The Official DOGE Website Launch Was a Security Mess
1 min read
Summary
New research from security analysts reveals that the Chinese Salt Typhoon hacking group has expanded its targets to include two further US telecoms companies, bringing the total number of US telecoms firms breached by the group to 11.
Russia’s Sandworm hacking group has also increased its remit, targeting countries in the West, including the US, Australia, Canada and the UK.
Two developers have found that it is possible to push updates to the DOGE.gov website, an official US government website, indicating that it is insecure.
The site, set up by Elon Musk to be transparent about the department’s activities, included posts this week that purportedly showed the size of the US government, but which also included classified material.
RedNote, the Chinese TikTok alternative, is also vulnerable to surveillance according to research from the University of Toronto’s Citizen Lab.
The findings highlight that popular apps in China often use no encryption or non-standard encryption protocols.
Over the last two weeks, US spy planes have flown at least 18 missions around the Mexico border, collecting signals and imagery intelligence.
