Kubernetes Tech Lead

Perfectly false: why the voice you trust is the threat. September 22nd 2026 There was a time, not so long ago, when a familiar voice on the phone settled the matter. You knew your finance director's laugh, your mortgage broker's slightly weary "right then", the particular way your chief executive clears her throat before saying something expensive. Recognition was a kind of security system, which served VerifyLabs well since the invention of the telephone. That system has quietly been switched off. Most businesses simply haven't noticed yet. The voice you trust, annexed by someone else Consider a couple in West Michigan. This month, Brian and Wendy VanDoeselaar lost their entire closing fund to scammers who combined AI voice cloning, spoofed email and spoofed caller ID to impersonate the mortgage professional they had been working with for weeks. The sum was $66,000. What undid them wasn't carelessness. He heard a familiar voice, on a number that matched his lender's, confirming wiring instructions that arrived in an email that looked right; three layers of fakery reinforced one another before any single one raised a flag. If you're tempted to think this only happens to ordinary people buying ordinary houses, look at who was targeted in August. A coordinated voice-phishing campaign went after several of Wall Street's largest asset managers, using cloned voices to mimic the tone and phrasing of executives and colleagues in order to coax staff into surrendering credentials or granting system access. Two Sigma, Citadel, Point72 and Millennium Management all faced attempted breaches; Two Sigma confirmed it stopped the attack with no data compromised. These are firms with security budgets most of VerifyLabs can only dream of. The criminals clearly thought the clones were good enough to be worth the effort. Where the money goes afterwards Fraud is only half the story. Stolen money has to be washed, and deepfakes are increasingly how criminals get through the front door of the financial system in the first place. In February, a Ukrainian national pleaded guilty in the US to running OnlyFake, a site that generated and sold digital fake ID documents; prosecutors said it produced more than 10,000 fraudulent IDs, helping customers slip past Know Your Customer checks at banks and crypto exchanges. In the Netherlands, a case running through the Amsterdam courts involved a man who opened 47 fraudulent bank accounts by defeating a bank's selfie-versus-ID onboarding check with deepfake and face-swap imagery. The scale of what sits behind all this is sobering. INTERPOL's Operation First Light, which ran from January to April this year, targeted social engineering scams and the money laundering around them, leading to 5,811 arrests and the interception of $293 million across 97 countries. In Thailand, investigators found the digital wallet of one suspect, aged just 20, had processed more than $122.5 million in ten months. In Eswatini, police uncovered a gang that had built a realistic replica of a Brazilian police station, complete with fake uniforms and signage, then posed as Brazil's Federal Police on video calls to talk victims into moving money for "safekeeping". The carpentry involved sounds almost whimsical, until you realise that the most convincing deepfake scams merge real and synthetic content. AI bad actors are increasingly blending real and fake to make their "kills". Why "we'll train our people to spot it" isn't enough The instinct of most organisations is to run an awareness session and hope for the best. The evidence is not kind to that plan. Veriff's 2026 research, based on a survey of 3,000 people across the US, UK and Brazil, found that people are barely better than a coin toss at telling a real video or image from a fabricated one, with video the hardest format of all. In Britain specifically, 22% of people say they never verify suspicious content, the highest rate of any country surveyed. Meanwhile the machinery of fraud is being industrialised. Entrust's 2026 Identity Fraud Report, drawn from more than a billion identity-verification events, found that deepfakes now account for one in five biometric fraud attempts. Here at home, UK Finance reported payment fraud losses of £1.28 billion in 2025, with authorised push payment fraud up 19% to £576.4 million, and said organised criminal groups are increasingly using deepfakes, cloned voices and synthetic identities to impersonate trusted people and bypass identity checks. The law has noticed, even if the boardroom hasn't This is where "optional extra" finally stops being a defensible position. In the