The Verification Step Is the New ATO Battleground in 2026
Summary: Passkeys have reached mainstream adoption, with FIDO Alliance's 2026 research finding 75% of global consumers have enabled one on at least one account and 68% of companies using, testing, or introducing them for employee sign-ins, pushing attackers toward account recovery, device re-enrollment, step-up verification, and magic-link flows. Veriff's Identity Fraud Report 2026 found 4.18% of verification attempts were fraudulent, digitally presented media was 300% more likely to be AI-generated or altered than in prior periods, and impersonation accounts for more than 85% of fraud attacks the company observed.
Why it matters: If 4.18% of verification attempts are already fraudulent and impersonation is more than 85% of observed attacks, the recovery and step-up flows around your hardened login are now the cheapest way in - and biometric liveness detection, which the source says cuts ATO by 80-90% when properly implemented, is the control most organizations have not yet placed there.
Read the original at The Hacker News ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026