The short version: AI-generated deepfakes undermine the security of purely biometric authentication, making multi-layered factor combinations necessary.
AI-powered deepfakes erode the reliability of biometric identity verification. CISOs must transition their security architecture to multi-factor authentication to mitigate spoofing attacks.
Biometric methods such as facial recognition and fingerprint analysis are considered secure authentication methods. However, advanced AI models enable attackers to produce credible fakes of faces, voices, and other biometric characteristics – so-called deepfakes. This makes it possible to systematically circumvent biometric systems when these are deployed as isolated security layers.
For CISOs, this means a fundamental reassessment of identity security. Relying solely on biometric factors leads to a trust deficit, since the technological basis of these methods can be attacked. An elevated spoofing risk arises particularly in remote scenarios where digital biometry is used for verification.
Organizations should establish multi-layered authentication approaches that combine biometric methods with other factors – such as hardware tokens, time-bound one-time passwords, or contextual information like IP addresses and device fingerprints. This significantly reduces the likelihood of successful spoofing attacks. At the same time, anti-spoofing technologies are gaining importance, intended to detect deepfakes or live attacks in real time.
Source: www.computerweekly.com · Published July 15, 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.