UK, the failure to prevent fraud offence came into force on 1 September 2025 for large organisations, and a company can now be criminally liable for fraud committed for its benefit, including deepfake-enabled fraud, unless it can show reasonable prevention procedures were in place. Across the Channel, Article 50 of the EU AI Act has applied since 2 August 2026, and UK businesses serving EU customers fall within its scope. Put plainly: when a deepfake gets through, the question will no longer be "how were you to know?" It will be "what did you have in place?" What changes when you can check None of this means abandoning a good process. Call-backs on known numbers, second sign-offs and a healthy scepticism about urgency all still matter. But process relies on someone deciding to be suspicious, and the whole art of a good deepfake is that it gives them no reason to be. That is the gap a detector fills. VerifyLabs.AI was independently benchmarked in 2026 at 98% accuracy, runs without any API integration, and works across iOS, Android, desktop and Chrome, so the check can happen on the call, in the inbox or at onboarding, wherever the doubt arises. It won't replace judgement. It gives judgement something solid to stand on again. The familiar voice used to be the proof. Now it's the question. * Resemble AI, "The Deepfake Watchlist: Week of September 11-17, 2026" (17 Sep 2026), summarising CNN, "How two homebuyers in Michigan lost $66,000 in a suspected voice-cloning scam" (15 Sep 2026). resemble.ai/resources/the-deepfake-watchlist-week-of-september-11-17-2026 * Resemble AI, "The Deepfake Watchlist: Week of July 31 - August 6, 2026" (7 Aug 2026), summarising Investing.com/Bloomberg, "Wall Street hit by wave of AI-powered 'vishing' cyberattacks". resemble.ai/resources/the-deepfake-watchlist-week-of-july-31 - august-6-2026 * INTERPOL, "Over 5,800 arrests, USD 293 million intercepted in global fraud bust" (9 Jul 2026). interpol.int * Adaptive Security, "11 Deepfake Attack Examples: Real-World AI Fraud Cases" (26 Jun 2026), citing a February 2026 US Department of Justice announcement. adaptivesecurity.com/blog/11-deepfake-attack-examples-2026 * Brightside AI, "Deepfake Fraud in 2026: The $3.7B Problem and How to Defend" (19 Jul 2026). brside.com/blog/deepfake-fraud-losses-2026 * Veriff, "What deepfake fraud actually costs businesses in 2025-2026" (17 Jul 2026). veriff.com/fraud/deepfake-fraud-cost-2026 * Veriff, "Deepfakes Report 2026 UK" (May 2026). veriff.com/resources/ebooks/deepfakes-report-2026-uk * DeepStrike, "Deepfake Statistics 2026" (Aug 2026), citing the Entrust 2026 Identity Fraud Report. deepstrike.io/blog/deepfake-statistics-2025 * IBTimes UK, "UK Fraud Losses Hit £1.28B as Banks Warn AI Makes Scams Harder to Spot" (12 Jul 2026), reporting UK Finance's Fraud Report 2026. ibtimes.co.uk/ai-driven-fraud-costs-uk-1-28-billion-1808188 * Internet Safety Statistics, "Deepfake Technology Threats: A 2026 UK Business Guide" (Sep 2026). internetsafetystatistics.com/deepfake-technology-threats

Two Sigma raised pay in London last year but some people left. 7 minutes ago Two Sigma is looking to grow its London team in 2026; the hedge fund moved into a new office with double the floor space and room for up to 200 people. Accounts for 2025 filed via the UK's Companies House over the past week suggest it has to fill a few extra seats if it wants to pack that office out. Headcount across both of Two Sigma's entities fell last year. 'Two Sigma International Limited,' its hedge fund entity, fell from 93 people to 85 through losses in both its modelling and engineering teams. 'Two Sigma Securities UK Limited,' the fund's market making arm, fell from 14 employees to 13 after one trader departed. Spending on 'salaries and wages' was up in both entities. The hedge fund paid £502.8k ($681.5k) per head, while the market making arm paid £535.9k ($726.3k). When Two Sigma first moved to its new office in Devonshire Square, it occupied one floor (roughly the same sized office as it previously occupied) and began refurbishing the floor above for them to occupy later. Estates Gazette said yesterday that it has officially leased that second floor and could be ready to unleash its hiring plans. At present, though, it only has one opening in operations and two in reliability engineering. Squabbles atop Two Sigma's leadership team may also be a reason the fund has yet to push the button on hiring. Last month, Bloomberg reported that the fund sent a letter to investors notifying them that founders John Overdeck and David Siegel are going into another round of arbitration. The pair have had a public