A whistleblower has accused Twitter of covering up potentially damaging security flaws and negligent practices.

In a complaint filed with the Securities and Exchange Commission, FTC and Department of Justice, Twitter’s former head of cybersecurity, Peiter Zatko, made a number of damaging claims about the social media giant.

These include allegations that members of the Twitter board purposefully misled the public and federal regulators about the platform’s safety and security practices.

Notably, Zatko alleges that he was forced to withhold damaging security reports by the board, and claims that the social media firm has failed to accurately record the volume of bots active on the site.

Bots were recently a key talking point in Elon Musk’s attempted $44bn deal to acquire the social media firm.

Zatko was sacked by Twitter in January. At the time, it was reported that the InfoSec veteran had been fired due to performance-related issues. However, Zatko has since contested this, arguing his dismissal was due to his refusal to keep quiet.

Recommended

• Twelve more Scots startups chosen for MSIP accelerator
• UKRI plan sees significant investment in the UK tech sector
• Eureka Solutions sees record turnover following restructuring

The complaint filed last month, which was obtained and published by CNN and The Washington Post, suggests that Twitter maintains poor security standards.

According to Zatko, thousands of staff members are able to access vital platform control features, and nearly half of the firm’s 7,000+ workforce have access to sensitive user data, including phone numbers.

Similarly, the complaint also alleges that the US Government presented Twitter with evidence that one or more employees were working for foreign intelligence services.

Difficult relationship

In particular, CNN’s report highlights the supposed strained relationship between Zatko and Parag Agrawal, Twitter’s former chief technology officer and current chief executive.

Zatko’s complaint alleges that Agrawal and high-ranking executives “repeatedly discouraged” him from providing accurate information on the extent of Twitter’s security problems.

Twitter’s executive team is also accused of having instructed Zatko to present “cherry-picked” and misrepresented data to the company board in order to create a “false perception of progress on urgent cybersecurity issues.

Twitter has denied Zatko’s claims and questioned the timing of the security chief’s complaint.

A spokesperson told CNN: “Mr Zatko was fired from his senior executive role at Twitter for poor performance and ineffective leadership over six months ago. While we haven’t had access to the specific allegations being referenced, what we’ve seen so far is a narrative about our privacy and data security practices that is riddled with inconsistencies and inaccuracies, and lacks important context.

“Mr Zatko’s allegations and opportunistic timing appear designed to capture attention and inflict harm on Twitter, its customers and its shareholders.”

NEW: First time Twitter CEO @paraga weighs in on whistleblower story.

Sending this message to staff this morning. pic.twitter.com/WY4TCqbA5q

— Donie O’Sullivan (@donie) August 23, 2022

In an email sent to employees, Agrawal also responded to the ongoing claims.

Shared to Twitter by CNN reporter Donie O’Sullivan, the email describes Zatko’s testimony as a “false narrative” and assures staff that the company is reviewing the redacted claims.

The complaint by Zatko could have serious repercussions for Twitter amidst what has been a challenging period. According to the Washington Post, sources claim that the social media giant could face significant fines if the allegations are found to be true.

Get the latest news from DIGIT direct to your inbox

Our newsletter covers the latest technology and IT news from Scotland and beyond, as well as in-depth features and exclusive interviews with leading figures and rising stars.

To subscribe, click here.