0
Deep & Emerging Tech·July 19, 2026·1 min read

FAA and federal workers forced to install $1.4 million White House app containing Russian-built Elfsight code onto government-issued mobile devices

Share

A $1.4M official app shipping with Russian-linked third-party code is a reminder that your real attack surface is the dependency tree, not the top-level repo. Any org issuing managed devices at scale should be treating mobile apps like critical infra—SBOMs, vendor provenance checks, and explicit policy on embedded SDKs are now table stakes.