Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
U.S. Department of Education Reports $1B in Blocked Student-Aid Fraud After Mandatory Identity Verification Push
The U.S. Department of Education says it has prevented more than one billion dollars in attempted federal student-aid fraud in 2025 after introducing mandatory identity verification for certain first-time FAFSA applicants. The process requires flagged applicants to present unexpired government ID in person or via live video, with institutions retaining documentation as part of fraud-control workflows. The shift follows earlier detection of nearly 150,000 suspect identities and reflects a national move toward higher-assurance, front-end proofing as automated fraud increases. The department has also expanded its fraud-operations posture, adding dedicated detection teams and publishing new consumer guidance.
Swissbit Adds HID Seos Support to iShield Key 2, Targets Unified Physical Access and Passkey Deployments
Swissbit has added HID Seos support to the iShield Key 2, positioning the token as a combined physical-access credential and FIDO2/WebAuthn authenticator for HID-centric enterprises. The company pitches Seos integration as a way to consolidate badge and authentication stacks that currently operate separately across door access, workstation login, and adjacent workflows like secure printing. Two variants will be available: a Pro model supporting FIDO2 plus PIV, HOTP and TOTP, and a FIDO2-focused version; both offer up to 300 passkeys and USB-A/USB-C options. The move is framed as tightening identity enforcement across environments that still rely on fragmented credentials.
Fortinet SAML Authentication Bypass Vulnerabilities Require Coordinated Patching Across Multiple Products
Two Fortinet vulnerabilities, CVE-2025-59718 and CVE-2025-59719, have been flagged as authentication-bypass flaws affecting SAML-based single sign-on for administrative access. The issues impact deployments where FortiCloud SSO is enabled, creating a path for crafted SAML data to bypass controls and potentially grant privileged access. Affected versions span FortiOS, FortiProxy, FortiSwitchManager and FortiWeb, requiring coordinated patching across network-edge and management systems. Advisories recommend restricting administrative interfaces to trusted networks and, where possible, disabling FortiCloud SSO until updates are applied. Post-patch, teams are urged to review authentication logs for anomalous SAML activity.
Cyphlens Raises $3.8M Seed to Commercialize “Visual Encryption” for Sensitive On-Screen Data
Cyphlens has raised 3.8 million dollars to advance what it calls “visual encryption,” a technique that transforms sensitive on-screen information into encrypted visual ciphers readable only through a secure decoding lens. The company positions the approach as a last-mile control for environments where data must be displayed to humans yet remains vulnerable to insider risk, AI-driven exposure, screen sharing, or compromised endpoints. Backers include Salesforce Ventures and Motivate Ventures, and the firm highlights ease of deployment as a key differentiator. The model is presented as a complement to IAM rather than a replacement, aimed at workflows such as call centers, privileged dashboards, and regulated review processes.
Mitek Posts Record FY2025 Revenue, Guides FY2026 Fraud and Identity Solutions Growth at 15 Percent
Mitek reported fiscal 2025 revenue of 179.7 million dollars, with SaaS revenue growing 21 percent to 77 million dollars and adjusted EBITDA rising to 53.9 million dollars. The company continues to shift toward recurring revenue as software license and hardware categories decline. For FY2026, Mitek is forecasting total revenue of 185 to 195 million dollars and projecting 15 percent growth for its Fraud and Identity solutions line, which it expects to reach 101 to 105 million dollars. The segmentation illustrates market momentum for fraud-reduction and identity-decisioning tools even as buyers consolidate vendors.
UIDAI Publishes Fingerprint SDK Benchmark Results Using Long-Term Child Growth Dataset
UIDAI has released results from its 2025 fingerprint-SDK benchmarking challenge, notable for evaluating one-to-one verification using child fingerprints collected over five- to ten-year intervals. Child prints pose known challenges due to smaller ridge detail and significant developmental changes, making the dataset a rare public benchmark for long-term matching performance in national-ID contexts. Neurotechnology placed first and Innovatrics second among finalists selected from more than 2,000 applications. The findings underscore how algorithm choice intersects with lifecycle policy when authentication of minors is required, and UIDAI plans similar face and iris benchmarking efforts.
—
By the ID Tech Editorial Team