Former HHS CISO to join voting technology vendor as security lead

The former CISO of the Department of Health and Human Services is taking a role at one of the country's largest voting machine manufacturers as its head of security.

The former chief information security officer of the Department of Health and Human Services is taking a role at one of the country’s largest voting machine manufacturers as its head of security.

ES&S announced on Wednesday that Christopher Wlaschin will be its new vice president of systems security responsible for the company’s security efforts, including that of its products as well as operational and infrastructure security. He will be involved in ensuring the security of ES&S’s products and engaging in the certification process they undergo in order to be used in elections, the company announced Wednesday.

“Our priority at ES&S is developing resilient, auditable and secure voting software and equipment to support our customer’s mission of delivering secure, fair and accurate elections,” said ES&S CEO Tom Burt.

Wlaschin departed as CISO of HHS last month, which he has said was due to family medical issues. Surrounding his departure, however, was controversy over an investigation of two of Wlaschin’s subbordinates at HHS. The agency’s inspector general is reportedly investigating, Leo Scanlon, the deputy CISO, and Maggie Amato, the former director of the Health Cybersecurity and Communications Integration Center (HCCIC), for ethics violations. Scanlon and Amato were reassigned in September from working on HCCIC, which they said happened “abruptly and without warning.”

Amato has since resigned and Scanlon has been on paid administrative leave. Both claim they were improperly pushed out of the agency.

Amid increased national attention on election security and the potential threat of foreign election hacking, voting technology vendors have been subject to increased public scrutiny. The Department of Homeland Security, which is leading the federal government’s election security efforts, established a sector coordinating council in February to collaborate with vendors on the issue. ES&S is a member of the working group.

Apart from HHS, Wlaschin has held cybersecurity roles at the Department of Defense, Department of Veterans Affairs, National Research Corporation, and the University of Nebraska.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure