A flaw in the TeleMessage Signal app, plus its use by high-profile national security officials, was enough to land it on the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog on May 12. While the actual flaw — CVE-2025-47729 — has a low CVSS score of 1.9, security pros said CISA put the bug on the KEV catalog because of concerns that it could have been potentially exploited when former National Security Advisor Mike Waltz was photographed using the cloned TeleMessage Signal app to communicate with other high-ranking government officials.

Source: SC Magazine