Brussels launched an age verification app designed to comply with EU digital regulations, but security researchers bypassed it in just two minutes, exposing fundamental flaws in the implementation.
The app, intended to verify user age for restricted content access, fell to basic security testing almost immediately. Hackers demonstrated that the verification mechanism lacked proper cryptographic protections and relied on easily manipulated client-side validation.
The vulnerability highlights a recurring problem in government tech projects: rushing deployment without adequate security review. The app was meant to address EU requirements for age verification across digital services, but the quick compromise suggests insufficient testing before launch.
Security researchers on Hacker News noted that the flaw was elementary—the kind of vulnerability that should be caught during basic code review. The incident raises questions about the vetting process for applications handling sensitive user data.
Brussels officials have not yet announced a timeline for fixes. The failure underscores broader challenges in implementing age verification systems that balance privacy, security, and usability across EU member states.
U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.
Tailscale disclosed a critical vulnerability in its SSH implementation that allowed attackers to gain root access through insecure argument handling. The flaw has been patched in recent versions.
A new study found that social media platforms referred over 5.7 million visits to nonconsensual deepfake pornography sites between December 2025 and March 2026, with YouTube and X accounting for the majority of traffic.