EXPLORINEER
en

US — The Verge

Just about anyone can rent access to White House IP addresses

Security1 min read

Security researchers found that devices on the White House network were sending traffic through residential proxy services. That means outsiders could potentially rent a way to use the presidential network's internet connection.

What happened

Security firms Layer3 Intel and Synthient found signs that someone at the White House appears to be running software that lets outsiders rent access to the presidential network. The software is a residential proxy. It routes other people's internet traffic through a home or office connection, which hides where the traffic really comes from. Researchers say anyone could rent this access for just "a few dollars."

Key facts

  • Layer3 Intel found activity from 28 residential proxy services on the White House network.
  • The activity ran from October 5 to November 3.
  • It usually happened between 5 PM and midnight Eastern Time.
  • Synthient linked the activity to the watch party app Rave, which it says bundles 12 proxy kits (SDKs) into its platform.

What is a residential proxy?

A residential proxy lets people rent a home internet address and send their traffic through it. Some apps and browser extensions include third-party software kits that quietly turn a user's device into a proxy. Companies can then sell access to those devices. People can use these services legally, such as for checking ads or testing products. But hackers also use them to hide their location, get around blocks, build botnets, and take over accounts.

Why it matters

If outsiders can use the White House network to hide their activity, it could be a serious security problem. Layer3 says the pattern suggests a person whose device is infected with a proxy kit, not a public guest Wi-Fi network. Researchers also warned that the proxy is open to anyone who pays for it. This shows how a single app on one device can open a door to a very sensitive network.

What to watch

  • Whether the White House confirms and fixes the problem.
  • Whether the Rave app or the proxy providers respond to the findings.
  • Any new reports on which devices or services were involved.

Glossary

residential proxy
A service that lets people rent a home internet address to send their traffic through, hiding where it comes from.
Layer3 Intel
A security firm that found residential proxy activity on the White House network.
Synthient
A security firm that found proxy activity on the White House network and linked it to the Rave app.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

Securityheise online

Cyberattack on Mindfactory: Passwords Reset

Hardware retailer Mindfactory has been hit by a cyberattack and has informed customers and the data protection authority, and filed a criminal complaint against unknown persons. The company cannot rule out that attackers accessed personal data such as addresses, email addresses, phone numbers and encrypted passwords, but says bank and credit card data are stored by payment providers and not in its shop system. All customer shop passwords were reset, and customers must change theirs to regain access.

Securityheise online

Platforms Offline: Cyberattack on TU Munich

The Technical University of Munich (TUM) has taken core online platforms for students offline after a cyberattack. Attackers reportedly entered through a legacy system and potentially gained access to data of students and staff, though it is still being investigated whether any data was stolen. The university says sensitive data such as grades, exam results, applications and bank details does not appear to have been leaked, and it is advising users to change passwords and enable multi-factor authentication.

Securityheise online

Lockdown Mode Bypassed: How Calif.io's Latest Exploit Works

Security researcher Stefan Esser of Calif.io says his jailbreak for current iPhones, up to iOS 27.0.1, works even with Lockdown Mode enabled, and that he kept Lockdown Mode on during the demonstration. The exploit uses a bug in the PDF parser, which Lockdown Mode does not block, since the file is opened via Safari or AirDrop and shown in Preview, where MTE memory protection is active only in Lockdown Mode and was bypassed. Esser also says the exploit persists through the update to iOS 27.2, because the bug lies in a part of the system the update does not touch.

SecurityITmedia

Government Warns Businesses After Series of Data Leaks, Citing Multiple Cases of Insufficient Basic Security Measures

Japan's National Cyber Office issued a warning on November 5 to businesses running websites and mobile apps after a series of personal data leaks in the country. The office said it confirmed multiple cases where the leaks appeared to stem from insufficient basic security measures, and it outlined countermeasures covering system operation, design and development, and supply chain risks.