FBI director: Hackers will struggle to attack U.S. voting system because it is 'clunky as heck'

The upcoming U.S. presidential election will be inherently difficult for hackers to attack because of the system’s reliance on unsophisticated, old and clunky voting hardware that is managed by local and regional volunteers, FBI Director James Comey told an audience of former and present government officials, security vendors and journalists, Thursday.

The upcoming U.S. presidential election will be inherently difficult for hackers to attack because of the system’s reliance on unsophisticated, old and “clunky” voting hardware, FBI Director James Comey said Thursday in front of an audience of former and present government officials, security vendors and journalists, Thursday.

“The beauty of the American voting system is that it is dispersed among the 50 states, and it is clunky as heck,’’ said Comey. “A lot of people have found that challenging over the years, but the beauty of that is it’s not exactly a swift part of the internet of things, and so it is hard for an actor to reach our voting process.’’

Though Comey, whose comments came at the 2016 Intelligence & National Security Summit in Washington, D.C., declined to comment directly on an ongoing investigation into two, recently disclosed data breaches affecting state voter databases in Arizona and Illinois.

The FBI Director explained that the Bureau takes “very seriously the notion that a nation state actor is messing with our democratic election process.”

“The FBI’s job now is to work very hard to understand that threat, all dimensions of it, so we can present our policy makers with the information they need,” he added.

Comey’s appearance comes at a time when lawmakers and the public are growing increasingly worried about electronic sabotage disrupting the November election.

Russian President Vladimir Putin denied that the Kremlin was involved in hacking the aforementioned voter databases during a Bloomberg interview last week. Even so, circumstantial evidence uncovered by private, Arlington, Va.-based cybersecurity firm ThreatConnect suggests otherwise; tying those same attacks on American voter databases to old email phishing campaigns believed to have been conducted by a group with connections to Russian intelligence.

Election cybersecurity has become a hot button issue over the last several months for the Department of Homeland Security and Federal Bureau of Investigation. Homeland Security Secretary Jeh Johnson previously said that his department is weighing whether or not to reclassify election systems as critical infrastructure, a move that would likely augment election cybersecurity funding and oversight capabilities.

AI-fueled attacks pose ‘active threat’ to water, other sectors, U.S. agencies warn

The agencies said the hackers are taking aim at Siemens S7 Series programmable logic controllers in what could be a first.

The surveillance law Congress can’t quit — and can’t explain

Iranian hackers launching disruptive attacks at U.S. energy, water targets, feds warn

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure