[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fz4hlS2roHVTRdLWVEgreLCz7Y-WBO0-AlR5uzg9ByLI":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":23,"status":24,"created_at":25,"published_at":26,"article":27,"tags":31,"podcasts":50,"controls":51},"d5ac7994-65c5-4b18-afe7-4eefad9abce0","stingray-warrants-used-to-track-journalists-and-activists","285854a5-cbba-4e1a-bcc5-fddae96320d3","Stingray Warrants Used to Track Journalists and Activists","US law enforcement's use of cell-site simulators (Stingrays) to surveil journalists and political candidates raises serious concerns about the chilling effect on press freedom and civil liberties. These devices operate as dragnet surveillance tools, intercepting communications from all nearby devices — not just the target — making innocent bystanders collateral victims of the surveillance. The fact that warrants were sought against journalists for covering a lawful protest signals a potential misuse of surveillance technology to monitor constitutionally protected activity. This matters because even legally obtained surveillance tools, when deployed broadly, can undermine the public's trust in government and expose sensitive source relationships that journalists depend on.","**Immediate actions for journalists and activists:**\n- Use end-to-end encrypted communication apps (e.g., Signal) to protect sources and sensitive communications from interception.\n- Enable airplane mode or use a faraday bag when attending sensitive events to prevent cell-site simulator tracking.\n- Audit and minimize the personal data stored on mobile devices used in the field.\n\n**Long-term organizational improvements:**\n- Establish a digital security policy for media organizations that includes device hardening, VPN use, and regular security training for staff.\n- Advocate for and comply with legal frameworks that require public disclosure and strict oversight of cell-site simulator deployments.\n- Implement operational security (OPSEC) training programs for journalists, activists, and political candidates handling sensitive information.\n\n**Detection and awareness measures:**\n- Deploy mobile threat defense (MTD) tools capable of detecting anomalous basestation behavior indicative of IMSI catchers.\n- Monitor legal and legislative developments around surveillance warrant requirements to ensure organizational readiness and compliance.\n- Conduct regular threat modeling exercises to identify surveillance risks specific to high-profile reporting or advocacy work.",[12,13,14,15,16,17,18,19,20,21,22],"NIST SP 800-187 (LTE Network Security)","NIST Privacy Framework PR.DS-5 (Data Protection)","CIS Control 3: Data Protection","CIS Control 14: Security Awareness and Skills Training","GDPR Article 5(1)(c) – Data Minimisation","GDPR Article 9 – Processing of Special Categories of Data","First Amendment (US) – Press Freedom Implications","Fourth Amendment (US) – Unreasonable Search and Seizure","Electronic Communications Privacy Act (ECPA)","NIST AC-2: Account Management (access to surveillance warrant systems)","CPJ Digital Safety Guidelines for Journalists",{},"published","2026-10-12T12:21:53.827837+00:00","2026-10-12T12:21:53.809+00:00",{"id":7,"url":28,"slug":29,"title":30},"https:\u002F\u002Fwww.wired.com\u002Fstory\u002Ffeds-got-warrants-to-use-fake-cell-towers-to-hunt-down-don-lemons-producer\u002F","feds-got-warrants-to-use-fake-cell-towers-to-hunt-down-don-lemon-s-producer-d5315a","Feds Got Warrants to Use Fake Cell Towers to Hunt Down Don Lemon’s Producer",[32,38,44],{"id":33,"name":34,"slug":35,"description":36,"color":37},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",{"id":39,"name":40,"slug":41,"description":42,"color":43},"c0dcc566-3654-4d70-8ede-262a198e732f","Regulatory Compliance","regulatory-compliance","GDPR, NIS2, DORA, sector-specific violations","#ec4899",{"id":45,"name":46,"slug":47,"description":48,"color":49},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",[],[52,56],{"slug":53,"name":54,"problem":55},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":57,"name":58,"problem":59},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen."]