Ahead of the Signal leak, the Pentagon warned of the app’s weaknesses
Days before top national security officials accidentally included a reporter in a Signal chat about bombing the Houthi sites in Yemen, a Pentagon-wide advisory warned against using the messaging app, even for unclassified information.
“A vulnerability has been identified in the Signal messenger application,” begins the department-wide email, dated March 18, obtained by NPR.
The memo continues, “Russian professional hacking groups are employing the ‘linked devices’ features to spy on encrypted conversations.” It notes that Google has identified Russian hacking groups who are “targeting Signal Messenger to spy on persons of interest.”
In a statement to NPR, Signal spokesperson Jun Harada said, “We aren’t aware of any vulnerabilities or supposed ones that we haven’t addressed publicly.”
The Pentagon memo adds, “Please note: third-party messaging apps (e.g. Signal) are permitted by policy for unclassified accountability/recall exercises but are not approved to process or store non-public unclassified information.”
The encrypted Signal app is what Defense Secretary Pete Hegseth and other leading national security officials within the administration used to discuss bombing Houthi earlier this month. The Atlantic editor Jeffrey Goldberg was inadvertently added to the group and privy to the highly sensitive discussions.
In the military, sending classified data over insecure channels is called “slippage” when it’s considered minor, but even that can be a career ender for a military officer.
At least as far back as 2023, a DoD memo, also seen by NPR, prohibited use of mobile applications for even “controlled unclassified information,” which is many degrees less important than information about on-going military operations.
There’s almost no precedent for the heads of Defense, State, Intelligence and National Security to be sharing such sensitive military intelligence in a forum that was known to be unsecured.
NPR’s Bobby Allyn contributed to this story.
NPR disclosure: Katherine Maher, the CEO of NPR, chairs the board of the Signal Foundation.
Suspected gunman in Bondi Beach shooting charged with 15 counts of murder
A suspected gunman in Sydney's Bondi Beach massacre was charged with 59 offenses including 15 charges of murder on Wednesday, as hundreds of mourners gathered to begin funerals for the victims.
Trump expands travel ban and restrictions to include an additional 20 countries
The Trump administration announced Tuesday it was expanding travel restrictions to an additional 20 countries and the Palestinian Authority, doubling the number of nations affected by sweeping limits.
Trump orders blockade of ‘sanctioned oil tankers’ into Venezuela
President Donald Trump says he is ordering a blockade of all "sanctioned oil tankers" into Venezuela, ramping up pressure on the country's authoritarian leader Nicolás Maduro.
Nick Reiner will be charged with first degree murder in his parents’ killing
The 32-year-old son of famed director Rob Reiner is being held without bail. Los Angeles authorities say the charges against him carry a maximum sentence of life in prison without the possibility of parole.
After outcry over prices, FIFA to sell $60 tickets for the World Cup — with a catch
FIFA said it would sell $60 tickets to the World Cup, including for the final — but only for supporters of qualified teams. And the actual number of available tickets is limited.
What to know from Susie Wiles’ interviews with ‘Vanity Fair,’ according to the writer
Throughout the year, Vanity Fair writer Chris Whipple interviewed some of the people closest to President Trump. We speak with Whipple about his talks with White House chief of staff, Susie Wiles.