feud over the past few years that led to them resigning as co-CEOs in 2024. Have a confidential story, tip, or comment you'd like to share? Contact: WhatsApp: http://wa.me/442079977910 (+44 20 7997 7910), Telegram: @AlexMcMurray, Signal: @AlexMcMurrayEFC.88 Click here to fill in our anonymous form, or email [email protected]. Bear with us if you leave a comment at the bottom of this article: comments are moderated intermittently by human beings. Sometimes these humans might be asleep, or away from their desks, so it may take a while for your comment to appear. You must take sole responsibility for comments you post on this site. We will take reasonable steps to weed out anything that we consider to be offensive or inappropriate. The essential daily roundup of news and analysis read by everyone from senior bankers and traders to new recruits. Boost your career. Find thousands of job opportunities by signing up to eFinancialCareers today. Top Articles

Quinn Emanuel and McDermott confirm breaches - Both US law firms traced to a single hacked employee. Published 2 hours ago Cybersecurity Writer Summarize with: Key Takeaways * Breach method: Both Quinn Emanuel and McDermott traced their incidents to social engineering attacks on single user accounts. * Data exposed: McDermott's breach affected Social Security numbers and health data among firm files. * Sector trend: Herbert Smith Freehills Kramer, Goodwin Procter, and WilmerHale have also faced recent breach disclosures. Prominent U.S. law firms Quinn Emanuel and McDermott said on Thursday that they suffered recent data breaches and had notified law enforcement, amid heightened cyber risks for firms that hold sensitive client and personal information. It was not clear who was responsible for the two breaches or whether they were related. Quinn Emanuel said in an August 25 letter to a lawyer for short seller Muddy Waters that some files related to the company were accessed in a breach less than two weeks earlier. Quinn Emanuel breach tied to Muddy Waters files. The letter, viewed by Reuters, said an "unauthorized third party obtained access through social engineering" on August 14, and that some of the information exposed involved Muddy Waters files that Quinn Emanuel obtained in a lawsuit in Florida. Quinn, in a statement Thursday, said it identified "a data security incident involving unauthorized access to stored files for a single software application through one temporarily compromised user account." The statement mentions a "limited" number of impacted client documents and adds that there is no ongoing unauthorized access to systems. Muddy Waters had previously asked a judge to bar Quinn's involvement in a lawsuit against the short seller in Texas, saying the firm had earlier represented Muddy Waters on related matters. In a statement Thursday, Muddy Waters said: "Just when we thought Quinn couldn't be more outrageous than eagerly representing new clients who want to sue old ones, we learned that Quinn failed to protect our sensitive information from social engineering hacking." Quinn Emanuel declined to comment about Muddy Waters' statement. The firm denied Muddy Waters' conflict-of-interest claims and said a single attorney at the firm briefly represented Muddy Waters on a different matter. McDermott reports breach to Vermont attorney general. McDermott reported its data breach last week to the Vermont state attorney general and said it affected Social Security numbers and health data among its files. McDermott, in a statement, said it responded to "an isolated social engineering incident involving a single user and a limited number of documents," and that it investigated with assistance from cybersecurity experts and engaged with law enforcement. "The matter has been resolved, and the firm's systems remain secure. The confidentiality and privacy of our client and firm information continue to be our highest priority," McDermott said. Law firms face rising breach wave. At least three other law firms, including Herbert Smith Freehills Kramer and Goodwin Procter, disclosed data breaches to U.S. state regulators last month, while WilmerHale was sued in July in a proposed class action over a data breach. In early August, Citadel, Point72, and Two Sigma were targeted in a coordinated Wall Street vishing attack. A June Google Threat Intelligence Group (GTIG) and an FBI Cyber FLASH Alert warned that UNC3753, also tracked as Luna Moth, Chatty Spider, Storm-0252, and Silent Ransom Group (SRG), targeted U.S. law firms in a vishing extortion campaign, sending individuals posing as IT technicians to exfiltrate data via USB media.