Peiter “Mudge” Zatko, Twitter’s former head of security, filed an 84-page whistleblower report accusing Twitter of poor security practices that pose a national security risk. Key allegations include excessive employee access to sensitive controls without oversight, possible foreign intelligence infiltration, nearly half of Twitter’s servers lacking basic security features like encryption due to outdated or unpatched software, and failure to comply with a 2010 FTC order to protect user data. The report also claims Twitter misled auditors and does not honor user data deletion requests. Twitter denies these allegations, labeling Zatko a disgruntled former employee and asserting ongoing remediation efforts. The U.S. Senate Judiciary Committee has initiated investigations into the claims.

If the allegations are accurate, Twitter's security lapses could expose user data to unauthorized access, undermine user privacy, and allow foreign intelligence services to exploit the platform. Non-compliance with FTC orders could result in regulatory penalties. The presence of unpatched servers and inadequate oversight increases the risk of data breaches or platform manipulation. The claims also raise concerns about the integrity of Twitter's user base and platform security, potentially affecting trust and regulatory scrutiny.

No official patch or remediation status is provided. Twitter disputes the allegations and claims to be addressing security issues. Organizations and users should monitor official communications from Twitter and regulatory bodies for updates. Given the nature of the allegations, no specific technical mitigation can be recommended without further verified details. Follow congressional and vendor advisories for any future security guidance.