The Netherlands Just Rewrote Its Work Permit Rules

The Netherlands has rewritten a chunk of its work permit rulebook, and the changes — in force since May 22, 2026 — cut both ways for foreign workers: longer processing windows in some cases, but real new protections in others, most notably a doubling of how long unemployed permit holders can search for a new job before losing their status.

What changed and why

The Dutch Immigration and Naturalisation Service, the IND, updated its procedures to align with revised EU Directive 2024/1233, the bloc’s updated single permit rules for non-EU workers, according to Newland Chase’s summary of the changes. The update touches several of the most common Dutch work-permit categories: paid employment, highly skilled migrants, EU Blue Card holders, researchers and work-experience permits.

Longer waits, but firmer deadlines

First-time applications for paid-employment and highly-skilled-migrant permits can now take up to 30 additional days if the IND documents its reasons for the extension, according to Erickson Immigration Group’s analysis of the directive’s implementation. Where a permit holder is changing employers, the IND now must decide within 45 days for most categories — 30 days for EU Blue Card holders — extendable by 15 days only in exceptional circumstances. Permit extensions bundled with an employer change follow a 90-day timeline. The trade-off is transparency: applicants get a defined deadline where none existed cleanly before, even if that deadline is sometimes longer than they’d like.

A safety net if the IND misses its own deadline

The most employer-friendly change may be procedural: if the IND fails to decide an employer-change application within its required window, the applicant is legally permitted to keep working for the new employer under their existing permit until it expires. That closes a gap where administrative delay could otherwise have forced a worker to stop working through no fault of their own while a decision was pending.

Six months, not three, to find new work

The change most likely to matter to workers directly is the extension of the job-search period after unemployment. Permit holders who have held a valid Dutch residence permit for at least two years now get up to six months to find new employment if they lose their job — double the previous three-month window. That same extended window also applies to victims of labor exploitation, a protection aimed at workers who may otherwise feel pressured to stay in an abusive employment situation rather than risk losing status during a short search period.

What it means for employers

Companies sponsoring Dutch work permits now have clearer planning horizons but less flexibility to push decisions through informally. An EU Blue Card transfer, for instance, has a firm 30-day clock the IND cannot exceed without documenting exceptional circumstances, which HR and immigration teams will need to build into onboarding timelines for transferring staff between roles or employers.

Part of a wider EU rollout

The Netherlands is not implementing these changes in isolation. Directive 2024/1233 updates the EU’s single permit framework across all member states, meaning other EU countries are working through similar transpositions of decision-timeline rules and job-search protections on their own schedules. Workers considering a move within the EU under a single-permit route should check the specific implementation date and terms in their destination country rather than assume the Dutch timeline applies uniformly across the bloc.

What happens next

Employers sponsoring Dutch work permits should expect to build the new 45- and 90-day timelines into hiring and transfer planning, particularly for EU Blue Card transfers where the shorter 30-day clock applies. For workers, the extended six-month job-search window is now active for anyone who already holds — or is approaching — two years of valid residence, and is worth confirming directly with the IND or an immigration adviser given how recently the rule took effect.

Who should pay closest attention

The practical impact of these changes falls hardest on two groups: highly skilled migrants and EU Blue Card holders who change employers mid-permit, who now operate under firm IND decision deadlines for the first time, and workers nearing the two-year residence mark, for whom the extended six-month job-search window can be the difference between having to leave the country and having a realistic runway to find new sponsorship. Employers should flag both groups internally so HR teams are not caught off guard by the new timelines.

More immigration coverage

Related reading: the UK’s HC 584 immigration rule changes, South Korea’s new university visa sponsorship restrictions, and Australia’s cut to working holiday visa renewals.

Netherlands work permit questions answered

When did the new Dutch work permit rules take effect?

May 22, 2026, implementing revised EU Directive 2024/1233 on single permits for non-EU workers.

How long can the IND now take to decide employer-change applications?

Up to 45 days for most categories, 30 days for EU Blue Card holders, extendable by 15 days in exceptional circumstances.

What happens if the IND misses its deadline?

