Atlantic magazine editor-in-chief Jeffery Goldberg had been inadvertently added to a group chat that reportedly exposed him to classified military plans, including weapons packages and targets.
The incident, which is being played down by those involved, but described by others as a major breech of security, has raised many questions about the appropriateness of the technology being used. Professor Oli Buckley, an expert in cyber security whose research has a strong focus on the human aspects of security, explains how even the most secure technology can’t protect against user error.
“The recent leak involving senior U.S. officials accidentally including a journalist in a Signal group chat highlights a critical issue in cyber security - the technology wasn’t at fault, the human use of it was. Signal remains one of the most secure encrypted messaging apps available and is widely used by journalists, diplomats and activists for precisely that reason. However, even the most secure tool can’t protect against user error, like adding the wrong participant to a sensitive conversation.
“The real risk here is not about Signal’s encryption, but about how easily human mistakes can undermine even the best technical safeguards. This kind of misstep, especially at such a high level, raises concerns about operational security culture and whether similar errors could occur elsewhere.
“Now that the story is public, there’s an increased risk of adversaries attempting to exploit such informal communication channels or using social engineering to gain access. It’s a powerful reminder that security isn’t just technical, it’s procedural, cultural, and deeply human.”
To arrange an interview with Professor Buckley, email publicrelations@lboro.ac.uk.