breach Archives

AppWizard

May 11, 2025

Scrutinizing the security of messaging apps continues.

Customs and Border Protection (CBP) and the White House are facing scrutiny over security vulnerabilities in their messaging application. Hacktivists breached GlobalX, the airline handling U.S. deportation flights, exposing sensitive flight manifests. The FBI warned about threats exploiting outdated routers. Pearson confirmed a cyberattack compromising customer data. Research shows cybercriminals are using Windows Remote Management (WinRM) for lateral movements in Active Directory environments. A new email attack campaign is delivering a Remote Access Trojan (RAT) via malicious PDF invoices. A zero-day vulnerability in SAP NetWeaver allows remote code execution, affecting multiple sectors. An Indiana health system reported a data breach affecting nearly 263,000 individuals.

AppWizard

May 8, 2025

Someone Reportedly Hacked the Messaging App Mike Waltz Was Seen Using

A cybersecurity breach involving TeleMessage, an Israeli messaging application company, has raised concerns about customer data safety. The breach allowed unauthorized access to direct messages and personal information on the platform, which lacks full end-to-end encryption like Signal. The hacker reported that accessing the data took only 15-20 minutes and exposed names, phone numbers, and email addresses of Customs and Border Protection officials, along with information from various financial institutions. TeleMessage is used by government agencies, including the State Department and the Centers for Disease Control and Prevention, making the breach more significant. While the hacker did not access all content, they indicated potential for further breaches, and journalists have verified some of the compromised material. TeleMessage's claim of maintaining Signal's security standards is questioned, as archiving messages introduces privacy risks. A spokesperson for Signal warned against using unofficial versions of their app, highlighting security vulnerabilities.

AppWizard

May 8, 2025

Signal clone used by Trump team hacked, GlobalX flight data leaked

The messaging app TeleMessage, used by President Donald Trump’s national security advisor, has been suspended due to a reported security breach, raising concerns about the security of sensitive government communications. The app, a modified version of Signal, was halted after a hacker accessed message contents from its customized versions, although the communications of national security advisor Mike Waltz were reportedly not affected. TeleMessage's suspension follows a statement from its parent company, Smarsh, confirming an investigation into the security incident. Despite President Trump's criticism of Signal, the White House continues to defend it, highlighting its pre-installation on government devices. Concerns about privacy protections arise from TeleMessage's archiving features, which may compromise Signal's end-to-end encryption. Additionally, GlobalX, the airline involved in Trump’s deportation flights, experienced a hacking incident, resulting in the exposure of flight records and passenger lists.

AppWizard

May 8, 2025

Messaging App Used by Trump Admin Hacked – Attacker May Have Stolen Data From Hundreds of Government Employees: Report

A hacker breached TeleMessage, a messaging app used by members of the Trump administration and US government officials, in a quick attack that reportedly took 15 to 20 minutes. The breached materials included sensitive data related to Customs and Border Protection (CBP) and cryptocurrency exchange Coinbase. A screenshot from the control panel showed names, phone numbers, and email addresses of CBP employees, indicating access to data of hundreds of US government personnel. Michael Waltz, the recently dismissed national security adviser, was noted to have used TeleMessage during a cabinet meeting.

Winsage

May 7, 2025

Play ransomware exploited Windows logging flaw in zero-day attacks

The Play ransomware gang exploited a critical vulnerability in the Windows Common Log File System, identified as CVE-2025-29824, to execute zero-day attacks, gaining SYSTEM privileges and deploying malware. Microsoft recognized this flaw and issued a patch during last month's Patch Tuesday. The gang targeted sectors including IT and real estate in the U.S., the financial sector in Venezuela, a Spanish software company, and retail in Saudi Arabia. They used the PipeMagic backdoor malware to deploy the CVE-2025-29824 exploit and install ransomware payloads. Symantec's Threat Hunter Team linked these activities to the Play ransomware-as-a-service operation, noting the use of the Grixba infostealer tool. The Play ransomware group, active since at least June 2022, employs double-extortion tactics and has compromised approximately 300 organizations globally as of October 2023. Notable victims include Rackspace, Arnold Clark, the City of Oakland, Dallas County, Antwerp, and Microchip Technology.

AppWizard

May 7, 2025

Messaging app used by Mike Waltz suspends service after hacking

TeleMessage, a messaging application linked to former national security adviser Mike Waltz, has suspended its services following a reported hacking incident where sensitive files were accessed. The breach has raised serious concerns about the app's security protocols and could lead to a reevaluation of security measures across similar applications.

AppWizard

May 7, 2025

Another messaging app used by the White House is in hot water

Former National Security Adviser Mike Waltz has come under scrutiny for using TeleMessage, an app that has recently experienced a security breach resulting in the theft of sensitive data, including direct messages and group chats. High-ranking officials from the Trump administration, including Waltz, Vice President J.D. Vance, Secretary of State Marco Rubio, and Director of National Intelligence Tulsi Gabbard, were reported to have used the app. A photograph captured Waltz during a Cabinet meeting appearing to use TeleMessage to access Signal messages, raising concerns due to his previous controversy involving a chat room on Signal that included a journalist. The security vulnerabilities of TeleMessage have been criticized, particularly as it lacks the robust encryption features of Signal. The app was initially marketed as a solution for preserving messages for government record-keeping, but its reliability has been questioned.

AppWizard

May 6, 2025

Messaging App Tied to Trump Cabinet Investigating Cyber Incident

TeleMessage is investigating a potential security breach, suspecting that hackers may have exploited its technology. The company has temporarily suspended its app services as a precautionary measure. TeleMessage, a product of Smarsh Inc. based in Portland, Oregon, archives messages from encrypted applications like Signal, WhatsApp, and Telegram.

AppWizard

May 6, 2025

Mike Waltz’s Cabinet Messaging App Goes Dark After Massive Hack

TeleMessage, an encrypted messaging application, has temporarily suspended its services following a security breach. The platform was used by dismissed national security adviser Mike Waltz during a Cabinet meeting, and a leaked image of his inbox showed conversations with notable figures such as Vice President JD Vance and Secretary of State Marco Rubio. The breach, reported by 404 Media, did not access messages among Cabinet members but compromised data from Customs and Border Protection, cryptocurrency firm Coinbase, and various financial institutions. The hacker claimed the breach was easy, completing it within 15-20 minutes. Signal, the platform from which TeleMessage archives messages, stated it cannot guarantee the security of unofficial versions. TeleMessage was acquired by U.S. company Smarsh last year for archiving communications. Following controversies, including Waltz's accidental inclusion in a group chat discussing a military operation, he was removed from his position, and President Trump expressed skepticism about using Signal for government communications.

AppWizard

May 6, 2025

I’m the Private Messaging App Signal, and the Trump Administration Is Ruining My Brand

Signal, known for its commitment to privacy and end-to-end encryption, is facing controversy due to a breach involving an unofficial version used by Mike Waltz, a former National Security Adviser. This incident has raised questions about the app's reputation and its ability to maintain secure communications. The app's founder, Moxie Marlinspike, emphasizes privacy, but the association with political figures has complicated its image. Signal has recently released version 7.34.0, which improved compatibility with Arm64 processors, but the media focus has shifted to the political controversy. This breach raises concerns for potential users who value anonymity, and Signal's open-source design allows for public scrutiny, contrasting with competitors. The company faces challenges in restoring user trust while competing with alternatives that prioritize data monetization and advertising. Signal's commitment to privacy and technology remains, but it must work to distance itself from political narratives to recover its trusted status.