PodChats for FutureCISO: From secure login to secure presence in video for CISOs

Even as Singapore strengthens its national digital identity with device-bound passkeys to secure the login, the live video session remains a gaping exposure layer. Once authenticated, high-value activities—remote approvals, KYC reviews, and workforce verification—are conducted over mainstream video platforms that rely on trust and manual checks. This is dangerously insufficient as deepfake video injection attacks become more capable and affordable. The question for CISOs is no longer just “who logs in,” but “who is actually present in the frame.”In this PodChats for FutureCISO, Dominic Forrest, chief technology officer at iProov, highlights these trends and solutions to mitigate against the inherent security risks that come with live video sessions.1.       How would you define the current state of identity and session security in Southeast Asia and Hong Kong, given the rapid digital adoption and escalating AI-driven threats?2.       Device-bound passkeys effectively secure the login session against phishing. However, once a user is “inside” a live video session, what new exposures emerge that passkeys simply cannot address?3.       With remote workforce verification and high-value approvals now routine over video, what gaps remain in current manual verification processes? Why are these gaps particularly concerning for CISOs?4.       How do injection attacks work, and why are they so difficult to detect with traditional verification methods?5.       How are attackers evolving their techniques, and what makes these attacks especially dangerous for banks and fintechs?6.       Traditional liveness detection—such as blink checks and smile prompts—is failing against modern AI-generated deepfakes. What newer technologies are emerging to verify genuine human presence in real time during live video interactions?7.       How can continuous presence assurance at the video layer complement device-bound passkeys and national digital identity schemes, help CISOs build a more layered and resilient defence?8.       Finally, how are regulators in the region responding to these threats, and what should CISOs be prioritizing on their roadmaps to stay ahead?