EU's New Age-Verification App Breached in Minutes, Exposing Security Flaws

The European Union's new Digital Identity Wallet app, designed for age verification and secure digital credentials, has been found to be vulnerable to a hack that takes just two minutes to execute. Security researchers demonstrated how a flaw in the app's data packet manipulation allows users to falsely present as being of legal age to integrated online services. This critical vulnerability threatens the EU's ambitious Digital Decade strategy, potentially eroding trust in the system and hindering its adoption. The incident occurs amidst a backdrop of widespread data breaches affecting gym chains and hotel giants, and a DDoS attack on Bluesky, highlighting a growing global cybersecurity crisis. While the EU is expected to issue an emergency update, rebuilding trust will be crucial. This breach underscores the ongoing challenges in securing digital infrastructure and the necessity for continuous vigilance and robust security-by-design principles in the development of digital identity solutions.