:

UK MANDATES ID OR FACE SCAN FOR SOCIAL MEDIA

INDUSTRY DESK1 MIN READ
WED, JUN 17, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

The UK will require users to verify their age with ID uploads or facial scans before creating social media accounts under a new ban on under-16s, set to take effect in spring 2027.

Starting in 2027, social media platforms operating in the UK must implement age verification for all new accounts. Users will have two options: upload government-issued identification or submit to an automated facial age scan. The measure aims to protect minors from accessing platforms deemed unsuitable for children under 16. The government has not specified which platforms will fall under the requirement or how the rules will be enforced. Security experts have raised significant concerns. Researchers warn that age verification systems are widely vulnerable to circumvention through deepfakes, borrowed IDs, and third-party bypass services. The requirement also creates centralized repositories of user identification data, increasing exposure to data breaches. The announcement follows years of regulatory pressure on social platforms. The UK's Online Safety Bill previously focused on content moderation rather than age restrictions, but this new requirement marks a shift toward stricter access controls for minors.

■ SOURCES

Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

The FTC has filed a lawsuit exposing how subscription app operators use shell companies and payment infrastructure to bypass app store enforcement and continue targeting consumers despite complaints.

JUST NOWIndustry Desk

A massive credential leak has compromised sensitive network access for thousands of organizations, including Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet. The breach exposes login credentials that could allow unauthorized access to critical infrastructure and enterprise systems.

JUST NOWSecurity Desk

A detailed technical breakdown of Internet Information Services (IIS) vulnerabilities reveals how attackers exploit the Microsoft web server—and the serious legal consequences they face. The analysis has sparked discussion about responsible disclosure in the security community.

2H AGOAI Desk

A data breach dubbed FortiBleed has exposed VPN credentials for nearly 74,000 Fortinet FortiGate firewall devices across global organizations. The leaked credentials could allow attackers to access corporate networks.

2H AGOIndustry Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.