The applicant is legally permitted to keep working for the new employer under their existing permit until it expires.

How long do unemployed permit holders now have to find new work?

Up to six months, if they have held a valid residence permit for at least two years — double the previous three-month allowance.

Does the extended job-search window apply to anyone else?

Yes. It also applies to victims of labor exploitation.

Sources

Italy’s September 30 Air Traffic Strike: What to Know

A four-hour nationwide air traffic control strike is set to hit Italy on September 30, 2026, running from 13:00 to 17:00 local time, with ENAV and its subsidiary Techno Sky both walking out and disruption expected at airports from Milan to Naples. For anyone flying in, out of, or over Italy that afternoon, the practical question is not whether there will be delays, but how much of the day’s schedule falls inside the strike window.

What’s actually happening

According to Strike Tracker’s rundown of the action, the walkout covers ENAV staff and Techno Sky personnel across the country, with specific action confirmed at Bari, Bologna, Milan Linate, ENAV’s Rome headquarters and Naples. Separately, AirportStrikes.eu’s listing for Bologna’s Guglielmo Marconi Airport confirms the same September 30, 13:00-17:00 window there, organized by the RSA UILT-UIL union, and rates the expected local impact as minor — a reminder that “nationwide” strikes still play out unevenly airport by airport.

The protected hours that matter most

Italian law requires minimum service levels during morning and evening travel peaks, and this strike falls entirely outside those protected windows of 07:00-10:00 and 18:00-21:00. That is deliberate: unions time these actions to maximize disruption to midday and early-afternoon departures while leaving the highest-traffic commuter hours legally shielded. Passengers with flights scheduled inside the protected bands face comparatively low risk; anyone flying between roughly noon and 6pm should expect the opposite.

What ENAC’s guaranteed-flights list means

Ahead of every strike, Italy’s civil aviation authority ENAC publishes a list of flights that must operate regardless of the action — typically covering essential routes, medical transport and a minimum baseline of service. As of the most recent update from strike trackers, that list had not yet been published for the September 30 action. Airlines are expected to contact affected passengers directly once it is, and travelers with afternoon Italian flights should watch for that notification rather than assume their flight is automatically protected or automatically grounded.

Who else is affected

Because the strike covers overflights as well as departures and arrivals, airlines routing through Italian airspace to reach other European or Mediterranean destinations can see knock-on delays even without an Italian departure or arrival on the itinerary. Airports named in the action include major regional hubs as well as smaller ones like Rome’s Ciampino, meaning both legacy carriers and low-cost operators that concentrate flights there are exposed. Connecting passengers routed through Italian hubs during the afternoon window face the highest risk of missed connections.

Compensation rights if your flight is affected

Under EU passenger-rights rules, a strike by an airline’s own staff typically does not excuse the carrier from care obligations — meals, rebooking or refunds — even though strikes by third parties like air traffic controllers are often treated as extraordinary circumstances that limit cash compensation. Airlines are still required to offer a choice between rebooking on the next available flight or a full refund for a cancelled flight, regardless of the underlying cause, so travelers whose flights are cancelled should ask for that choice directly rather than accepting a rebooking offered by default.

A pattern, not an isolated event

This is not an isolated action. Italy has seen a string of transport strikes — covering airports, trains and other services — through the second half of 2026, reflecting broader labor disputes within ENAV and Techno Sky over staffing and working conditions. Travelers booking Italian flights for the coming months should build in some tolerance for further disruption rather than treat September 30 as a one-off.

What happens next

Travelers with flights scheduled for the afternoon of September 30 should check status directly with their airline in the days beforehand, watch for ENAC’s guaranteed-flights list once published, and build in extra connection time either side of the 13:00-17:00 window given the likelihood of knock-on delays. Given the pattern of repeated Italian transport strikes through the second half of 2026, this is unlikely to be the last such action before the year is out.

How this compares to earlier 2026 strikes

Italy’s aviation sector has run through several rounds of coordinated action this year, with unions citing understaffing and working-condition disputes at ENAV and Techno Sky as the recurring driver. Earlier actions in 2026 followed a similar pattern — a defined afternoon window outside the legally protected morning and evening bands — which is why frequent flyers to Italy have started treating a late-September or early-October strike date as close to predictable rather than a one-off shock.

