# Researchers found White House-linked devices acting as residential proxy exits

- URL: https://talkfuse.com/story/the-white-house-is-apparently-a-popular-residential-proxy-exit-spot/
- Published: 2026-11-05T20:50:57+00:00
- Updated: 2026-11-05T22:20:11+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/11/05/the-white-house-is-apparently-a-popular-residential-proxy-exit-spot/5307969
- Topics: Software

## Key points

- Researchers detected residential proxy traffic linked to the White House network.
- Layer3 recorded 236 exits across 28 services in a month.
- The State Department requested logs after the activity reportedly stopped.

## Summary

Security researchers say devices associated with the White House network appear to have been used as residential proxy exit nodes, potentially exposing internal systems to security risks. The activity was detected by Layer3 Intel, whose founder said it may have continued for months and could have enabled outsiders to reach internal systems if the proxy software was vulnerable.

Layer3 recorded 236 exits from 28 proxy services between 5 October and 3 November, with activity usually occurring between 5 pm and midnight, White House time. The company could not determine how many devices were involved; another security firm suspected multiple Windows 10 and 11 machines may have Infatica software installed. The activity reportedly stopped after Layer3 published its findings, and the State Department requested the company’s logs.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.
