EU AGE-VERIFICATION APP CRACKED IN TWO MINUTES

SECURITY DESK■ 1 MIN READ

SAT, APR 18, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Security researchers have demonstrated a critical vulnerability in the European Union's new age-verification system, exploiting it in under two minutes. The flaw raises serious questions about the app's readiness for deployment.

The age-verification application, designed to comply with EU digital regulations, contains a fundamental security weakness that allows users to bypass age checks without authentication. Researchers bypassed the verification process through a simple two-minute exploit, bypassing core identity verification mechanisms. The vulnerability exposes the app's inadequate security architecture ahead of its wider rollout across EU member states. Officials have not yet confirmed whether the flaw existed in testing phases or emerged post-deployment. In brief: Gym chain Life Time suffered a data breach affecting member records. Hotel operator IHG experienced a separate breach compromising customer information. Bluesky faced a significant DDoS attack disrupting service. Immigration enforcement agency ICE made controversial hires under unclear circumstances.

■ SOURCES

► Wired

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P650CYBER-ATTACK BREACHES THOUSANDS OF PATIENT RECORDS IN AUSTRALIA

Partnered Health, one of Australia's largest healthcare providers, has disclosed a cyber-attack affecting 21 clinics across Sydney, Melbourne, and Canberra. Personal information and medical records were compromised in the breach.

1H AGO— Security Desk

P648AI SYSTEM AUTOMATICALLY DISCOVERS ZERO-DAY VULNERABILITIES

Security firm Intruder has developed an AI-powered system that automatically identifies previously unknown software vulnerabilities by combining code analysis with large language models. The tool already discovered and exploited a WordPress plugin zero-day.

1H AGO— AI Desk

P624US CHARGES THREE RUSSIANS FOR BULLETPROOF HOSTING

U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.

6H AGO— Industry Desk

P620CISA ALERTS: SHAREPOINT FLAWS UNDER ACTIVE ATTACK

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.

6H AGO— Security Desk

◄ BACK TO NEWS

EU AGE-VERIFICATION APP CRACKED IN TWO MINUTES

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF