Collaborate Disseminate
Black Hat, DEF CON and BSidesLV take place this year amid a backdrop of COVID, cyberwarfare in Ukraine and digital attacks on Taiwan.
The post What to watch for as ‘Hacker Summer Camp’ gets underway in Las Vegas appeared first on CyberScoop.
Continue reading What to watch for as ‘Hacker Summer Camp’ gets underway in Las Vegas
The company says it became aware of the hack on Aug. 4 but it declined to say how many customers were affected by the incident.
The post Twilio, a texting platform popular with political campaigns, reports breach appeared first on CyberScoop.
Continue reading Twilio, a texting platform popular with political campaigns, reports breach
CISA’s director has 90 days to respond to the suggestions.
The post CISA advisory panel wants agency to act on election disinformation, multifactor authentication appeared first on CyberScoop.
Hackers are also widening their net to candidates’ families and friends, experts say.
The post Experts say ransomware could be bigger threat for campaigns in 2022 appeared first on CyberScoop.
Continue reading Experts say ransomware could be bigger threat for campaigns in 2022
The company insists its equipment is safe, and nobody has proof of the vulnerabilities having been used, CISA says.
The post CISA issues vulnerability advisory for select Dominion voting equipment, urges updates appeared first on CyberScoop.
This kind of activity is likely to continue or increase as the 2022 midterms approach, the FBI said.
The post Coordinated phishing campaign targeted election officials in nine states, according to FBI appeared first on CyberScoop.
The Russian government’s Jan. 14 takedown of suspects associated with the notorious REvil ransomware group was an example of increasing cooperation between the U.S. and Russian governments on cybersecurity matters, a top Russian official said Friday, but the Russian government is still waiting for U.S. reciprocation on its own cyber requests. In a wide-ranging interview, Dmitry Medvedev, the former president and prime minister of Russia and currently the deputy secretary of the country’s Security Council, called the REvil arrests a “joint operation” and “perhaps one of the few areas where, despite very problematic relations with the United States, our cooperation has intensified.” Nevertheless, he added, the Russian government is waiting for definitive answers on what the Russian government considers distributed denial-of-service (DDoS) attacks on components of its remote election infrastructure during the September 2021 State Duma elections. The U.S. government has rebutted any notion of outside interference in those elections. […]
The post Top Russian official cites REvil arrests as sign of cooperation, says Moscow is awaiting reciprocation appeared first on CyberScoop.
Bob Kolasky, head of the National Risk Management Center at CISA, announced Tuesday that he is leaving the agency. Kolasky’s work with the NRMC since its formation in 2018 has put him in the middle of the federal effort to help critical infrastructure companies assess their cyber risk. He’s also been active in a lot of other agency business. He co-chairs the Information and Communications Technology Supply Chain Risk Management Task Force, leads CISA’s work on secure 5G network development, chairs the High-Level Risk Forum for the international Organisation for Economic Co-operation and Development and serves on the executive Committee for the Election Infrastructure Government Coordinating Council. Kolasky hasn’t announced his plans after leaving the center, nor has CISA named a successor. During his 15 years of government service, CISA Director Jen Easterly said, “Bob worked tirelessly to expand collaboration across state, local, tribal, and territorial governments and the private […]
The post Bob Kolasky, head of CISA’s National Risk Management Center, leaving agency appeared first on CyberScoop.
Continue reading Bob Kolasky, head of CISA’s National Risk Management Center, leaving agency
The Michigan State Police launched a criminal investigation this week after a piece of election equipment went missing. The inquiry comes after a local official—who has publicly questioned the validity and security of the 2020 election—had refused to allow a company vendor to run maintenance on the machine. Adams Township Clerk Stephanie Scott had been stripped of her election administration authority on Monday for failing to confirm that she would follow state law in certifying that public accuracy testing had been completed. A spokesperson for the Michigan State Police told CyberScoop Friday that the agency executed a search warrant in the rural community as part of an investigation requested by the Secretary of State, but declined to offer any additional information. Neither Scott nor a spokesperson for Secretary of State Jocelyn Benson responded to requests for comment. This is the second example in recent months of election officials taking extreme […]
The post Michigan police execute warrant looking for missing election equipment appeared first on CyberScoop.
Continue reading Michigan police execute warrant looking for missing election equipment
Security personnel charged with the challenging and high-stakes work of protecting election systems from digital threats might soon have another task on their to-do list: reporting any cyber incidents to the federal government. That’s if election technology, designated critical infrastructure in 2017, falls under proposed rules requiring critical infrastructure owners and operators to notify federal officials about cyber incidents, such as attempted hacks and ransomware attacks. The idea has surfaced again in a recent Stanford Internet Observatory paper authored by a former high ranking election security official who offered recommendations for election administration reform, ranging from increased funding to centralizing election IT infrastructure at the state level. The proposals are consistent with multiple bills under consideration in Congress, where momentum is building to require operators of critical infrastructure—pipeline owners, electrical grids, and other industries key to U.S. interests—to disclose yet-to-be defined cyber “incidents” to the Department of Homeland Security, FBI […]
The post Election officials don’t need to report cyber incidents to the feds. That could soon change. appeared first on CyberScoop.