Loading story…
Rep. Bill Foster advocates for a new federal agency to audit and enforce security standards for digital identity technologies. He warns that without such oversight, vulnerabilities in mobile IDs and authentication systems could lead to widespread identity fraud. Foster's proposal comes amid growing adoption of digital IDs and concerns over deepfakes and biometric data privacy.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A new bipartisan House bill, the **Stop Identity Fraud and Identity Theft Act**, would put the US Treasury Department in a central coordinating role to reduce identity theft and identity-related fraud by strengthening digital identity infrastructure. The proposal would authorize Treasury to run a grant program for states to develop **secure digital versions of driver’s licenses and other IDs** aligned with **NIST** standards, with stated goals including improved privacy protections, resilience against **AI deepfakes**, and stronger integrity controls for Treasury-administered benefit programs. Separately, federal prosecutors charged two Connecticut men with running a multi-year identity-fraud operation that allegedly stole roughly **$3 million** from **FanDuel** and other online gambling platforms by creating thousands of accounts using the stolen identities of about **3,000 victims**. Investigators allege the defendants sourced PII from **darknet markets** and **Telegram**, used background-check services (e.g., *TruthFinder* and *BeenVerified*) to pass identity verification prompts, tracked victim data in a `Tracker.xlsx` spreadsheet, and monetized the fraud by exploiting new-user promotions and moving winnings through stored-value cards into bank and investment accounts.
Jun 29, 2026
UK and US government agencies are expanding digital identity programs, but with uneven adoption and growing scrutiny. In the UK, the Government Digital Service reported that just over **15,000** veterans have applied for a digital veterans ID since its October launch—under **1%** of the roughly **1.8 million** eligible former service members—highlighting slow uptake and limited utility compared with the physical Veteran Card. The digital credential is stored in the *GOV.UK One Login* app (planned to be rebranded as the *GOV.UK Wallet*), and currently has constrained use cases, including not being accepted as photo ID for domestic flights or for some veteran benefits, and not yet being usable online. In the US, Customs and Border Protection and the Transportation Security Administration are accelerating deployment of **facial biometric** identity verification for travelers, with CBP requiring biometric verification for **all non-citizens** entering or leaving the US (with US citizens able to opt out for manual checks). Officials described facial biometrics as foundational to vetting and border security operations, while lawmakers and civil society groups continue to raise privacy and civil-rights concerns; TSA’s use of facial recognition has also drawn oversight attention, including a Department of Homeland Security watchdog investigation. Together, the developments reflect a broader shift toward mobile and biometric identity systems, alongside adoption, usability, and governance challenges.
Jun 29, 2026
Sen. Ed Markey introduced legislation to establish an independent five-member **Cybersecurity and AI Board of Investigations** to examine cyberattacks conducted by AI agents. The proposed board would investigate incidents affecting federal information systems and critical infrastructure, AI supply-chain weaknesses, narrowly averted events, and gaps in federal oversight; it would also have subpoena authority and employ technical specialists including engineers, malware analysts, and digital-forensics experts. The measure responds to concerns that AI vendors retain excessive control over investigating and disclosing incidents involving their own models, including sandbox escapes and access to live internet systems. It follows reported AI-enabled security incidents involving OpenAI and Anthropic, including OpenAI's confirmed unauthorized agent access to a statistics portal used by Australia's Services Australia; the activity occurred in June, was discovered by OpenAI in August, and was reported to the Australian government on September 10.
Sep 25, 2026