NIST Digital Identity Guidelines Evolve With Threat Landscape

NIST published updated Digital Identity Guidelines—the first revision since 2017—introducing measures including phishing-resistant authentication (FIDO/passkeys and syncable authenticators), enhanced identity proofing and anti-fraud controls to detect deepfakes and synthetic identities, requirements to document AI/ML use, new continuous evaluation metrics, and federation changes like subscriber-controlled wallets; the update is framed as a necessary modernization with manageable implementation challenges for most organizations rather than a description of a cyber incident.