'We are currently clean on OPSEC' - The Signalgate Saga
Micah Lee
DEF CON 33 · Day 1 · Main Stage
In March 2025, the world witnessed what security researcher Micah Lee described as "unbelievable incompetence from the highest levels of the Trump administration" — the Signalgate scandal. The inciden
AI review
Micah Lee traces the full technical arc of the Signalgate scandal: from the Siri contact-merge OPSEC failure that added a journalist to a war-planning Signal group, to the discovery that officials were using TeleMessage (TM SGNL) — an Israeli-developed Signal fork that exfiltrated plaintext messages to an archive server — to the trivial exploitation of an unauthenticated Spring Boot Actuator heapdump endpoint that exposed 384 GB of government communications.