The FBI has repeatedly flagged that North Korean IT workers are using fraudulent or stolen identity documents, proxy infrastructure and US-based facilitators to pass remote hiring processes and gain access to corporate networks. Rather than stealing existing credentials, these attackers get organizations to create new credentials for them during onboarding, exploiting the fact that Zero Trust and MFA controls assume an identity already exists. The FBI now recommends verifying identity both during hiring and continuously throughout remote employment.
bleepingcomputer.com
· 2026-10-01
WhatsApp announced new parental controls that let parents restrict who can see a teen's profile photo, invite them to groups, or message them, along with limits on channels and status updates. The controls also extend to Meta AI's chatbot, offering a restricted mode for younger users, and require a single parent-set PIN to activate. WhatsApp says personal messages and calls remain private even from parents who enable the controls.
cnet.com
· 2026-10-01
Following Claude Code creator Boris Cherny's comment that the Opus model used TLA+ to detect race conditions, online discussion has surged around formal verification as a fix for agentic software bugs. A longtime TLA+ educator and advocate argues this enthusiasm is overblown, noting that formal verification only checks properties that engineers explicitly define, and many important properties can't even be expressed in TLA+.
buttondown.com
· 2026-09-30
WhatsApp is rolling out new parental control tools letting parents monitor when their teen joins or leaves groups and adjust privacy settings, such as who can see a profile photo or add them to groups. Parents will not be able to read messages or hear calls, which remain end-to-end encrypted, and the controls can be turned on or off using a parent-set PIN.
bbc.co.uk
· 2026-09-30
Instagram is rolling out new features for schools enrolled in Meta's School Partnership Program, letting verified students and administrators create clubs and teams that can post Stories and Notes visible only to verified peers. Schools can also set up Channels for broader updates to students, parents and teachers, alongside a verified school directory and profile banners. Meta uses third-party service UNiDAYS to verify student identities, and the features are live starting today.
engadget.com
· 2026-09-29
TikTok has agreed to pay Alabama at least $100 million and implement new teen-safety measures, including a two-hour daily time limit, overnight access restrictions, stronger age verification, a ban on beauty filters, and an optional non-personalized feed. The settlement, reached just before a scheduled trial, resolves claims that TikTok misled parents about its child-safety tools, and could rise to $300 million if 40 other state attorneys general sign similar agreements.
tech.slashdot.org
· 2026-09-28
An interactive tutorial walks through TLA+, a formal specification language used to describe transition systems and verify their properties. It illustrates core concepts like states, actions, safety and liveness properties using a leader-election example among three computers, showing how a model checker can explore all possible states and surface counterexamples when rules are violated.
reasonable.io
· 2026-09-27
F-Droid, the open-source Android app repository, released version 2.0 with automatic update installation and a unified installer that leverages a new pre-approval API enabled by EU Digital Markets Act rulings against Google. The release comes as F-Droid displays a banner warning users about Google's upcoming developer verification requirements, which could restrict distribution of unverified apps on Android devices.
news.slashdot.org
· 2026-09-25
Discord announced it will introduce a new age-assurance system that avoids requiring most users to submit ID documents. The company said over 90% of users won't be asked to confirm their age, with most sorted automatically into age groups, while those who do need verification can use methods like Google Wallet, Apple App Store records, or a reusable credential called AgeKey. Discord says vendors handling verification data won't use it for ad targeting or AI training.
cnet.com
· 2026-09-24
Discord began rolling out a new age-verification system today, sorting users into adult, teen, and unconfirmed groups and restricting teens' access to sensitive content and message requests from strangers. The system replaces a February plan that required ID scans or facial recognition, which Discord dropped after user backlash and a 2025 breach exposed government IDs of 70,000 users verified through a third-party service.
arstechnica.com
· 2026-09-23
Security researchers at Manifold Security found that third-party.com, a domain frequently used as a generic placeholder in developer documentation and code samples, now hosts a fake Cloudflare verification page. BleepingComputer confirmed the page mimics a 'Performing security verification' CAPTCHA that copies a malicious PowerShell command to a user's clipboard, then instructs them to paste and run it via Windows key + R, which downloads and executes malware from an external URL.
bleepingcomputer.com
· 2026-09-23
LinkedIn, owned by Microsoft, is rolling out a feature enabling verified companies to strip false employment claims from user profiles. The tool targets people who list jobs they never actually held at a given organization.
fastcompany.com
· 2026-09-23
GoKawiil