The 2026 FIFA World Cup venues across the US, Canada, and Mexico will implement extensive surveillance systems including face recognition and anti-drone technology. Fans attending matches will be subject to unprecedented monitoring.
Stadium operators are installing facial recognition systems to identify individuals entering venues, while anti-drone technology will monitor airspace around facilities. These measures are being implemented under the guise of security protocols for the international tournament.
The surveillance infrastructure spans multiple technologies beyond facial recognition. Anti-drone systems will detect and potentially disable unmanned aircraft, while additional monitoring tools will track attendee movements and patterns.
Officials cite security concerns as justification for the expanded surveillance. However, the scope of monitoring raises questions about fan privacy and data handling procedures. Details regarding how collected biometric data will be stored, shared, or deleted remain unclear.
The 2026 World Cup will be the first major international soccer tournament to deploy surveillance technology at this scale across North American venues. Fan advocacy groups have raised concerns about the precedent being set for future sporting events.
The Clop ransomware gang is exploiting vulnerabilities in PTC Windchill and FlexPLM platforms, targeting internet-exposed instances to steal data and extort victims.
Russian state-sponsored group Laundry Bear is targeting organizations running Zimbra Collaboration email servers by combining phishing attacks with exploitation of a patched vulnerability. CISA has issued a warning about the campaign.
A new remote access trojan called Dolphin X leverages AI to profile and score infected users, enabling cybercriminals to prioritize high-value victims for exploitation.
A race condition vulnerability in the Linux kernel's XFS filesystem allows local attackers to overwrite protected files and gain root privileges. The flaw, tracked as CVE-2026-64600, has remained unpatched for nine years.