A recent security breach has exposed significant vulnerabilities in TeleMessage, a messaging app used by some US government officials, including members of the Trump administration.
The hacker, who remains unidentified, managed to infiltrate the app's backend, obtaining sensitive data and raising serious concerns about the security of communications within the government.
Following the cyber incident, US Customs and Border Protection (CBP) immediately took the precaution of disabling TeleMessage, and an investigation into the extent of the breach is currently underway.
TeleMessage, developed by Israeli company Smarsh, is widely used by US government employees, particularly for the purpose of archiving encrypted messages.
The app is a modified version of Signal, designed to comply with retention policies.
It is an essential tool for ensuring that government communications, including those of top officials, are stored for record-keeping purposes.
However, this archiving function could become a security liability when not handled with the utmost care.
The breach occurred when the hacker exploited a vulnerability in the backend of TeleMessage’s system.
The attack, which took just 15 to 20 minutes, allowed the hacker to access customer data.
This included sensitive details related to CBP employees, as well as information from prominent financial institutions such as the cryptocurrency exchange Coinbase.
A screenshot from the hacker showed access to a panel listing the names, phone numbers, and email addresses of several government employees.
While the breach did not specifically target messages from former National Security Adviser Michael Waltz, the hack exposed other sensitive communications involving government officials.
A screenshot revealed that the attacker had access to the personal details of hundreds of US government employees.
Although Waltz’s conversations were not directly accessed, the breach has brought attention to the potential risks facing high-ranking officials’ communications.
Earlier this year, Mike Waltz faced criticism after accidentally adding a journalist to a sensitive Signal group discussing US military operations in Yemen.
This incident came to light following his removal from office.
Despite the app's vulnerabilities, the US government continues to rely on modified communication tools for archiving, leaving key questions about the balance between security and regulatory compliance.
Experts have raised concerns about TeleMessage's method of storing decrypted messages.
While this practice ensures compliance with retention rules, it also creates significant security risks.
If these messages are not securely managed, hackers can exploit this vulnerability, as seen in this incident.
The lack of robust security measures around message retention underscores the fragility of digital communication systems, especially when used for sensitive government matters.
The hacker’s identity remains a mystery, and it is unclear whether this was an isolated incident or part of a larger coordinated attack.
The fact that the hack was accomplished with minimal effort has only heightened concerns about the security of messaging platforms used by government officials.
The data stolen, including personal contact details and communication records, could have serious implications if exploited.
As the investigation continues, this breach reveals the risks associated with using third-party communication tools for sensitive government operations.
A 19-year-old Singaporean man arranged to buy crypto in person but was allegedly struck during the deal, forcing him to flee with S$32,000 in cash. He evaded pursuit and returned home safely. Police have arrested two suspects, and investigations continue.
KikyoScammers have developed a new tactic to defraud Solana users by burning their tokens seconds after purchase, using a Solana token extension to secretly erase crypto holdings. While the motives vary, the result is consistent: users lose their assets.
CatherineA crypto trader turned $5,000 into $670,000 in just 48 hours by investing in the newly launched Ethervista (VISTA) token, which is gaining attention as Ethereum's rival to Solana's Pump.fun. Ethervista's rapid rise includes a unique “fair launch model” and high gas consumption, contributing to its rapid market capitalization increase and significant token value surge.
WeatherlyTapSwap, the popular "tap-to-earn" game, is set to launch its airdrop and token listing before October 30, 2024. The TAPS token will have a total supply of 18 billion, with initial price predictions ranging from $0.03 to $0.06.
AnaisTelegram’s W-Coin will launch its token on The Open Network (TON) after 68% of players voted in its favour, outpacing Solana and Ethereum. W-Coin is also moving up its Token Generation Event (TGE), with the date to be announced soon.
CatherineMonths after leaving OpenAI, co-founder Ilya Sutskever has raised $1 billion for his new AI startup, SSI. With just 10 employees, SSI will use the funds to enhance its computing infrastructure and recruit top talent. Will SSI merely replicate ChatGPT or surpass it in advancing AI?
KikyoTelegram has apologised and removed 25 deepfake porn videos in response to pressure from South Korean authorities. The company is now working to improve communication and compliance with South Korean regulations.
JoyIt was revealed that 70% of Trump-backed World Liberty Financial governance token will be controlled by insiders. This prompts the question: Is it fair for such a large share of power to be held by a few?
CatherineJapan's Financial Services Agency is considering a major tax overhaul for cryptocurrencies, potentially reclassifying them as financial assets and reducing tax rates from up to 45% to 20%. This change aims to align crypto taxes with traditional investments and could significantly lower the tax burden for high-earning crypto investors.
WeatherlyAt the 2024 KDDI Summit, OpenAI Japan CEO Tadao Nagasaki announced that GPT-Next will be 100 times more powerful than GPT-4, thanks to major architectural improvements. The release is expected by the end of 2024.
Kikyo