← Back to BrewedIntel
vulnerabilitymediumAuthentication BypassBiometric Spoofing

Mar 13, 2026 • ESET WeLiveSecurity

Face value: What it takes to fool facial recognition

ESET security researcher Jake Moore is scheduled to present findings at RSAC 2026 regarding vulnerabilities in widely-used facial recognition systems. The...

Source
ESET WeLiveSecurity
Category
vulnerability
Severity
medium

Executive Summary

ESET security researcher Jake Moore is scheduled to present findings at RSAC 2026 regarding vulnerabilities in widely-used facial recognition systems. The research demonstrates how consumer-grade technology, including smart glasses, deepfakes, and face swap applications, can be utilized to bypass biometric authentication controls. This highlights a significant risk to organizations relying solely on facial recognition for identity verification and access management. The ability to spoof biometric data suggests that current liveness detection mechanisms may be insufficient against evolving adversarial techniques. While no specific threat actor campaign is identified, the availability of these tools lowers the barrier for unauthorized access. Security teams should evaluate multi-factor authentication strategies and enhance liveness detection protocols to mitigate the risk of biometric spoofing. This research underscores the urgent need for robust identity proofing standards.

Summary

ESET’s Jake Moore used smart glasses, deepfakes and face swaps to ‘hack’ widely-used facial recognition systems – and he'll demo it all at RSAC 2026

Published Analysis

ESET security researcher Jake Moore is scheduled to present findings at RSAC 2026 regarding vulnerabilities in widely-used facial recognition systems. The research demonstrates how consumer-grade technology, including smart glasses, deepfakes, and face swap applications, can be utilized to bypass biometric authentication controls. This highlights a significant risk to organizations relying solely on facial recognition for identity verification and access management. The ability to spoof biometric data suggests that current liveness detection mechanisms may be insufficient against evolving adversarial techniques. While no specific threat actor campaign is identified, the availability of these tools lowers the barrier for unauthorized access. Security teams should evaluate multi-factor authentication strategies and enhance liveness detection protocols to mitigate the risk of biometric spoofing. This research underscores the urgent need for robust identity proofing standards. ESET’s Jake Moore used smart glasses, deepfakes and face swaps to ‘hack’ widely-used facial recognition systems – and he'll demo it all at RSAC 2026 ESET’s Jake Moore used smart glasses, deepfakes and face swaps to ‘hack’ widely-used facial recognition systems – and he'll demo it all at RSAC 2026