Category Archives: Matthew Masterson

A former top US election official urges sweeping security improvements, warning ‘democracy is in trouble’

Posted on by

The Cybersecurity and Infrastructure Security Agency’s former lead election security official is recommending comprehensive changes to protect the ballot in future elections, from physical safety upgrades for election workers and federal agency revamps to mandated disclosure of cyber incidents. A report published Thursday from former CISA election adviser Matt Masterson, who now works for Stanford’s Internet Observatory Cyber Policy Center, is a response to the complications that surrounded the 2020 elections. Namely, 2020 was marred by misinformation that undermined public faith in elections, inconsistent funding to mitigate IT vulnerabilities and threats against election officials, the report concludes. The battle over the 2020 presidential race rages on, with the GOP pushing partisan election reviews in several states despite numerous recounts that concluded with Joe Biden as the victor. “Our democracy is in trouble,” Masterson told CyberScoop. “We are in a downward spiral of distrust of the process. If we don’t make […]

The post A former top US election official urges sweeping security improvements, warning ‘democracy is in trouble’ appeared first on CyberScoop.

Continue reading A former top US election official urges sweeping security improvements, warning ‘democracy is in trouble’→

Matt Masterson, CISA’s top election security official, to step down

Posted on by

Matt Masterson, one of the U.S. government’s top election experts, is leaving his post as of next week for a role in academia where he will continue to study the disinformation campaigns that have plagued the country, he told CyberScoop on Thursday. Masterson has been a senior adviser at the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency since 2018. He led a team that reassured the public that the 2020 election was secure, despite President Donald Trump’s baseless assertions to the contrary. Masterson will join the Stanford Internet Observatory, a team of academics and tech experts led by former Facebook security chief Alex Stamos, which works on election security and social media challenges. Masterson said his last day at CISA will be Dec. 18. At Stanford, “We’re going to unpack what we’ve learned over the last few years [on election security],” Masterson said in an interview, including “what […]

The post Matt Masterson, CISA’s top election security official, to step down appeared first on CyberScoop.

Continue reading Matt Masterson, CISA’s top election security official, to step down→

Securing voter registration databases takes on added importance in pandemic, DHS official says

Posted on by

The expansion of voting by mail during the coronavirus pandemic makes it all the more important that election officials secure voter registration databases from hacking, according to a senior Department of Homeland Security official. The greater amount of absentee voting and mail-in ballots “shifts the risk towards voter registration data security,” Matt Masterson, senior adviser at DHS’s Cybersecurity and Infrastructure Security Agency, said Wednesday during a virtual conference. People voting by mail generally won’t have access to the same provisional-balloting process that those voting in person can use if they’ve been left off of voter rolls due to an administrative error. That makes the integrity of voter registration data all the more important in the era of COVID-19, Masterson said. The novel coronavirus, which has killed more than 120,000 people in the U.S., has forced many states to postpone presidential primaries and ramp up voting-by-mail options. Forty-six states currently offer all of their voters some form […]

The post Securing voter registration databases takes on added importance in pandemic, DHS official says appeared first on CyberScoop.

Continue reading Securing voter registration databases takes on added importance in pandemic, DHS official says→

Election commission hires cybersecurity expert to help states with 2020 infrastructure

Posted on by

The federal agency that oversees funding for states to secure their election equipment is hiring a cybersecurity expert versed in voting technology as it prepares for the 2020 election. Joshua Franklin will start in the coming weeks in a top cybersecurity position at the Election Assistance Commission, according to multiple people familiar with the matter. It is an effort by the EAC, a tiny agency with a big responsibility, to bolster the cybersecurity expertise it has on staff. Franklin, who spent six years as an engineer at the National Institute of Standards and Technology, is expected to protect EAC networks from hacking threats and support the commission’s cybersecurity work with state and local election officials. Franklin has been working as an election security advocate for years, drawing attention to the issue at hacking conferences. In 2018, Franklin presented research at DEF CON comparing the vulnerabilities in the websites of House and Senate candidates for the […]

The post Election commission hires cybersecurity expert to help states with 2020 infrastructure appeared first on CyberScoop.

Continue reading Election commission hires cybersecurity expert to help states with 2020 infrastructure→

Lawmakers offer Illinois election work as blueprint to secure 2020

Posted on by

U.S. lawmakers on Tuesday heard from Illinois officials who were on the front lines of Russia’s interference in the 2016 election in a hearing that held the state up as a model for election security. Since Russian hackers breached Illinois’ voter registration database in 2016, Illinois officials have set up an internal computer network to better protect voter data, established a “Cyber Navigator” program that embeds IT specialists in local election offices, and used the Illinois National Guard to protect the 2018 midterm vote. “It’s my hope that programs such as this can serve as models for other states,” said Rep. Lauren Underwood, D-Illinois, vice chairwoman of the House Homeland Security Committee, which held the hearing. She was referring to the Cyber Navigator program, to which Illinois has dedicated roughly $6.9 million, the great majority of it federal grant money. To build on progress in Illinois and elsewhere, election security experts have called for larger […]

The post Lawmakers offer Illinois election work as blueprint to secure 2020 appeared first on CyberScoop.

