Officials with the FBI and Cybersecurity and Infrastructure Security Agency (“CISA”) recently recommended Americans use encrypted messaging apps in response to the Salt Typhoon cyberattack that infiltrated at least eight U.S. telecommunications companies. In a news call to address the Salt Typhoon attack, Jeff Greene, the executive assistant director for cybersecurity at CISA, stated, “Encryption is your friend,” and an official with the FBI added that “responsibly managed encryption” benefits users who wish to protect their mobile device communications. These statements acknowledge that ephemeral messaging, which generally refers to messaging applications that employ “end-to-end encryption” or auto-delete technology, minimizes the risk of falling victim to a cyberattack.
But these recommendations and statements in favor of the legitimate benefits of encrypted messaging apps in enhancing a cybersecurity posture, may appear inconsistent with other statements disfavoring the use of such apps to conduct business.
Continue reading “Government Agencies Send Mixed Messages on Ephemeral Messaging, Placing Regulated Entities in Apparent Double Bind”