Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
CISA Warns of Commercial Spyware Targeting Encrypted Messaging Apps
CISA has issued a new alert warning that threat actors are delivering commercial spyware through encrypted messaging apps including WhatsApp, Signal, and Telegram. The advisory highlights malicious QR-code abuse, trojanized installers, and zero-click exploits used to compromise high-value targets, pointing to campaigns tied to Russian state-aligned actors and Android spyware delivered via WhatsApp. CISA urges high-risk users to tighten device-linking security, apply updates promptly, and avoid scanning unsolicited QR codes.
Dartmouth College Discloses Data Breach Tied to Clop’s Oracle EBS Campaign
Dartmouth College has confirmed that the Clop group exploited a zero-day in Oracle E-Business Suite (CVE-2025-61882) to steal personal data from its systems. At least 1,494 individuals had information exposed, including Social Security numbers and financial data, with the full impact likely higher. The breach is part of a broader exploitation wave affecting major organizations running Oracle EBS, underscoring the risks posed by unpatched ERP platforms.
Indonesia Moves Toward Mandatory Facial Biometrics for SIM Registration
Indonesia’s Komdigi ministry is moving ahead with a draft regulation that would require facial recognition for new mobile SIM registrations. New activations would require a mobile number, national ID, and a verified facial image, with full implementation expected in 2026. Officials say the measure aims to curb misuse of SIM cards, while observers note it will intensify debates around surveillance and data protection as the country rolls out broader digital infrastructure reforms.
Polyguard Completes SOC 2 Type 1 Examination and Extends Deepfake Defense to Microsoft 365
Polyguard has completed a SOC 2 Type 1 audit and is expanding its deepfake defense tools into Microsoft 365, including a private beta for Teams. The company says the audit strengthens its position with regulated enterprises, while the Teams integration brings real-time protection against synthetic media into collaboration environments. The move reflects growing enterprise demand for protections beyond authentication, especially against deepfake-enabled social engineering.
Trust Stamp Lines Up Warrant-Driven Capital Access With New S-3 Registration
Trust Stamp has filed a new S-3 shelf registration that could enable more than ten million dollars in capital through the exercise of warrants held by Armistice Capital. The filing registers over 2.5 million shares tied to October warrant issuances, with proceeds available only if exercised for cash. The prospectus highlights Trust Stamp’s focus on privacy-preserving biometrics, identity orchestration, and crypto-linked credentialing as it positions itself for new growth.
UK Awards £1M Public Beta Contract for Digital Verification Service Register to EY
The UK’s DSIT has awarded EY a £1 million contract to deliver the public beta of the Digital Verification Service Register. The platform will list certified digital identity providers under the UK trust framework and will be hosted on GOV.UK. DSIT cites continuity and compliance obligations in justifying a direct award to EY, which has supported earlier phases of DVS development.
India Pursues Biometric and UHF Tag-Based Weapon Management Across Defence and Rural Security
New Indian tenders show the Army and several state-level agencies pursuing biometric fingerprint and UHF-tag systems to control and track weapon access. Procurement notices reference Ministry of Home Affairs qualification requirements and include quantity-variation clauses for scalable deployments. The activity indicates growing demand for integrated biometric and RFID-based armory management across multiple government tiers.
Hopae Plans €5M European Expansion as EUDI Wallet Adoption Nears
Hopae is investing €5 million over two years to expand its European operations ahead of the rollout of the EUDI Wallet. The company plans to scale integrations across member states, pursue QTSP status, and expand its eID coverage to more than one hundred schemes. Hopae positions itself as an intermediary layer for reusable, government-backed digital identity as organizations prepare for early wallet adoption starting in 2026.
–
By the ID Tech Editorial Team