Surveillance & Security Monthly Review — October 2026
Dubai Police maps AI policing to 2040, US camera rules widen to critical infrastructure, Verkada connects its platform to AI assistants, and attackers probe an old Hikvision flaw.
Compiled in November 2026 as part of the launch archive. It looks back over the month; it was not published at the time.
Editor's note
October's theme was connection: police planning AI that draws on many data sources, vendors linking platforms to AI assistants, and attackers scanning for anything left exposed. Integration brings capability, and it raises the cost of skipping basic security.
Dubai Police names 10 AI opportunities for policing by 2040
Dubai Police identified ten emerging AI opportunities it expects to shape policing by 2040, including autonomous patrols, proactive security sensing, AI-enhanced criminal investigations and hybrid human–AI teams, as part of its future-scenarios work.
Why it matters here
'Proactive sensing' depends on data from private buildings as much as public cameras. Owners planning systems today should favour open, standards-based equipment that can integrate later, rather than closed kits.
US critical-infrastructure definition widens the Hikvision and Dahua import ban
The FCC's new definition of critical infrastructure took effect on 13 October. Industry analysis notes that the July import and marketing ban on older Hikvision, Dahua and Hytera equipment now also reaches equipment marketed for physical security surveillance of critical infrastructure.
Why it matters here
This still does not apply in the UAE, but utilities, ports and energy projects with US partners or financing will feel it first. Check the project's brand clauses before quoting.
MapQuest adds a map layer showing licence-plate reader cameras
MapQuest launched a 'surveillance layer' in its mobile app that shows known automated licence-plate readers along a route, including cameras from Flock Safety, Motorola Solutions and others, amid a US privacy debate over the technology.
Why it matters here
Public mapping of cameras is a reminder that placement is visible and will be questioned. In the UAE, privacy rules already limit pointing cameras at neighbours and public space; design coverage to the property line.
Verkada connects its security platform to AI assistants
Verkada's October release introduced Catalyst, a private-beta connector that links a customer's Command platform to AI assistants including Claude, ChatGPT and Gemini for custom workflows and reports. It also launched a vehicle video line and its first dual-spectrum thermal camera.
Why it matters here
Asking an assistant 'which doors were forced open last week?' is becoming normal. Before enabling it, decide which data the assistant may see and who approves it; that is a policy decision, not a technical one.
Threat-intelligence firm GreyNoise recorded a sharp rise in scanning and exploitation attempts against CVE-2021-36260, a critical command-injection flaw in certain Hikvision devices, targeting systems in Ukraine between 21 September and 1 October. The requests ran a test command with no malware payload.
Why it matters here
Old firmware stays dangerous for years, and changing passwords does not fix this flaw. Any recorder or camera reachable from the internet should be updated and placed behind a VPN or firewall.