More travel coverage

Related reading: the nor’easter that grounded hundreds of East Coast flights, Hurricane Nolo’s disruption of Hawaii flights, and how new Iran sanctions are reshaping regional airspace.

Italy strike questions answered

When is the Italy air traffic control strike?

September 30, 2026, from 13:00 to 17:00 local time, nationwide.

Which airports are affected?

Confirmed action includes Bari, Bologna, Milan Linate, ENAV’s Rome headquarters and Naples, with knock-on effects likely at other Italian airports and for flights overflying Italian airspace.

Are any flights protected from the strike?

Flights scheduled during Italy’s protected bands of 07:00-10:00 and 18:00-21:00 have legal minimum-service guarantees. The strike itself falls entirely outside those hours.

Has the guaranteed-flights list been published?

Not as of the most recent update. ENAC typically publishes this list shortly before the strike date, and airlines contact affected passengers directly.

What should travelers do if they have an Italian flight that day?

Check status with the airline directly in the days before September 30, watch for direct airline communication, and allow extra time for connections either side of the 13:00-17:00 window.

Sources

Google, Anthropic and OpenAI’s New Cyber AI Models

Google, Anthropic and OpenAI have each rolled out specialized cyber AI models within weeks of one another, racing to put advanced vulnerability-hunting systems into the hands of defenders before attackers get equivalent tools. The near-simultaneous launches — Google’s Gemini 3.8 Flash Cyber, Anthropic’s Claude Fable 5.1 and Claude Mythos 5.1, and OpenAI’s Astra — mark the clearest signal yet that frontier AI labs now see cybersecurity as a distinct, high-stakes product category rather than a side feature.

Google’s Fairwind Program

Google launched its Fairwind Program on September 2, 2026, giving vetted organizations access to Gemini 3.8 Flash Cyber paired with CodeMender, a system built for vulnerability research and remediation, according to The Hacker News’ reporting. Access is currently limited to government agencies, Google Cloud customers and cybersecurity partners, with priority given to critical infrastructure operators, and more than 650 organizations — including CrowdStrike and Palo Alto Networks — are already participating, per Security Boulevard’s coverage. Google reports the model scores 86.2% on CyberGym vulnerability benchmarks, up from 77.5% for its predecessor, and participants must adopt controls like multifactor authentication and restrict access to security-focused staff.

Anthropic’s tiered safeguards

Anthropic released two models in the same window: Claude Fable 5.1, with expanded vulnerability-identification capabilities but offensive techniques like penetration testing and exploit generation restricted to its more capable Opus-tier models, and Claude Mythos 5.1, which remains locked to trusted-access programs focused specifically on cybersecurity and life-sciences work. Alongside the models, Anthropic introduced Enterprise Frontier Safeguards, combining zero data retention with what it describes as state-of-the-art misuse detection, and said it has increased monitoring for model misalignment and paused some external evaluations following unauthorized access incidents.

OpenAI’s threshold claim

OpenAI took a different tack, declaring that its Astra model meets the “critical cybersecurity capability threshold” under its own Preparedness Framework — effectively OpenAI’s internal classification for models capable enough to warrant the tightest controls. Astra is being distributed through a program called Daybreak Blue to selected testers only. OpenAI says the model declines 91.5% of jailbreak attempts and scored 100% on ExploitBench, a benchmark for vulnerability exploit development, while adding stronger safeguards against unauthorized model actions.

Why the labs are converging on the same moment

The timing is not entirely coincidental. All three labs frame these releases around the same tension: AI systems capable enough to find and patch vulnerabilities are, by construction, also capable of finding and exploiting them. Restricting access to vetted defenders first is each company’s attempt to get ahead of that dual-use problem, rather than release the capability broadly and hope attackers lag behind. The strategy also mirrors how each company has handled other high-risk capabilities, granting broader access only after a period of monitored use with trusted partners.

