Ahead of the Signal leak, the Pentagon warned of the app’s weaknesses
Days before top national security officials accidentally included a reporter in a Signal chat about bombing the Houthi sites in Yemen, a Pentagon-wide advisory warned against using the messaging app, even for unclassified information.
“A vulnerability has been identified in the Signal messenger application,” begins the department-wide email, dated March 18, obtained by NPR.
The memo continues, “Russian professional hacking groups are employing the ‘linked devices’ features to spy on encrypted conversations.” It notes that Google has identified Russian hacking groups who are “targeting Signal Messenger to spy on persons of interest.”
In a statement to NPR, Signal spokesperson Jun Harada said, “We aren’t aware of any vulnerabilities or supposed ones that we haven’t addressed publicly.”
The Pentagon memo adds, “Please note: third-party messaging apps (e.g. Signal) are permitted by policy for unclassified accountability/recall exercises but are not approved to process or store non-public unclassified information.”
The encrypted Signal app is what Defense Secretary Pete Hegseth and other leading national security officials within the administration used to discuss bombing Houthi earlier this month. The Atlantic editor Jeffrey Goldberg was inadvertently added to the group and privy to the highly sensitive discussions.
In the military, sending classified data over insecure channels is called “slippage” when it’s considered minor, but even that can be a career ender for a military officer.
At least as far back as 2023, a DoD memo, also seen by NPR, prohibited use of mobile applications for even “controlled unclassified information,” which is many degrees less important than information about on-going military operations.
There’s almost no precedent for the heads of Defense, State, Intelligence and National Security to be sharing such sensitive military intelligence in a forum that was known to be unsecured.
NPR’s Bobby Allyn contributed to this story.
NPR disclosure: Katherine Maher, the CEO of NPR, chairs the board of the Signal Foundation.
Charlie Kirk’s killing raises the stakes for campus security
How much security at a campus event is enough? Campus police are mulling the question.
They want a COVID shot to protect their health or at-risk family. They can’t get it
Though the FDA narrowed criteria for the shots, many people still want them, to avoid illness and protect vulnerable family members. Some are turned down at the pharmacy or have to jump through hoops.
Jazz head at Kennedy Center is the latest firing at the beleaguered arts institution
The firing of Kevin Struthers is the latest in a line of dismissals and resignations at the D.C. arts behemoth.
Senate Republicans turn to ‘nuclear option’ to speed confirmation of Trump nominees
The change will allow certain nominees to be confirmed in groups rather than by individual vote. It follows months of GOP complaints that Democrats were dragging out the confirmation process.
A play about the revolt of human workers — not machines — gave us the word ‘robot’
A Czech playwright introduced the word to English in the 1920s. But back then, it wasn't analogous to machinery. New interpretations of the robot reflect a modernity once skewered by the writer.
Are hotel rooms accessible for people who use wheelchairs? NPR wants to hear from you
Hotels have accessible rooms for wheelchair users. If you or someone you know has experienced problems with those rooms, we'd like to hear about it.
