NewsPublished 24 Aug 2022

Twitter Whistleblower Complaint: The TL;DR Version

Source Threatpost

Description

A whistleblower complaint from Twitter's former head of security alleges significant security and privacy failures at Twitter, including inadequate access controls, outdated and unpatched servers, non-compliance with a 2010 FTC order, and potential infiltration by foreign intelligence operatives. Twitter disputes these claims, calling the whistleblower disgruntled and asserting many issues have been addressed. The allegations have prompted congressional investigations due to concerns over national security risks.

Impact

If the allegations are accurate, Twitter's security lapses could expose user data to unauthorized access, undermine user privacy, and allow foreign intelligence services to exploit the platform. Non-compliance with FTC orders could result in regulatory penalties. The presence of unpatched servers and inadequate oversight increases the risk of data breaches or platform manipulation. The claims also raise concerns about the integrity of Twitter's user base and platform security, potentially affecting trust and regulatory scrutiny.

Defensive guidance

Twitter disputes the allegations and claims to be addressing security issues. Organizations and users should monitor official communications from Twitter and regulatory bodies for updates. Given the nature of the allegations, no specific technical mitigation can be recommended without further verified details. Follow congressional and vendor advisories for any future security guidance.

Summary

Peiter “Mudge” Zatko, Twitter’s former head of security, filed an 84-page whistleblower report accusing Twitter of poor security practices that pose a national security risk. Key allegations include excessive employee access to sensitive controls without oversight, possible foreign intelligence infiltration, nearly half of Twitter’s servers lacking basic security features like encryption due to outdated or unpatched software, and failure to comply with a 2010 FTC order to protect user data. The report also claims Twitter misled auditors and does not honor user data deletion requests. Twitter denies these allegations, labeling Zatko a disgruntled former employee and asserting ongoing remediation efforts. The U.S. Senate Judiciary Committee has initiated investigations into the claims.

References

threatpost.com/twitter-whistleblower-tldr-version/180472/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 4 Aug 2026, 12:42 UTC

References

Community reviews