Data Card
RSAC Talk Demonstrated Working Exploits Against Live Facial Recognition Systems
At RSA Conference 2026, security researcher Jake Moore demonstrated three working exploits against live facial recognition systems, including opening a bank account with a synthetic face and evading a law enforcement watchlist using real-time face-swap software.
About
Key Facts
- Moore used modified smart glasses to identify people in public spaces in real time by matching faces against public data
- He opened a legitimate bank account through eKYC facial recognition using AI-generated imagery
- He bypassed a London train station facial recognition watchlist using live face-swap software overlaying a celebrity face
Card Text
Security researcher Jake Moore, a global cybersecurity advisor at ESET and former UK police digital forensics specialist, presented three live demonstrations at RSA Conference 2026 that exposed vulnerabilities in deployed facial recognition systems. He used modified commercial smart glasses to identify individuals in real time, successfully opened a bank account by passing eKYC facial verification with synthetic imagery, and evaded a police watchlist at a London train station using real-time face-swap software. The findings underscore emerging threats at the intersection of wearable face harvesting and AI-generated imagery capable of defeating presentation attack detection systems.