Confide, the messaging app pitched as a secure communications platform for Washington D.C.’s most high powered political operatives, is finally under the security microscope. Security researchers at Seattle-based IOActive found multiple critical vulnerabilities in Confide after it underwent a security audit for the first time in February. Several of the critical vulnerabilities impacting Confide, which employs no cryptography specialists on its development team, include leaking decrypted messages to attackers. Although the app has been pushed to headlines by a three-year long marketing operation, the audit was the first time Confide’s team dealt with researchers taking the app apart. That means the vulnerabilities may have existed for years even as journalists and White House operatives used Confide for secure messaging. IOActive researchers have privately told industry colleagues for several weeks to stop using Confide immediately. Ryan O’Horo, a managing security consultant for IOActive, appeared to call the vulnerabilities the most shocking security failures he’d seen in […]
The post Confide, the White House’s favorite messaging app, has multiple critical vulnerabilities appeared first on Cyberscoop.
Continue reading Confide, the White House’s favorite messaging app, has multiple critical vulnerabilities→