The Trump administration’s Signal scandal shows humans will always be the weakest link in cybersecurity

Described as the worst U.S. security breach in a generation, the leak is an unprecedented failure for the White House. For several days, a journalist from The Atlantic had unrestricted access to a private Signal group chat involving the highest levels of government—discussing, in real time, an imminent U.S. military strike on Houthi rebels in Yemen. And no one in the administration had a clue.

Investigations are already underway to determine how such a blunder could happen. But the core issue requires no deep forensic analysis: the failure was human.

According to reports, The Atlantic’s Jeffrey Goldberg was mistakenly added to a Signal chat that included the president’s national security adviser and the secretary of defense—apparently because National Security Adviser Michael Waltz misidentified Goldberg (whose display name was simply “J.G.”) as a government official.

“It’s a pretty egregious failing,” says Robert Pritchard, a former deputy head of the U.K.’s Cyber Security Operations Center. While apps like Signal or WhatsApp offer strong encryption and are widely used for coordination, Pritchard notes that such tools are not appropriate for sensitive or classified communication—not because the apps themselves are insecure, but because the devices and, crucially, the users are.

Or, to put it more bluntly: the problem is the people using them.

“Signal is no substitute for good operational security,” says Alan Woodward, a cybersecurity professor at the University of Surrey. “Invite someone to your chat group, and of course they can read everything.”

The potential fallout is enormous. “It may sound extreme, but this is the sort of failure that could get people killed,” warns Woodward. “It’s fortunate the journalist chose not to share all the information and waited until after the relevant events unfolded.”

Beyond the immediate security risks, the episode reveals a deeper institutional problem: the lack of transparency and proper recordkeeping when government business is conducted on third-party messaging apps with disappearing messages. Even more troubling to some experts is the likelihood of it happening again. “Human mistakes happen—and they will continue to happen,” says Lukasz Olejnik, an independent cybersecurity consultant and visiting senior research fellow at King’s College London. “And policies will be violated.”

What comes next is unclear. Defense Secretary Pete Hegseth has publicly claimed no war or attack plans were shared in the chat—something The Atlantic‘s Goldberg disputes, calling the statement “a lie.”

“I would imagine there is a big clean-up operation ongoing right now,” says Pritchard, the former Cyber Security Operations Center deputy. “All those devices need to be wiped, including any secondary devices that have the same Signal account accessible on them, and there need to be investigations into what else has gone on on Signal.”

But cleanup may be to little, too late. After all, the leaked chats are a goldmine for adversaries. “Among the damage is a leak of fragments of information potentially allowing people to compose a psychological profile of U.S. leaders,” says King’s College London’s Olejnik—from their emoji use to the vice president’s candid feelings about Donald Trump.

In the end, this wasn’t a failure of technology—it was a failure of judgment. And it may take more than a wiped device to repair the damage.

https://www.fastcompany.com/91305043/trump-administration-signal-scandal-humans-weakest-link-cybersecurity?partner=rss&utm_source=rss&utm_medium=feed&utm_campaign=rss+fastcompany&utm_content=rss

Établi 1mo | 25 mars 2025, 17:40:11


Connectez-vous pour ajouter un commentaire

Autres messages de ce groupe

Is Apple falling behind on hardware?

If you’ve followed Apple for any length of time, you’ve no doubt come across the notion that the company doesn’t rush into adopting cutting-

27 avr. 2025, 11:30:07 | Fast company - tech
This free audio enhancer will totally transform your voice memos

Every now and then, you run into a tool that truly wows you.

It’s rare—especially nowadays, when everyone and their cousin is coming out with overhyped AI-centric codswallop tha

26 avr. 2025, 12:20:10 | Fast company - tech
Elon Musk’s Trump gamble is costing him bigly

Tesla released its quarterly earnings report on Tuesday, its first since the company’s chief executive, Elon Musk, took up residence in the Trump White House and immediately began trying to fire f

26 avr. 2025, 12:20:09 | Fast company - tech
Say goodbye to cheap versions of Ozempic and Wegovy

There’s never a dull day in the world of weight-loss medication. This week brought new restrictions on compounded GLP-1 medication, the cheaper, copycat versions of brand-name drugs that tel

26 avr. 2025, 12:20:08 | Fast company - tech
Why Apple needs Tim Cook more than ever in the age of Trump

In December 2023, I wrote an article exploring Apple CEO Tim Cook’s most likely successors, because t

26 avr. 2025, 10:10:03 | Fast company - tech
Families demand action from Meta over children’s deaths linked to platform harm

“Meta profits, kids pay the price,” was the message delivered by dozens of grieving families at the doors of Meta’s Manhattan office on Thursday.

Forty-five families traveled from

25 avr. 2025, 20:10:07 | Fast company - tech