FIDO experts tackle deepfake threat and biometric certification changes

At FIDO Alliance's Authenticate 2026, experts detailed how deepfakes and injection attacks bypass biometric checks at three points in the capture flow. FIDO updated its certification requirements to version 5.0, aligning with NIST SP 800-63 with more test subjects and lower FAR and FRR thresholds.

• Deepfakes can be injected in the camera feed, the app or the link to the server
• Eye specular reflection method forces attackers to swap random shapes in real time
• FIDO 5.0 tightens tests with more subjects and lower FAR and FRR thresholds
• Deepfake detection market forecast to grow 42–99% CAGR in 2026–2028