DHS Secretary: No election day cyberattacks

Despite warnings during the that there might be attempts by Russian hackers to disrupt or even influence the outcome of U.S. elections, authorities on high alert across the country last week detected no major cyber attacks or untoward online activity directed at election infrastructure, Homeland Security Secretary Jeh Johnson said Monday.

Despite warnings during that there might be attempts by Russian hackers to disrupt or even influence the outcome of U.S. elections, authorities on high alert across the country last week detected no major cyber attacks or untoward online activity directed at election infrastructure, Homeland Security Secretary Jeh Johnson said Monday.

“In connection with the election, we did not see anything that I would characterize as significant,” he told the Bloomberg Next forum in D.C., “There were minor incidents of the type that people might expect, but nothing of significance.”

In August, Johnson very publicly warned the 9,000-plus state and local authorities which run U.S. national elections that there might be online attacks or cyber-espionage aimed at disrupting the election — although he also expressed the conviction that the results could not be impacted as even electronic voting machines were not connected to the internet.

As a result of that appeal, he said, “We had outreach from something like 48 states, which I was very pleased about — and we had something like 36 or 38 states ask for and accept our cybersecurity assistance in the run up to Nov. 8.”

He said that specialist cybersecurity teams from the Department of Homeland Security “identified some vulnerabilities [in states’ election-related IT infrastructure] which I would categorize as not … earth-shattering,” but that in any case there were no major attacks on polling day.

Over the summer, DHS officials speculated out loud about the possibility of designating election systems as “critical infrastructure” — a categorization that would give the department additional authorities to aid local governments if they asked for it. The possibility was vociferously rejected by some state officials who saw it as an unwarranted federal power grab.

Johnson said the move would not happen unless their was a demand for it from state and local governments. “It’s something that I will continue to discuss with secretaries of state and we’ll reach an assessment at some point, but not without close consultation with them,” he said.

Tina Peters, through attorney, backs off formal role in Shasta County elections

Peters still left the door open to working with Shasta County on elections and doubled down on her statements that electronic voting machines should be discontinued.

Election official says Tina Peters would be consultant, won’t have access to election systems

Retail theft bill spurs ‘very large and very dangerous’ surveillance fears

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure