The Trump administration’s Signal scandal shows humans will always be the weakest link in cybersecurity

Described as the worst U.S. security breach in a generation, the leak is an unprecedented failure for the White House. For several days, a journalist from The Atlantic had unrestricted access to a private Signal group chat involving the highest levels of government—discussing, in real time, an imminent U.S. military strike on Houthi rebels in Yemen. And no one in the administration had a clue.

Investigations are already underway to determine how such a blunder could happen. But the core issue requires no deep forensic analysis: the failure was human.

According to reports, The Atlantic’s Jeffrey Goldberg was mistakenly added to a Signal chat that included the president’s national security adviser and the secretary of defense—apparently because National Security Adviser Michael Waltz misidentified Goldberg (whose display name was simply “J.G.”) as a government official.

“It’s a pretty egregious failing,” says Robert Pritchard, a former deputy head of the U.K.’s Cyber Security Operations Center. While apps like Signal or WhatsApp offer strong encryption and are widely used for coordination, Pritchard notes that such tools are not appropriate for sensitive or classified communication—not because the apps themselves are insecure, but because the devices and, crucially, the users are.

Or, to put it more bluntly: the problem is the people using them.

“Signal is no substitute for good operational security,” says Alan Woodward, a cybersecurity professor at the University of Surrey. “Invite someone to your chat group, and of course they can read everything.”

The potential fallout is enormous. “It may sound extreme, but this is the sort of failure that could get people killed,” warns Woodward. “It’s fortunate the journalist chose not to share all the information and waited until after the relevant events unfolded.”

Beyond the immediate security risks, the episode reveals a deeper institutional problem: the lack of transparency and proper recordkeeping when government business is conducted on third-party messaging apps with disappearing messages. Even more troubling to some experts is the likelihood of it happening again. “Human mistakes happen—and they will continue to happen,” says Lukasz Olejnik, an independent cybersecurity consultant and visiting senior research fellow at King’s College London. “And policies will be violated.”

What comes next is unclear. Defense Secretary Pete Hegseth has publicly claimed no war or attack plans were shared in the chat—something The Atlantic‘s Goldberg disputes, calling the statement “a lie.”

“I would imagine there is a big clean-up operation ongoing right now,” says Pritchard, the former Cyber Security Operations Center deputy. “All those devices need to be wiped, including any secondary devices that have the same Signal account accessible on them, and there need to be investigations into what else has gone on on Signal.”

But cleanup may be to little, too late. After all, the leaked chats are a goldmine for adversaries. “Among the damage is a leak of fragments of information potentially allowing people to compose a psychological profile of U.S. leaders,” says King’s College London’s Olejnik—from their emoji use to the vice president’s candid feelings about Donald Trump.

In the end, this wasn’t a failure of technology—it was a failure of judgment. And it may take more than a wiped device to repair the damage.

https://www.fastcompany.com/91305043/trump-administration-signal-scandal-humans-weakest-link-cybersecurity?partner=rss&utm_source=rss&utm_medium=feed&utm_campaign=rss+fastcompany&utm_content=rss

Creato 1mo | 25 mar 2025, 17:40:11


Accedi per aggiungere un commento

Altri post in questo gruppo

AI coding tools could bring us the ‘one-employee unicorn’

Welcome to AI DecodedFast Company’s weekly newsletter that breaks down the most important news in the world of AI. You can sign up to receive this newsletter every week 

24 apr 2025, 18:40:03 | Fast company - tech
Bot farms invade social media to hijack popular sentiment

Welcome to the world of social media mind control. By amplifying free speech with fake speech, you can numb the brain into believing just about anything. Surrender your blissful ignorance and swall

24 apr 2025, 13:50:11 | Fast company - tech
The economic case for saving human jobs

Few periods in modern history have been as unsettled and uncertain as the one that we are living through now. The established geopolitical order is facing its greatest challenges in dec

24 apr 2025, 13:50:11 | Fast company - tech
Patreon’s rivalry with Substack is growing. Who will win over creators?

Substack and Patreon are vying to become creators’ primary revenue stream.

For most influencers, payouts from platforms like Meta or Google aren’t enough to build a sustainable career. R

24 apr 2025, 11:40:04 | Fast company - tech
TikTok’s ‘SkinnyTok’ trend is under fire from EU regulators

The European Commission is coming for “SkinnyTok.”

EU regulators are investigating a recent wave of social media videos that promote extreme thinness and “tough-love” weight loss advice,

24 apr 2025, 00:10:04 | Fast company - tech
The subreddit r/AITA is headed for the small screen

The infamous “Am I The A**hole?” subreddit is making its way to the small screen.

Hosted by Jimmy Carr, the new game show for Comedy Central U.K. will feature members of the public appea

23 apr 2025, 19:30:03 | Fast company - tech
Ex-OpenAI workers ask state AGs to block for-profit conversion

Former employees of OpenAI are asking the top law enforcement officers in California and Delaware to s

23 apr 2025, 17:10:06 | Fast company - tech