Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Google Softens Android Developer Verification Rules After Backlash
Google has revised its Android developer verification program after widespread criticism from privacy and open-source advocates who warned the initial rules would end meaningful sideloading. While identity verification for developers will continue, Google will introduce additional account types and an “advanced installation flow” for experienced users to install apps from unverified developers. The company is also launching a student and hobbyist account category that does not require full verification but limits device installations. The phased rollout begins in 2026, with global enforcement expected in 2027. The changes aim to balance accountability with user choice, preserving sideloading while tightening identity checks across Android’s developer ecosystem.
ASUS Patches Critical Authentication Bypass In Popular DSL Routers
ASUS has released urgent firmware updates for multiple DSL router models—DSL N16, DSL AC750, and DSL AC51—to fix a critical authentication bypass vulnerability (CVE-2025-59367) with a CVSS v4.0 score of 9.3. The flaw allows remote attackers to take over affected routers without credentials when the management interface is exposed online. Researchers warn that tens of thousands of vulnerable devices are potentially reachable on the public internet. ASUS urges immediate patching and recommends disabling remote access until updates are applied. The incident highlights persistent risks from consumer-grade routers used in small offices and home networks that lack centralized patching and security management.
Oz Forensics Completes SOC 2 Type 2 Examination For Biometric Services
Oz Forensics has completed its first SOC 2 Type 2 examination, validating its controls for security, availability, and confidentiality under AICPA Trust Services Criteria. The certification applies to the Oz Liveness and Oz Face Matching products, which defend against deepfakes and injection attacks. Independent testing confirmed compliance with ISO 30107-3 at Levels 1 and 2 and 100 percent coverage against presentation and injection attacks in CEN TS 18099 evaluations. The SOC 2 attestation provides customers in finance, telecom, and government with standardized assurance that Oz Forensics meets enterprise-grade data protection and operational security benchmarks for biometric verification services.
Incode Technologies Achieves FedRAMP Ready Status, Advancing Trusted Identity Verification for U.S. Federal Agencies
Incode Technologies has achieved FedRAMP Ready status for its biometric identity verification platform, clearing a major hurdle toward full authorization to serve U.S. federal agencies. The designation confirms completion of a readiness review by an accredited assessor and alignment with FedRAMP’s security and privacy framework. Incode’s AI-powered platform integrates deepfake detection and passive liveness verification, supporting over 4.1 billion identity checks in 2024. The company holds additional certifications, including SOC 2 Type II, ISO/IEC 27001, and Kantara IAL2. FedRAMP Ready status allows Incode to engage with agencies on citizen services, fraud prevention, and digital onboarding programs.
Akira Ransomware Now Among FBI’s Top Five Threats As CISA Updates Joint Advisory
The FBI has ranked the Akira ransomware operation among its top five active threats, according to an updated advisory from CISA and allied agencies. Akira has generated over 244 million dollars in proceeds and continues to target mid-sized organizations in manufacturing, IT, education, and healthcare. The advisory outlines Akira’s tactics—exploiting exposed VPNs, weak credentials, and conducting data theft before encryption—and urges organizations to harden remote access, enforce MFA, and maintain offline backups. Officials warn that Akira’s scale and resilience make it one of the most consequential ransomware variants under investigation.
GripID Unveils Next-Gen Multimodal Biometric Scanners at Milipol Paris
GripID has launched a new generation of multimodal biometric scanners for law enforcement and border control, debuting ahead of Milipol Paris 2025. The flagship GripID MANNIX integrates full-palm (FAP60), iris, and facial capture in a rugged portable workstation, while new FAP30 and FAP45 models add smartcard and dual-finger authentication features. Built in partnership with Integrated Biometrics, the devices enable field-ready identity verification with FBI-certified image quality. GripID’s latest lineup reflects growing demand for compact, multimodal biometric systems that consolidate multiple capture capabilities in mobile platforms.
India’s UIDAI Partners With ‘Nudge Unit’ to Boost Child Aadhaar Updates
India’s UIDAI has partnered with Behavioural Insights Ltd (BIT), the “Nudge Unit,” to improve compliance with mandatory biometric updates for children aged 5 and 15 under the Aadhaar system. The collaboration applies behavioral science to encourage timely updates through simplified communication and reminders. UIDAI recently waived fees for updates in the 7-to-15 age group for one year, benefiting an estimated 60 million children. The initiative aims to ensure accurate biometric data across the world’s largest identity system while improving access to linked public services.
Trulioo Launches Credit Decisioning to Augment KYB with Risk Intelligence
Trulioo has introduced Credit Decisioning, integrating credit and financial intelligence into its global KYB workflow. The feature combines identity, fraud, and credit data to provide real-time risk scoring and automated decisioning for business onboarding. The launch follows a 102 percent year-over-year increase in KYB transactions on Trulioo’s platform. Coinciding with TransUnion’s new Credit Washing Solution, the announcement highlights an industry trend toward combining credit analytics with identity verification to counter financial fraud. Trulioo’s unified platform spans 195 countries, offering enterprises streamlined business verification and risk management.
Germany Unveils Proof-of-Concept for Quantum-Secure National ID Card
Germany has unveiled a proof-of-concept for a quantum-secure national ID card developed by Bundesdruckerei Gruppe, Giesecke+Devrient, and the Federal Office for Information Security. The prototype integrates post-quantum cryptography into the ID card chip using Infineon hardware and a hybrid scheme that combines classical and PQC algorithms. With ID cards valid for ten years, Germany is proactively safeguarding against “Q-Day” when quantum computers may break current encryption. The project positions Germany among global leaders in PQC adoption, aligning with EU goals to deploy quantum-resistant standards by 2030.
–
By the ID Tech Editorial Team