U.S. must increase defenses against Iranian information operations, report says

As social media platforms battle Iranian bots and trolls, the U.S. government needs to step up its own fight against Tehran’s digital influence operations, a new study says. With the 2020 election approaching, Washington should do more to attribute Iranian and other foreign influence operations and warn the public about them, scholars at the Atlantic Council think tank argue. “Iran has invested significant resources and accumulated vast experience in the conduct of digital influence efforts,” the report says. It calls on the Department of Homeland Security to create an intergovernmental agency to alert U.S. officials and the public of foreign influence operations. U.S. intelligence agencies need to work closely with social media companies to pinpoint foreign influence operations, the Atlantic Council scholars Emerson Brooking and Suzanne Kianpour’s advise. That collaboration is a work in progress. While the Russian government’s use of digital influence operations received the most attention from Western […]

The post U.S. must increase defenses against Iranian information operations, report says appeared first on CyberScoop.

Continue reading U.S. must increase defenses against Iranian information operations, report says

As Iowa caucuses loom, states drill with feds to protect 2020 elections

With the Iowa caucuses just days away, state election officials from around the country gathered this week in Washington, D.C., to drill for cyberattacks, study ransomware and learn how to work with ethical hackers. The level of collaboration was unthinkable four years ago, when Russia-backed hackers and trolls interfered to the electoral process. Then, it took many months for federal officials to notify states that their systems had been targeted, and states bristled at the Department of Homeland Security’s 2017 designation of election systems as critical infrastructure. Now, federal and state officials are mapping out how a foreign adversary might try to undermine the democratic process, and practicing how they would thwart those attacks. “We’re light years ahead today from where we were [in the aftermath of 2016]” Mac Warner, the secretary of state of West Virginia, said Thursday at the National Association of Secretaries of State conference. Warner said […]

The post As Iowa caucuses loom, states drill with feds to protect 2020 elections appeared first on CyberScoop.

Continue reading As Iowa caucuses loom, states drill with feds to protect 2020 elections

Pete Buttigieg’s campaign CISO has resigned

The Chief Information Security Officer for Democratic presidential candidate Pete Buttigieg’s campaign, Mick Baccio, has resigned, CyberScoop has learned. Baccio, who has been with the Buttigieg campaign since last August, told CyberScoop he left because he no longer agreed with the way senior leadership in the campaign was envisioning campaign cybersecurity. “[I left due to] fundamental philosophical differences with the campaign management regarding the architecture and scope of the information security program,” Mick Baccio told CyberScoop. Baccio declined to share details about what exactly led to his resignation. The campaign did not return a request for comment. Baccio’s departure may come as a blow to the campaign’s cybersecurity operations, as concerns about foreign interference in elections mount. Since joining, Baccio has been responsible for maintaining the campaign’s cyber hygiene, use of encrypted chat applications and two-factor authentication, and ultimately making sure the kind of breach that happened at the Democratic […]

The post Pete Buttigieg’s campaign CISO has resigned appeared first on CyberScoop.

Continue reading Pete Buttigieg’s campaign CISO has resigned

State election officials will get fresh intelligence briefing after Iran tensions

In the wake of the U.S.-Iran standoff and just weeks before the first Democratic primary, the intelligence community’s lead official for election security will brief state officials on the top cyberthreats to the U.S. electoral process. Shelby Pierson, the intelligence community’s election threats executive, said that the briefing this Thursday will cover full gamut of digital threats to U.S. elections, including those emanating from Iran. Asked if Iran is more likely to interfere in the 2020 election after the U.S. military killed Tehran’s top general earlier this month, Pierson told reporters Tuesday that “it certainly is something that we’re prepared for.” “Our adversaries look to the political climate … it wouldn’t surprise me at all that this is part of the calculus,” she added. Pierson, who assumed her post last July, used a speech at the National Press Club in Washington, D.C., to raise awareness about digital threats facing the […]

The post State election officials will get fresh intelligence briefing after Iran tensions appeared first on CyberScoop.

Continue reading State election officials will get fresh intelligence briefing after Iran tensions

Facebook declares war on ‘deepfakes’

Beleaguered social media platform Facebook is stepping up its game against media manipulation. Recognizing that deepfake content poses a real threat to society, Zuck’s social network swears to ban all such content from its platform, starting now…. Continue reading Facebook declares war on ‘deepfakes’

Blunt phone call shows state officials are unhappy with rollout of election security framework

Mac Warner needed to get something off his chest. The secretary of state of West Virginia had patiently listened to federal officials explain their updated process for notifying state officials and the public of foreign attempts to interfere in U.S. elections. As the Nov. 8 phone call with election officials across the country came to a close, Warner said he wouldn’t mince words the way one of his “silver-tongued” colleagues had done while offering feedback on the updated process. “The analogy that came to me is the realigning of the deck chairs on the Titanic,” Warner said, according to a call transcript obtained by CyberScoop. “I think this is a straightening up of the chairs: It feels good and so forth, but you’re not getting to the substance.” It was one of multiple blunt exchanges about the new threat-notification framework, which is meant to give U.S. officials a consistent process for alerting state personnel, the private sector, Congress, and […]

The post Blunt phone call shows state officials are unhappy with rollout of election security framework appeared first on CyberScoop.

