Twitter names hacker Mudge security head

Social media giant Twitter, under increased threat of regulation and plagued by security breaches, is to appoint one of the world's best-regarded hackers to tackle everything from engineering missteps to misinformation.

The company on Monday named Peiter Zatko, widely known by his hacker handle Mudge, to the new position of head of security, giving him a broad mandate to recommend changes in structure and practices.

Zatko answers to CEO Jack Dorsey and is expected to take over management of key security functions after a 45- to 60-day review.

In an exclusive interview, Zatko said he will examine "information security, site integrity, physical security, platform integrity - which starts to touch on abuse and manipulation of the platform - and engineering."

Zatko most recently oversaw security at the electronic payments unicorn Stripe.

Before that, he worked on special projects at Google and oversaw handing out grants for projects on cybersecurity at the Pentagon's famed Defense Advanced Research and Projects Agency.

Zatko's colorful career began in the 1990s, when he simultaneously conducted classified work for a government contractor and was among the leaders of Cult of the Dead Cow, a hacking group notorious for releasing Windows hacking tools in order to goad Microsoft into improving security.

"I don't know if anyone can fix Twitter's security but he'd be at the top of my list," said Dan Kaufman, who supervised Zatko at DARPA and now leads the advanced products group at Google.

Twitter faces numerous security challenges.

A year ago, the US government accused two men of spying for Saudi Arabia when they worked at Twitter years earlier, saying they passed along private information about the kingdom's critics.

In July, hackers tricked employees and won access to internal tools, which let them change account settings and then tweet from the accounts of then-presidential candidate Joe Biden, Microsoft founder Bill Gates and Tesla Chief Executive Elon Musk.