US service members’ apps reportedly include Chinese and Russian code

Intelligence Summary

An investigation found that more than one in eight apps marketed to US troops contained code from foreign sources. Some of the code was linked to firms operating in countries considered adversaries by the Pentagon. The apps span consumer and operational uses where service members may rely on them daily. This raises supply-chain risk because third-party or outsourced components can introduce malicious or surveillance capabilities. Troops and organizations should verify app publishers, review permissions and provenance, and prefer software from trusted vendors.

Recommended Action

Review affected assets, schedule urgent remediation, and monitor related indicators.

Topics