Continue reading Blunt phone call shows state officials are unhappy with rollout of election security framework

DNC to Silicon Valley on disinformation: do better

The Democratic National Committee is calling on companies including Facebook, Twitter, and Google to step up their efforts to protect against disinformation on their platforms in the buildup to the 2020 presidential elections. The DNC’s recommendations, which it issued Monday, range from platforms promoting authoritative news outlets to establishing policies to prevent the automated spread of disinformation. The DNC is also calling on the companies to take a harder line against state-backed media, and to share more details about disinformation campaigns online to try enhancing the research community’s ability to understand political disinformation. “While progress has been made since the 2016 elections, platforms still have much to do to reduce the spread of disinformation and combat malicious activity,” the DNC writes. The recommendations show the Democratic Party, just a little over two months before the Iowa Democratic caucuses, rallying behind the idea that tamping down disinformation can help ensure a political […]

The post DNC to Silicon Valley on disinformation: do better appeared first on CyberScoop.

Continue reading DNC to Silicon Valley on disinformation: do better

RNC, DNC bank on Duo authentication ahead 2020 election

The Republican National Committee is relying on authentication tools and careful social media behavior in order to avoid a devastating data breach like the kind that derailed its Democratic counterparts in 2016. The RNC, which develops and promotes the party’s platform and currently supports President Donald Trump’s re-election campaign, is banking on Duo Security, which specializes in multi-factor authentication, to keep state-sponsored hackers out of party accounts, according to recent Federal Election Commission filings. Even if a user’s password credentials are stolen, an extra layer of authentication can ensure that only the legitimate account holder could access his or her communications. Since March of this year, the RNC has paid just over $1,000 per month to Duo, according to FEC filings. The RNC started using Duo in 2016, just days before the election. And it’s not just email account access the RNC is trying to protect — the RNC uses multiple layers of authentication to protect other […]

The post RNC, DNC bank on Duo authentication ahead 2020 election appeared first on CyberScoop.

Continue reading RNC, DNC bank on Duo authentication ahead 2020 election

Here’s what Pete Buttigieg’s campaign CISO is worried about

Although the 2020 presidential race has become more crowded in recent weeks, Mick Baccio — the chief information security officer for Democratic presidential candidate Pete Buttigieg’s campaign — isn’t concerned. Baccio may be the only person on the South Bend, Indiana, mayor’s staff that isn’t worried about former Massachusetts Gov. Deval Patrick, Sen. Elizabeth Warren, former Vice President Joe Biden or any of the other candidates. For him, the competition is foreign adversaries trying to hack into Buttigieg’s campaign infrastructure. “I don’t do politics. I’m just learning how the caucus works,” Baccio said during remarks at CYBERWARCON, a cybersecurity conference held Thursday in Arlington, Virginia. “I don’t care if it’s left or right, I care if it’s Russian or Iranian [intrusions]. That’s who I really [care about,] that’s the competitor.” His ultimate goal is making sure Buttigieg’s campaign doesn’t fall victim to the same intrusions that Hillary Clinton’s presidential campaign […]

The post Here’s what Pete Buttigieg’s campaign CISO is worried about appeared first on CyberScoop.

Continue reading Here’s what Pete Buttigieg’s campaign CISO is worried about

U.S. officials release framework for notifying public of foreign interference in elections

The Trump administration on Friday released a framework describing the process by which it would notify Congress, state and local officials, the private sector, and the public about foreign interference in U.S. elections. The framework supplements existing laws, under which the FBI and the Department of Homeland Security alert victims of cyber intrusions and other malicious activity. The document is recognition that, in cases of foreign attempts to disrupt the electoral process, more communication with the public is needed. One key factor in the notification process, according to a one-page summary released by the Office of the Director of National Intelligence, is whether public disclosure of a foreign interference operation will deter the activity and protect the public, or instead re-amplify the adversary’s message. If DHS’s cybersecurity agency or a member of the intelligence community wants to disclose foreign interference activity beyond what is required by law, an interagency group of intelligence officials will […]

The post U.S. officials release framework for notifying public of foreign interference in elections appeared first on CyberScoop.

Continue reading U.S. officials release framework for notifying public of foreign interference in elections