GoKawiil
Tech News
Anthropic has released a checker that indicates whether a piece of content carries a signal showing it was processed by Claude. The tool only confirms the presence of such a signal and says nothing about the accuracy or quality of the content itself.
Dropbox notified users that roughly 5,000 accounts were accessed without authorization between August 4 and 21, 2026, with files downloaded from about 1,500 of them. The breach traces to a single sign-on integration with Lenovo IDs, where a gap in Lenovo's email verification let attackers register accounts under victims' email addresses and log into their Dropbox accounts without needing inbox access.
Cybercriminals are selling digital scans of over 153 million U.S. and Canadian driver's licenses, along with medical and residence cards, through a new dark web service called Nexus. The FBI's New Orleans office has opened an inquiry after security researcher Krebs on Security verified the data's authenticity, including his own license. The breach reportedly stems from a Louisiana-based identity verification company whose clients include Hertz, Target, FedEx, and Caesars Entertainment.
Dropbox has notified some customers that attackers broke into their accounts by exploiting a flaw in Lenovo's email verification system, which let them register a fraudulent Lenovo ID tied to the victim's email address. Because Dropbox's login integration trusted Lenovo's identity assertions without independently confirming account ownership, attackers could log in without knowing the victim's Dropbox password. Dropbox says the intrusions occurred between August 4 and August 21, and Lenovo has attributed the issue to a legacy integration between its ID system and Dropbox.
Meta has agreed to detailed commitments requiring more robust methods for identifying underage users, including AI tools and facial analysis, as part of a legal settlement over child safety. The company faces the technical challenge of accurately distinguishing minors from adults without overreaching into the privacy of all users, since safety protections only work if kids are correctly identified in the first place.
Meta has agreed to an $18 billion settlement with 52 attorneys general representing 29 U.S. states over allegations it designed Instagram and Facebook to hook young users. The company admits no wrongdoing but commits to detailed platform changes for minors, with the payout spread across a decade, softening its financial impact given Meta's $200 billion-plus annual revenue.
Meta has reached a settlement with 29 US states that had sued the company over allegedly designing Instagram and Facebook to be addictive and harmful to minors. Reuters reports the deal could cost Meta as much as $16.68 billion and would involve 52 state attorneys general, requiring Meta to adopt default usage limits during school and nighttime hours plus stricter age verification. The agreement still needs court approval but would let Meta avoid a trial that could have forced broader industry changes.
Meta unveiled three new WhatsApp security updates: support for multiple passkeys per account across iOS and Android, two-step verification that now allows full alphanumeric passwords instead of just a six-digit PIN, and an Android-only feature showing extra context about unknown callers, such as their country or shared groups. WhatsApp says over a billion users already rely on passkeys via Face ID, Touch ID, or screen locks.
WhatsApp is strengthening its two-step verification by letting users set a full password—supporting letters, numbers and special characters—instead of the previous six-digit PIN. The company is also improving caller ID on Android, showing more context about unknown callers such as their country and any shared groups. Both features are rolling out gradually, with the password option available on Android and iOS, while enhanced caller ID is Android-only for now.
WhatsApp now allows users to set a stronger alphanumeric password, requiring at least eight characters with one letter and one number, replacing the six-digit PIN system used since 2017 for two-step verification. The app also now supports multiple passkeys across devices and, on Android, adds country and shared-group-chat info to calls from unsaved numbers.
WhatsApp rolled out new account-security features, letting users replace their six-digit two-step verification PIN with a longer alphanumeric password and add multiple passkeys to one account, useful for people switching between iOS and Android. Android users will also see added context on calls from unknown numbers, such as the caller's country or shared groups.
A joint alert from the US State Department, Japan, Canada and the UK warns that North Korean operatives are using falsified identity documents to get hired as remote IT workers at foreign companies, letting them enter corporate networks with legitimate-looking access. Separately, groups like Scattered Spider have used social engineering against help desks to trick staff into resetting passwords or MFA for accounts they don't own, bypassing strong authentication entirely.