X users have reported receiving unsolicited password reset emails following the rollout of the platform's new X Money payment service. X engineer Mridul Singhai confirmed the company is investigating the surge of reset requests, stating no evidence of actual account breaches has been found so far.
techcrunch.com
· 2026-09-01
Apple has outlined several methods for users locked out of their iPhones after too many failed passcode attempts. Depending on the iOS version and available hardware, users can revert to a previous passcode, erase and reset the device using Find My and their Apple Account credentials, or connect the phone to a computer for a full reset via iCloud backup.
engadget.com
· 2026-08-30
Brave has released version 1.94 of its browser with a new Email Aliases feature that lets users create disposable email addresses for signing up to websites, while messages are still forwarded to their real inbox. The feature requires a free Brave Account and works separately from Brave Premium, with up to five aliases available at no cost before a paid tier removes that limit.
bleepingcomputer.com
· 2026-08-29
WhatsApp is strengthening its two-step verification by letting users set a full password—supporting letters, numbers and special characters—instead of the previous six-digit PIN. The company is also improving caller ID on Android, showing more context about unknown callers such as their country and any shared groups. Both features are rolling out gradually, with the password option available on Android and iOS, while enhanced caller ID is Android-only for now.
androidauthority.com
· 2026-08-25
A joint alert from the US State Department, Japan, Canada and the UK warns that North Korean operatives are using falsified identity documents to get hired as remote IT workers at foreign companies, letting them enter corporate networks with legitimate-looking access. Separately, groups like Scattered Spider have used social engineering against help desks to trick staff into resetting passwords or MFA for accounts they don't own, bypassing strong authentication entirely.
bleepingcomputer.com
· 2026-08-25