Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
CLEAR and TSA Extend Biometric PreCheck Enrolment and Touchless ID at U.S. Airports
CLEAR has expanded its role in U.S. airport security by becoming an authorized enrolment provider for TSA PreCheck, operating biometric enrolment pods at airports including San Francisco International. The move places PreCheck registration alongside CLEAR’s own biometric lanes, tightening integration between commercial identity services and TSA’s risk-based screening. At the same time, TSA is widening deployment of Credential Authentication Technology units that combine ID scanning with facial matching, reducing the need for boarding passes and shifting checkpoints toward camera-based identity verification. Together, the changes increase the amount of biometric infrastructure surrounding U.S. air travel and raise ongoing questions about data management, interoperability, and traveler choice.
Indonesia Deploys “Seamless Corridor” Walk-Through Biometric Border Controls
Indonesia has introduced walk-through biometric “Seamless Corridors” at Jakarta and Bali airports, enabling travelers to clear border controls while walking through lanes equipped with facial recognition and e-passport readers. The system checks identity and watchlist data automatically without requiring passengers to stop at a staffed booth, aiming to increase throughput and reduce congestion. Initial use focuses on Indonesian citizens and pre-vetted travelers, with further expansion planned. The deployment builds on earlier biometric processing for large pilgrim movements and aligns with international efforts such as IATA’s One ID. Authorities emphasize efficiency gains but note that governance around false matches, data retention, and vendor access will shape public perception.
Ukraine and Mastercard Expand Cooperation on Digital Infrastructure and Identity Rails
Ukraine’s Ministry of Digital Transformation and Mastercard have signed a five-year agreement to deepen cooperation on digital identity, GovTech, and secure payments, extending prior joint work supporting the Diia ecosystem. The partnership focuses on strengthening digital identification, secure disbursements, fintech support, and SME digitization as part of reconstruction planning. Diia already functions as Ukraine’s national digital identity wallet, and the collaboration aligns with the country’s efforts to meet EU eIDAS 2 requirements. By integrating identity, payments, and cybersecurity, the arrangement positions digital ID as a central component of national service delivery and long-term economic recovery.
FBI Explores AI-Enabled Drones for Real-Time Object and Identity Recognition
The FBI is examining new small drones equipped with onboard AI capable of real-time detection and tracking of people, vehicles, license plates, and threat objects. An unclassified RFI indicates interest in modular computer-vision models updated over the air, secure data links, quiet operation, and resilience in GPS-degraded environments. Some drones may be tethered for persistent observation, with potential integration of biometric tools including facial matching against watchlists. The initiative reflects growing demand for edge-processing sensor platforms but is likely to intensify debate about domestic use of aerial systems for automated surveillance and identity recognition.
Oracle Identity Manager Zero-Day Shows How Fragile the Identity Tier Can Be
A critical pre-authentication flaw in Oracle Identity Manager, CVE-2025-61757, is being actively exploited, giving attackers a path to remote code execution on identity governance systems widely used in large enterprises. The issue stems from how certain REST API requests bypass Oracle’s SecurityFilter, allowing unauthenticated invocation of a Groovy script endpoint. Despite an October patch, many deployments remain unpatched due to integration concerns. Because Oracle Identity Manager provisions access to downstream applications, compromise of this layer can undermine broader enterprise controls. Agencies and security teams are urged to patch immediately and hunt for signs of exploitation across identity and dependent systems.
FBI Issues Second RFI for Biometric Matching Algorithms to Upgrade NGI
The FBI has issued a new RFI seeking next-generation biometric algorithms for the Next Generation Identification system, covering tenprint, latent, face, iris, and tattoo matching. Vendors are expected to participate in NIST evaluations and provide relevant performance data for large-scale identification workloads. By including tattoo recognition alongside core modalities, the Bureau signals its interest in expanding NGI’s multimodal capabilities. The RFI is part of ongoing market research to shape future procurements and highlights the continued centrality of NIST testing as a benchmark for federal biometric modernization.
SitusAMC Breach Highlights Third-Party Identity Risk for Major U.S. Banks
A breach at mortgage technology provider SitusAMC has exposed sensitive information tied to major banking clients including JPMorgan Chase, Citigroup, and Morgan Stanley. The intrusion involved unauthorized access to internal systems and the exfiltration of corporate records, raising concerns that customer mortgage data may also have been compromised. Although operations remain online and law enforcement is involved, the incident underscores how third-party vendors handling identity-rich financial data present significant downstream risk even when bank environments are not directly breached. The event reinforces the need for strict vendor oversight, minimized data sharing, and strong authentication and monitoring around supplier access.
–
By the ID Tech Editorial Team