www.notus.org Congressman Warns of Signal App Vulnerabilities After Hacking Incident
Article Content
- •Rep. Don Bacon's Signal account was hacked via a phishing scheme, attributed to Russian state hackers.
- •The FBI warns of ongoing phishing attacks targeting high-value individuals using Signal.
- •Lawmakers are using Signal for sensitive communications, but claim not to share classified information.
Outgoing Rep. Don Bacon (R-Nebraska) revealed that his Signal messaging account was hacked due to a phishing scheme, prompting him to label the app as 'not secure.' The incident involved Russian state-sponsored hackers targeting high-value individuals, with Bacon being one of approximately 300 victims in Germany. The FBI has issued alerts regarding these phishing attempts, which impersonate Signal support to extract sensitive information like backup recovery keys. Despite the app's end-to-end encryption, human error remains a significant vulnerability. Meanwhile, other lawmakers continue to use Signal for sensitive communications, asserting they do not share classified information through the app. The controversy surrounding Signal's use in government continues as officials balance security with the need for encrypted communication.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Signal in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…