Cybersecurity experts have identified significant privacy and security vulnerabilities in the EU's age verification application, contradicting earlier claims that it was ready for deployment. EU officials have since downgraded the status to a "demo."
The EU's age verification app, designed to help enforce digital regulations across the bloc, contains flaws that could expose user data and compromise security protocols, according to cybersecurity researchers.
Brussels had previously announced the tool was "technically ready," but officials reversed course after expert scrutiny, now describing it as a demonstration rather than a finalized product.
The security gaps raise questions about the app's timeline for full implementation and the vetting process that preceded its rollout. Age verification systems are critical infrastructure under the EU's Digital Services Act and other content regulation frameworks, making their security paramount.
The disclosure highlights ongoing tensions between regulatory ambitions and technical reality in the bloc's digital governance efforts. Officials have not yet announced when a hardened version addressing the identified vulnerabilities will be available.
A detailed analysis examines how the internet has shifted toward predatory practices, drawing significant engagement from tech community members on Hacker News with 227 points and 120 comments.
A critical vulnerability in the popular GiveWP WordPress donation plugin allows unauthenticated attackers to execute arbitrary commands on hosting servers. The maximum-severity flaw requires immediate patching.
Over 8,300 internet-facing Gitea instances remain unpatched against a critical vulnerability being actively exploited in remote code execution attacks, according to Shadowserver.
A sanctioned Iranian cybersecurity training company has announced its largest recruitment class yet, intensifying concerns about continued cyberattacks targeting U.S. entities.