DEF CON 33 - 'We are currently clean on OPSEC' - The Signalgate Saga - Micah 'micahflee' Lee
Source: YouTube · DEFCONConference · published Oct 10, 2025 · 42:06
The Signalgate saga reveals severe incompetence and misconduct by top Trump administration officials, including unauthorized sharing of classified war plans and lying to Congress about it, leading to potential war crimes and serious security breaches. 1:06
Key Takeaways:
• Senior officials shared classified Yemen war plans in a Signal group, violating federal records laws and potentially committing war crimes [2:46–3:00].
• Pete Hegath and others lied under oath to Congress, claiming no classified information was discussed, despite clear evidence to the contrary [4:24–4:34].
• The Trump administration used a fork of Signal (TMSGNL) instead of official Signal, which lacks end-to-end encryption and archives messages—exposing sensitive government communications [14:02–15:22].
• A critical vulnerability in Tele Message’s archive server allowed unauthorized access to plain-text chat logs, including messages from U.S. government staff and foreign officials [21:13–22:55].
• The data leak included messages from White House staff, diplomats, and Israeli-linked entities, raising concerns about foreign influence and data privacy [32:07–34:46].
The story exposes systemic failures in the Trump administration’s handling of classified information, from poor protocol to reckless trust in insecure, unverified software. 39:48
Sources:
- 1:06 Background on the Signalgate saga and Trump administration misconduct.
- 2:46–3:00 War plans shared in a Signal group and the Yemen bombing.
- 4:24–4:34 Senior officials lying to Congress about classified discussions.
- 14:02–15:22 Use of TMSGNL and its lack of end-to-end encryption.
- 21:13–22:55 Critical vulnerability
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Signal is an amazing thing. Privacy is an amazing thing. It enables a lot of things. Signal is a very important tool. As long as we use signal and we uh uh just keep mind of of all the different vulnerabilities and and how you can [ __ ] it up. So, we're going to learn how many people have uh a number of different ways people have [ __ ] it up. Uh Micah Micah has a tremendous background. If you are here, you most likely either know his background or he's no needs none based on the knowledge he's about to drop. Please give Micah a great round of applause and thank for all the work that he's put in. Now sit back and enjoy examples of how not to do it. >> Have a wonderful time. >> Thank you. >> Hello Defcon. having a good afternoon, a good day. >> Hell yeah. So, today I'm gonna tell you the e…