PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

WikiLeaks Trove Appears to Show CIA Hacking Tools

The leak contains numerous lines of computer code that appear to show how the CIA can access communications from iPhones, Android, and Windows.

 & Tom Brant Managing Editor

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS

WikiLeaks on Tuesday released what it claims is the largest-ever publication of confidential CIA documents, which appear to reveal the software tools the agency uses to perform cyber attacks.

SecurityWatchThe documents' authenticity has not yet been confirmed, and a CIA spokesperson told the New York Times that "we do not comment on the authenticity or content of purported intelligence documents." WikiLeaks said that Tuesday's release is the first in a series of leaks involving CIA documents that it plans to release. The organization, headed by Julian Assange, has nicknamed the trove of documents "Vault 7."

The documents released Tuesday, which WikiLeaks is referring to as "Year Zero" include many lines of computer code, and the organization says that some of the tools they describe can be used to bypass the encryption of popular apps and devices, including the iPhone and the Android and Windows operating systems. The "zero-day exploits," so-called because the CIA has not shared its loopholes with the companies involved, allow the agency to access data transmissions before they are encrypted, WikiLeaks said.

That could mean that even encrypted communications apps like Signal and WhatsApp are vulnerable to the CIA's tools, although it appears that the CIA was able to bypass the encryption rather than crack it. A spokesperson from WhatsApp's parent Facebook said the company was reviewing the leaked content but declined to comment further.

"These leaks are confirmation that ubiquitous encryption provided by WhatsApp and Signal are forcing intelligence agencies to use malware, pushing them from undetectable mass surveillance to high risk targeted attacks," a Signal spokesperson said in a statement.

The trove was circulated among US government contractors, WikiLeaks said, one of whom provided it to the organization. In a news release, WikiLeaks said its source "wishes to initiate a public debate about the security, creation, use, proliferation and democratic control of cyberweapons."

WikiLeaks said that although the documents include "armed" cyber weapons, it chose not to make those details public. It is also withholding information on CIA targets and the machines used to attack them, which the organization claims are scattered throughout Latin America, Europe, and the US.

"There is an extreme proliferation risk in the development of cyber 'weapons,'" WikiLeaks founder Julian Assange said in a statement. "Comparisons can be drawn between the uncontrolled proliferation of such 'weapons', which results from the inability to contain them combined with their high market value, and the global arms trade. But the significance of 'Year Zero' goes well beyond the choice between cyberwar and cyberpeace. The disclosure is also exceptional from a political, legal and forensic perspective."

About Our Expert

Tom Brant

Tom Brant

Managing Editor

I’m a managing editor at PCMag.com focused on PC hardware. Reading this during the day? Then you've caught me testing gear and editing reviews of Wi-Fi routers, printers, laptops, and tons of other personal tech. (Reading this at night? Then I’m probably dreaming about all those cool products.) I’ve covered the consumer tech world as an editor, reporter, and analyst since 2015.

I've covered most major consumer tech events, including CES, Computex, Google I/O, and IFA. I've also appeared on CBS News, in USA Today, and at many other outlets to offer analysis on breaking technology news.

Before I joined the tech-journalism ranks, I wrote on topics as diverse as Borneo's rainforests, Middle Eastern airlines, and Big Data's role in presidential elections. A graduate of Middlebury College, I also have a master's degree in journalism and French Studies from New York University.

The Technology I Use

While most people buy a phone or laptop and stick with it for years, I’m lucky enough to use devices based on Android, iOS, macOS, and Windows daily as part of my job. As a result, I cycle through lots of tech in addition to my IT-issue work laptop. (Yes, that's a ThinkPad.) Personally, I’ve also owned a lot of tech products both cutting-edge and cringeworthy, from the Nintendo GameCube and the original MacBook to the Palm m105 and the CueCat.

Read full bio