GSA seeks to extend Login.gov with device fingerprinting to combat fraud, issuing an RFI for real-time risk signals and bot/AI-detection while regulatory scrutiny surrounding SSO governance adds urgency.
Chrome adopts device-bound session credentials to defend against account takeovers.
Cifas's Fraudscape 2026 six-month data show identity fraud accounts for 59% of UK fraud-risk cases with over 220,000 total cases, and multiple fraud vectors (muling, SIM swaps, account takeovers) rising sharply in H1 2026.
Instagram’s account-recovery flow allegedly allowed takeover via region spoofing and AI-based verification, bypassing 2FA; Meta patched the flaw after weeks, highlighting security/regulatory risk while high-profile accounts and black-market activity were affected.
Subscribe for real-time topic updates and unlimited access to our intelligence platform.