Pentagon Sets Up System for Hegseth to Access Personal Signal Messages in Office, Sources Say

Pentagon officials have set up a system in Defense Secretary Pete Hegseth’s office that allows him to access messages on the encrypted messaging app Signal using a computer monitor, bypassing standard Defense Department security protocols, according to sources familiar with the matter. This setup, intended to alert Hegseth to incoming messages so he can step out to check his phone, has raised concerns among cybersecurity experts. Hegseth's office is a sensitive compartmentalized information facility (SCIF), where personal devices are strictly prohibited due to the high-security nature of the environment. However, two sources told CBS News that the current system still poses a significant security risk as it enables Hegseth to view and act on personal messages at his desk, despite his phone being kept just outside the room. Earlier reports by The Associated Press indicated that Hegseth also utilized an unsecured internet connection, commonly referred to as a "dirty line" in IT and cybersecurity circles. A dirty line bypasses vital security measures that protect against potential vulnerabilities that could be exploited by hostile actors. In response to these allegations, a Defense Department spokesperson clarified that there is no "dirty line" in Hegseth’s office. Instead, a physical line runs between the monitor and Hegseth's personal iPhone, located just outside the SCIF. This line is currently configured as a one-way connection, meaning it only alerts Hegseth to messages but does not allow him to send responses directly from the monitor. Hegseth, an Army veteran and former Fox News host, has come under fire after it was revealed that he shared details about impending U.S. airstrikes in Yemen in a private Signal group he created. The group included his wife, brother, and personal attorney, all of whom have roles at the Pentagon but do not hold positions that necessitate access to such sensitive information. This incident marks the second time Hegseth has used a Signal group to disseminate classified information, further intensifying scrutiny and criticism from both inside and outside the Defense Department. Marine Col. Ricky Buria, an aide in Hegseth’s office, played a key role in setting up the workaround for internet connectivity issues in the early days of the new administration. Buria oversaw the installation process that enabled the Signal app to function on the office monitor, mirroring messages from Hegseth's personal iPhone. The Defense Department did not comment on Buria’s specific involvement in this setup. Signal, known for its robust end-to-end encryption, provides a desktop app that pairs with a user’s mobile device via a QR code. Once paired, the desktop version mirrors the mobile version, allowing users to send and receive messages, access contacts, and manage shared media. This feature, while convenient for personal use, has highlighted the potential security gaps in Pentagon protocols when used in a high-sensitivity environment like a SCIF. The controversy surrounding Hegseth's use of Signal and the questionable security setup in his office has led to discussions about the broader implications for defense department security. Industry insiders and cybersecurity experts argue that the bypassing of established protocols, even if for seemingly benign reasons, could create vulnerabilities that adversaries might exploit. They emphasize the importance of strict adherence to security procedures to prevent unauthorized access to sensitive information. Moreover, the incident underscores the challenges faced by high-level government officials in balancing personal communication convenience with stringent security measures. Hegseth’s history as a media figure and his connections within the Pentagon add layers of complexity to the situation, raising questions about his judgment and the integrity of the security systems in place. In addition to the technical and security concerns, the political ramifications of sharing sensitive information in personal groups are evident. Critics point out that such actions could compromise diplomatic and strategic operations, potentially endangering military personnel and national security. The Defense Department’s response highlights the tension between maintaining operational security and addressing the practical needs of its leaders. Overall, the events surrounding Defense Secretary Pete Hegseth’s office setup and Signal usage highlight the critical need for robust security protocols in sensitive government environments and the potential risks when these protocols are compromised, even unintentionally. Industry insiders and security experts warn that any deviation from standard security practices, regardless of intent, can have serious repercussions. They suggest that the Pentagon should conduct a thorough review of its current security policies and consider tightening access controls to prevent similar incidents in the future. Hegseth's background as a media personality adds another dimension to the concern, as it raises questions about the vetting processes and oversight mechanisms for appointees in critical government roles.