Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Credolab and ZOLOZ Partner to Enhance Digital Identity Verification and Fraud Prevention
Credolab and ZOLOZ have announced a partnership combining ZOLOZ’s AI-powered identity verification with Credolab’s behavioral metadata analytics to strengthen fraud prevention for financial institutions. The collaboration aims to improve early risk detection and onboarding speed through privacy-preserving behavioral intelligence. Credolab’s platform has processed over 650 million datasets globally, while ZOLOZ’s verification systems are used across major financial institutions in Asia. The joint solution, showcased at the Singapore Fintech Festival, is set for multi-market expansion in 2026 as demand grows for behavioral biometrics and AI-driven fraud detection.
X Security Key Switchover Locks Some Users Out
X (formerly Twitter) has faced user backlash after a back-end change to its multi-factor authentication system locked some users out of their accounts. The platform reportedly migrated its handling of FIDO hardware security keys without sufficient notice or recovery options, leaving users unable to log in or remove the affected keys. The issue highlights the risks of poorly communicated authentication infrastructure changes and the need for robust fallback and recovery mechanisms when modifying MFA systems, especially for high-value accounts protected by hardware-based credentials.
ID Dataweb Integrates With Microsoft Entra Verified ID
ID Dataweb has integrated with Microsoft Entra Verified ID to enhance digital identity assurance for enterprises. The collaboration allows Entra users to incorporate ID Dataweb’s risk and attribute checks—such as device reputation, ID document verification, and third-party risk data—into Entra’s verifiable credential workflows. The integration bridges decentralized identity with traditional KYC and anti-fraud frameworks, supporting regulatory compliance while enabling passwordless and conditional-access authentication policies.
Operation “Endgame” Disrupts Rhadamanthys, VenomRAT and Elysium Infrastructure
Authorities in Europe and North America have dismantled infrastructure supporting several major cybercrime tools—including the Rhadamanthys infostealer, VenomRAT remote access trojan, and Elysium botnet—under Operation Endgame. Europol reported over 1,000 servers taken offline and arrests in multiple countries, including Greece. The operation underscores how reused malware platforms amplify credential theft and session hijacking risks, emphasizing the ongoing need for rapid credential rotation and strong authentication even after takedowns.
Ransomware Group Claims Breach of LatamLex Law Firm
Ransomware group INCRansom claims to have breached LatamLex, a Latin American law firm, threatening to leak internal and client data unless a ransom is paid. While the firm has not confirmed the breach, the attackers claim to have exfiltrated privileged communications and personal data. The incident highlights the vulnerability of legal and professional services firms to double-extortion ransomware and the importance of zero-trust access, segmentation, and client communication protocols in breach response planning.
Metalenz and UMC Bring Polar ID Face Authentication to Mass Production
Metalenz and UMC have begun mass production of Polar ID, a polarization-based facial authentication technology that integrates Metalenz’s metasurface optics directly onto image sensors. Built using UMC’s 40-nanometer process and wafer-on-wafer bonding, the system enables payment-grade biometric security in compact devices. The technology offers material and contour analysis from a single image, lowering cost and complexity versus traditional 3D systems. Polar ID targets smartphones, IoT, and consumer electronics markets.
Google Sues Chinese Operators of ‘Lighthouse’ Phishing-as-a-Service Platform
Google has filed a lawsuit in U.S. federal court against the alleged China-based operators of the Lighthouse phishing-as-a-service platform, which sold phishing kits to criminals worldwide. Lighthouse reportedly enabled large-scale SMS phishing campaigns impersonating brands such as USPS and E-ZPass, affecting over one million users in 120 countries. The lawsuit seeks to dismantle the platform’s infrastructure, marking Google’s latest effort to disrupt cybercrime networks fueling identity theft and credential fraud.
Apple Launches ‘Digital ID’ in Wallet Using U.S. Passports, TSA Begins Acceptance
Apple has launched a new Digital ID feature allowing users to create a verifiable identity credential in Apple Wallet using their U.S. passport. The TSA has begun accepting the Digital ID at 250 U.S. airports for domestic travel. Built on a privacy-first framework, the system uses Face ID or Touch ID authentication and selective disclosure to share only requested data. The passport-based rollout expands Apple’s digital identity program beyond state-issued driver’s licenses, signaling growing standardization in digital identity credentials.
–
By the ID Tech Editorial Team