Continue reading Lawmakers offer Illinois election work as blueprint to secure 2020→

The key to protecting the midterms is resilience for election systems, experts say

Posted on by

With less than three weeks until the midterm elections, a lot of work has gone into preparing for the threat of election interference. But experts speaking at the CyberTalks conference on Thursday acknowledged that disaster could still strike, and that the officials who run U.S. elections have to be armed with proper resources and resilient systems. “We’re not seeing activity right now relating to direct election hacking. We’re not seeing anything right now along the lines of 2016, and that frankly makes me a little nervous,” said Homeland Security Undersecretary Chris Krebs. “So we’re working aggressively with our partners, the state and local [officials] to work through what an adversary could do with a two-and-a-half-week lead-up to the midterm elections.” U.S. intelligence officials have stressed over the past two years that Russia attempted to interfere in the 2016 election. Krebs said the hope is now to avoid a “failure of […]

The post The key to protecting the midterms is resilience for election systems, experts say appeared first on Cyberscoop.

Continue reading The key to protecting the midterms is resilience for election systems, experts say→

DHS, Microsoft to brief states on latest Russian intelligence activity

Posted on by

The Department of Homeland Security will hold a conference call for Microsoft representatives to brief state election officials on new evidence showing Russian hackers have targeted the U.S. Senate and conservative think tanks, according to senior DHS cybersecurity adviser Matthew Masterson. The goal will be to turn Microsoft’s observations into actionable security advice for state officials as the November midterms approach. The conference call, which Masterson said had not been scheduled yet, will be an opportunity for state officials to study the latest techniques from the Russian hacking group, often known as Fancy Bear, that breached Democratic Party organizations in the 2016 U.S. presidential campaign. Speaking to reporters Tuesday, Masterson said Microsoft’s takedown of internet domains allegedly set up by Fancy Bear showed “a growing interaction and relationship that we have with industry.” Asked if he anticipated that private companies would need to take similar action in the future, Masterson said the Russian […]

The post DHS, Microsoft to brief states on latest Russian intelligence activity appeared first on Cyberscoop.

Continue reading DHS, Microsoft to brief states on latest Russian intelligence activity→

Election exercise pairs states with intelligence community in unprecedented opportunity

Posted on by

Forty-four states took part in an unprecedented election-security exercise last week that offered a crucial opportunity for electoral officials to interact with federal agencies with some of the most vaunted cyber capabilities in the government. This elaborate a security exercise simply didn’t happen in 2016: before the Russian government’s sweeping intervention in the U.S. election, it was hard to imagine the need for local and state officials to drill with the National Security Agency and U.S. Cyber Command. But with 2016 fresh in their minds, those officials have warmed to the idea. “The biggest obstacle that we had in 2016 was communication, and so I think a lot of those barriers have been torn down and states are more willing to hear from the federal government,” Election Assistance Commission Commissioner Thomas Hicks told CyberScoop. “[O]ne of the most valuable parts” of the drill, Hicks added, was that it drove home for state […]

The post Election exercise pairs states with intelligence community in unprecedented opportunity appeared first on Cyberscoop.

Continue reading Election exercise pairs states with intelligence community in unprecedented opportunity→

Election security legislation gains attention on Capitol Hill

Posted on by

Senators are making a renewed push to secure voting infrastructure ahead of the midterm elections through measures that would boost states’ cooperation with U.S. intelligence agencies and require the use of paper ballots. As the Senate considers an annual defense policy bill, Sen. Amy Klobuchar, D-Minn., is urging support for a bipartisan amendment that would tighten cyberthreat information sharing between states and the intelligence community. “With the new kind of [information] warfare we’re seeing,” Klobuchar said Tuesday at a Senate Judiciary Committee hearing, failing to update U.S. law would be “a very big lost opportunity.” The Secure Elections Act sponsored by Klobuchar and Sen. James Lankford, R-Okla., would task the Department of Homeland Security – which is already a hub for passing intelligence from federal to state officials – with quickly sharing election-related threats with all state election agencies. The bill also aims to speed up the security-clearance process for state […]

The post Election security legislation gains attention on Capitol Hill appeared first on Cyberscoop.

Continue reading Election security legislation gains attention on Capitol Hill→

DHS official: States will probably know first if malicious cyber-activity hits primaries

Posted on by

The Department of Homeland Security is on standby to alert state officials about any malicious cyber-activity during Tuesday’s primary elections, but the states themselves will likely know first if something is amiss, Matthew Masterson, a senior cybersecurity adviser at DHS, told CyberScoop. With voters going to the polls in eight states, Tuesday’s primaries are a chance for DHS to test the communication protocols it has sought to ingrain in election personnel across the country. State officials, who generally have the best views of their networks, will flag potentially malicious activity for DHS, which can in turn alert other states, according to Masterson. “If we see or have information to suggest something is going on, we have the ability to immediately share it with the states,” he said in an interview. Ahead of the midterm elections, DHS has looked to “ramp up” its cyberthreat reports to state officials to get them information that […]

The post DHS official: States will probably know first if malicious cyber-activity hits primaries appeared first on Cyberscoop.

Continue reading DHS official: States will probably know first if malicious cyber-activity hits primaries→