Ban on Selling Precision Location Data

The core issue is that adtech-based surveillance systems like Webloc are collecting and selling precision location data from up to 500 million mobile devices worldwide.

This data includes device identifiers, coordinates, and app profiles, and is reportedly purchased and used by multiple government agencies including DHS, ICE, the US military, and state police. In particular, it's noted that when combined with Penlink's Tangles, it can link anonymous devices to social accounts, enabling identification of individuals without a warrant.

Citizen Lab views this granular tracking as capable of effectively revealing a specific individual's home, workplace, and movement patterns. As such, they argue that rather than merely restricting use, the creation and sale of precision location data itself should be banned, citing Virginia's sales ban law as the first such case.

Notable cybersecurity cases introduced afterward also stand out.

• An analysis covered a case where a hacker used Claude Code and the OpenAI GPT-4.1 API together to breach 9 Mexican government agencies.
• The hacker accelerated automated reconnaissance, attack script generation, and data analysis using AI, highlighting that even small-scale attackers can now inflict team-level damage.
• On the defense side, positive cases mentioned include the US Department of Justice's takedown of the GRU botnet, the FBI and Indonesian police's dismantling of the W3LL phishing kit network, and Google's introduction of Device Bound Session Credentials (DBSC).

Finally, recent trends are also summarized, including the distribution of malicious LLM proxy routers, France's move to switch to Linux, and China's cyber power strategy.