What this means for organizations without access yet

The vast majority of businesses and public bodies are not inside Fairwind, Daybreak Blue or Mythos 5.1’s trusted programs, and none of the three companies has committed to a firm timeline for when access will broaden. In the meantime, smaller organizations remain reliant on the general-purpose versions of these models and on existing vendor security tooling, which lack the specialized vulnerability-hunting depth their restricted counterparts offer — a gap that critics of the staged-rollout approach argue leaves under-resourced defenders exposed for longer, even as it slows the risk of the same capability reaching attackers.

What happens next

Expect access programs to widen gradually rather than open up all at once — Google’s Fairwind Program and OpenAI’s Daybreak Blue are both explicitly framed as trusted-tester stages, not general releases. The real test will be whether defenders’ adoption of these tools measurably reduces exploitation timelines industry-wide, or whether attackers gain access to comparable capability through leaked access, jailbreaks, or their own frontier models before that advantage compounds.

The benchmark numbers, in context

CyberGym and ExploitBench are both designed to simulate realistic vulnerability-hunting and exploit-development tasks rather than abstract test questions, which is why labs cite scores on them as evidence of real-world capability rather than marketing claims alone. Still, benchmark performance in a controlled test environment does not guarantee identical results against live, unpatched systems in the field, and independent security researchers have historically pushed back on vendor-reported benchmark figures until third parties can replicate them.

More tech coverage

Related reading: OpenAI’s rogue-agent incident on government websites, the chip-export loophole reaching Nvidia hardware into China, and Microsoft’s quiet reboot of Copilot.

AI cyber model questions answered

What is Google’s Fairwind Program?

A program launched September 2, 2026 giving vetted organizations — governments, Google Cloud customers and cybersecurity partners — access to Gemini 3.8 Flash Cyber, a model built to find and patch software vulnerabilities.

What’s the difference between Claude Fable 5.1 and Mythos 5.1?

Fable 5.1 has expanded vulnerability-identification abilities but restricts offensive techniques to Opus-tier models. Mythos 5.1 is more capable still and remains limited to trusted-access programs in cybersecurity and life sciences.

What did OpenAI claim about Astra?

That it meets the “critical cybersecurity capability threshold” under OpenAI’s Preparedness Framework, with a 91.5% jailbreak-decline rate and a perfect score on the ExploitBench vulnerability benchmark.

Who can access these models right now?

Access is restricted to vetted participants: Fairwind covers government agencies, Google Cloud customers and cybersecurity partners; Astra is limited to OpenAI’s Daybreak Blue testers; Mythos 5.1 is restricted to trusted cybersecurity and life-sciences programs.

Why are three labs launching similar products at once?

Each is responding to the same dual-use problem: models capable of finding and fixing vulnerabilities can also be used to find and exploit them, so all three are prioritizing vetted defenders before wider release.

Sources

Chevening Scholarship 2027 Deadline Is October 6

Applications for the Chevening scholarship 2027 deadline close on October 6, 2026 at 11:00 UTC, giving prospective students in the UK’s flagship fully funded scholarship program roughly a week and a half left to finish and submit. The scholarship covers a one-year master’s degree at any UK university, along with tuition, a living stipend, flights and additional allowances, and it remains one of the most competitive fully funded routes into UK graduate study.

The deadline that actually matters

According to Chevening’s official application timeline, the window opened August 4, 2026 at 11:00 UTC and closes exactly nine weeks later, on October 6 at the same time. Chevening is explicit that the portal closes precisely at 11:00 UTC, and applicants are advised to convert that to their own time zone rather than assume a local midnight cutoff — a detail that has cost otherwise strong applicants their submission in past cycles.

What happens after the deadline

Once applications close, eligibility assessment begins in October, followed by review from independent reading committees running from October 2026 through January 2027. Shortlisted candidates are notified in mid-February 2027, with interviews held at British embassies and high commissions worldwide between March and April. Results are announced in mid-June 2027, and successful applicants then face a second deadline: unconditional university offers must be submitted by July 8, 2027 at 17:00 BST, according to the same Chevening timeline and confirmed by the UK government’s own announcement of the scholarship round. Scholars then begin their studies in the UK in September or October 2027.

