22,24,26,29],{"name":18,"type":19},"cell-site simulators","product",{"name":21,"type":19},"Stingrays",{"name":23,"type":19},"IMSI catchers",{"name":25,"type":19},"YouTube",{"name":27,"type":28},"REI","vendor",{"name":30,"type":31},"Don Lemon","threat_actor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":32,"icon":34,"name":35,"slug":36},null,"Policy","policy",[38,43,45],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[27,18,21],{"controls":53,"vendors":112},[54,83],{"slug":55,"name":56,"problem":57,"products":58},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"slug":84,"name":85,"problem":86,"products":87},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"corelight","Corelight","\u002Fvendor-logos\u002Fcorelight.png","open-ndr","Corelight Open NDR","https:\u002F\u002Fcorelight.com\u002Fplatform\u002F","Network detection and response based on Zeek and Suricata.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-network","Darktrace \u002F NETWORK","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Fhybrid-network","Network detection and response based on learning normal behaviour.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",[],{"slug":114,"title":115,"body":116,"framework_refs":117,"framework_notes":129},"stingray-warrants-used-to-track-journalists-and-activists","Stingray Warrants Used to Track Journalists and Activists","US law enforcement's use of cell-site simulators (Stingrays) to surveil journalists and political candidates raises serious concerns about the chilling effect on press freedom and civil liberties. These devices operate as dragnet surveillance tools, intercepting communications from all nearby devices — not just the target — making innocent bystanders collateral victims of the surveillance. The fact that warrants were sought against journalists for covering a lawful protest signals a potential misuse of surveillance technology to monitor constitutionally protected activity. This matters because even legally obtained surveillance tools, when deployed broadly, can undermine the public's trust in government and expose sensitive source relationships that journalists depend on.",[118,119,120,121,122,123,124,125,126,127,128],"NIST SP 800-187 (LTE Network Security)","NIST Privacy Framework PR.DS-5 (Data Protection)","CIS Control 3: Data Protection","CIS Control 14: Security Awareness and Skills Training","GDPR Article 5(1)(c) – Data Minimisation","GDPR Article 9 – Processing of Special Categories of Data","First Amendment (US) – Press Freedom Implications","Fourth Amendment (US) – Unreasonable Search and Seizure","Electronic Communications Privacy Act (ECPA)","NIST AC-2: Account Management (access to surveillance warrant systems)","CPJ Digital Safety Guidelines for Journalists",{}]