Why the university offer deadline trips people up

Chevening does not require an unconditional university offer at the time of application — only at the point results are announced, months later. That gap means candidates need to be applying to UK universities in parallel with their Chevening application, since securing an unconditional offer by July 2027 typically requires having submitted university applications well before results come out in June. Candidates who wait until they hear from Chevening to start university applications routinely run out of time to convert a conditional offer into an unconditional one.

Who Chevening is looking for

Chevening scholarships target early- to mid-career professionals who can demonstrate leadership potential and a clear plan to use their UK study to benefit their home country, rather than academic achievement alone. The scholarship’s own guidance emphasizes networking, leadership and influence as much as grades, which is why the application asks for essays on leadership and networking experience in addition to academic and career goals.

What makes an application competitive

Chevening’s own guidance stresses that the four required essays — covering leadership, networking, studying in the UK and career plans — are read as a set rather than in isolation, so a strong career-plan essay paired with a thin leadership essay tends to weaken an otherwise solid file. Because the program explicitly targets future leaders rather than the strongest academic transcripts, candidates from smaller organizations or early-stage careers are not automatically disadvantaged against applicants from larger, better-known employers, provided they can point to concrete examples of influence, initiative or change they drove in their own context.

What happens next

With roughly a week and a half remaining before the October 6 cutoff, the immediate priority for anyone still working on an application is finishing the required essays and securing references, since Chevening does not accept late submissions for any reason. Candidates who submit successfully should expect the review process to run well into 2027, and should use the intervening months to pursue unconditional university offers rather than waiting on Chevening’s own timeline.

Funding beyond Chevening

Candidates who miss the October 6 window, or who are not selected, are not left with only one route into fully funded UK study. Other prominent options include Commonwealth Scholarships for citizens of Commonwealth countries and university-specific bursaries offered directly by UK institutions, each running on its own separate timeline and eligibility criteria rather than Chevening’s single annual cycle. Building a shortlist of two or three funding routes in parallel, rather than treating Chevening as the only option, reduces the risk of losing an entire application cycle to one program’s result.

More study abroad coverage

Related reading: Canada’s higher proof-of-funds requirement for study permits, South Korea’s new university visa sponsorship restrictions, and the UK’s HC 584 immigration rule changes.

A note on the interview stage

Candidates who clear the reading-committee stage should treat the March-April interview as a continuation of the essay themes rather than a fresh assessment: panels at British embassies and high commissions typically probe the same leadership and networking examples submitted in writing, testing whether an applicant can defend and expand on them under questioning. Preparing concrete, specific stories ahead of time — rather than general claims about leadership potential — tends to serve candidates better than last-minute cramming once an interview slot is confirmed.

Chevening scholarship questions answered

When does the Chevening 2027 application close?

October 6, 2026 at 11:00 UTC. Chevening enforces this cutoff exactly, so applicants should check the equivalent time in their own time zone well in advance.

Do I need a university offer to apply?

No. An unconditional offer is only required after results are announced, by July 8, 2027. Applicants should still be applying to universities in parallel with their Chevening application.

What does Chevening fund?

A one-year master’s degree at any UK university, including tuition, a monthly stipend, return flights and additional allowances.

When will applicants know if they were shortlisted?

Mid-February 2027, with interviews at British embassies and high commissions running from March through April 2027.

When do Chevening scholars start their studies?

September or October 2027, after results are announced in mid-June 2027 and unconditional offers are confirmed by July 8, 2027.

Sources

Why the October 2026 Visa Bulletin Never Came Out

The State Department has not published the October 2026 visa bulletin, the monthly document that tells hundreds of thousands of immigrant visa applicants worldwide whether their priority date has finally come up. As of late September, immigration lawyers were calling it the latest October release in at least several years, and the delay lands on top of three separate restrictions that are already reshaping how — and whether — immigrant visas move at all.

What the visa bulletin normally does

Each month, the visa bulletin sets “final action dates” for family-sponsored and employment-based green card categories, based on which applicants with an earlier priority date can move forward. The October edition matters more than most: it opens a new fiscal year, resetting the pool of roughly 226,000 family-sponsored and 140,000 employment-based visa numbers Congress allocates annually. A missing or delayed bulletin leaves consulates and applicants without a starting point for the new year’s allocations.

Three restrictions already in force

The bulletin’s absence follows a stack of policy changes rather than a single cause. Proclamation 10998 expanded an existing visa suspension from 19 to 39 countries effective January 1, 2026, with no expiration date and reviews every 180 days. Separately, a pause on immigrant visas for nationals of 75 countries took effect January 21, 2026, justified by concerns that applicants would become a “public charge” — a rationale immigration attorneys say swept in entire nationalities rather than individual cases. Then, on August 25, 2026, the State Department froze immigrant visa interviews worldwide so consular officers could be retrained on the new public charge screening, and no restart date has been announced since.

A federal judge draws a line

The 75-country pause did not survive court scrutiny. In CLINIC et al. v. Rubio et al., a federal court ruled on August 21, 2026 that public charge eligibility has to be assessed case by case, not through blanket nationality-based rules, according to Immigration Analytics’ review of the case. The State Department confirmed the pause was “no longer in effect,” a status the Immigrant Legal Resource Center also documents, though the government has since appealed the ruling. Immigration Analytics reports the case has identified more than 43,000 affected applications that may need to be reprocessed under individualized review.

The underlying public charge policy has itself been in motion all year. The 2022 public charge rule was slated for rescission as of July 20, 2026, and USCIS published replacement guidance on August 18 that took effect a month later, on September 18. The new guidance widens the range of public benefits officers can weigh — including Medicaid, food assistance and housing aid — and can now count benefits used by an applicant’s family members, not just the applicant. Applications filed before September 18 remain governed by the more lenient 2022 standard, creating two different rulebooks running in parallel depending on filing date.

Why the numbers themselves are now at risk

A missing bulletin, on top of a paused pause and a worldwide interview freeze, creates a practical problem beyond paperwork: unused visa numbers. Family-sponsored and diversity-visa categories depend almost entirely on consular interviews abroad, so a freeze with no restart date risks numbers going unclaimed before the fiscal year closes them out. Employment-based applicants processing domestically through adjustment of status are comparatively insulated, and could even benefit if unclaimed family-based numbers are reallocated once a bulletin finally appears.

What happens next

Three things determine how this resolves: whether the interview freeze gets a restart date, how the government’s appeal of CLINIC v. Rubio proceeds, and how State handles the more than 43,000 cases caught in the reprocessing queue. Applicants filing now should expect heavier scrutiny of affidavits of support and family benefit histories under the September 18 guidance, regardless of how the bulletin dispute resolves. Until a bulletin appears, consulates and applicants are effectively working without an official start date for fiscal year 2027’s visa allocations.

More visa and immigration coverage

Related reading: the UK’s HC 584 immigration rule changes, Brazil’s new electronic visa system, and Australia’s working holiday visa cuts.

October visa bulletin questions answered

Why hasn’t the October 2026 visa bulletin been published?

The State Department has not given an official reason, though the delay coincides with ongoing litigation over the 75-country public charge pause and a worldwide freeze on immigrant visa interviews that began August 25, 2026.

Is the 75-country public charge pause still in effect?

No. A federal court struck it down on August 21, 2026 in CLINIC v. Rubio, and the State Department confirmed it is no longer active, though the ruling is under appeal.

Does the new public charge guidance apply to everyone?

No. It applies only to adjustment-of-status applications filed on or after September 18, 2026. Earlier filings remain governed by the 2022 rule.

What happens to visa numbers that go unused because of the interview freeze?

Family-sponsored and diversity-visa numbers depend on consular interviews abroad, so a prolonged freeze risks those numbers going unclaimed for the fiscal year, though no official accounting has been published yet.

Who is affected by the reprocessing of paused cases?

Immigration Analytics reports more than 43,000 cases connected to the struck-down 75-country pause may require individualized reprocessing rather than blanket denial.

Sources