National: Even a voting machine company is pushing for election security legislation | Joseph Marks/The Washington Post

A major voting machine vendor reversed course Friday and urged Congress to pass legislation mandating paper trails for all votes as an anti-hacking protection. The company, Election Systems & Software, also pledged to no longer sell paperless voting machines as the primary voting device in an election jurisdiction and urged Congress to mandate security testing of voting equipment by outside researchers. That promise was made in an op-ed from chief executive Tom Burt published in Roll Call. Burt called such a move “essential to the future of America” and vital for restoring “the general public’s faith in the process of casting a ballot” after the 2016 election was marred by Russian attempts to hack into election systems. The call marks a major about face for ES&S, which, as recently as September, lashed out at researchers who publicly tested its voting machines for hackable vulnerabilities at the annual Def Con hackers conference. The move also comes, however, as chances look extremely slim for any election security legislation to make it out of Congress this year because of fierce opposition from Senate Majority Leader Mitch McConnell (Ky.).

National: Protecting the integrity of US elections will require a massive regulatory overhaul, academics say | Jonathan Shieber/TechCrunch

Ahead of the 2020 elections, former Facebook chief security officer Alex Stamos and his colleagues at Stanford University have unveiled a sweeping new plan to secure U.S. electoral infrastructure and combat foreign campaigns seeking to interfere in U.S. politics. As the Mueller investigation into electoral interference made clear, foreign agents from Russia (and elsewhere) engaged in a strategic campaign to influence the 2016 U.S. elections. As the chief security officer of Facebook at the time, Stamos was both a witness to the influence campaign on social media and a key architect of the efforts to combat its spread. Along with Michael McFaul, a former ambassador to Russia, and a host of other academics from Stanford, Stamos lays out a multi-pronged plan that incorporates securing U.S. voting systems, providing clearer guidelines for advertising and the operations of foreign media in the U.S. and integrating government action more closely with media and social media organizations to combat the spread of misinformation or propaganda by foreign governments.

National: Finally, a Top Voting Machine Maker Is Calling for Stronger Election Security Laws | Patrick Howell O’Neill/Gizmodo

Over the last few decades, the state of American election cybersecurity has been excoriated by hackers who hope to fix a host of glaring problems before the entire system is exploited. Voting machine makers as an industry have long pushed back against security and transparency efforts until, suddenly, this week. Tom Burt is the CEO of Election Systems & Software (ES&S), one of the biggest voting machine manufacturers in the United States. Last year, hackers gathered at the Def Con conference in Las Vegas to test the security of voting machines. While Burt’s company criticized the hackers and suggested the threat against their machines was minimal and “extremely unlikely,” the event was punctuated by an 11-year-old changing voting results and researchers finding a decade-old security flaw in an ES&S ballot counting machine used across the United States.

National: Leading voting-machine vendor vows to ditch paperless voting | Timothy B. Lee/Ars Technica

Election Systems & Software, which describes itself as the nation’s leading elections-equipment provider, has vowed to stop selling paperless electronic voting systems—at least as the “primary voting device in a jurisdiction.” And the company is calling on Congress to pass legislation mandating paper ballots and raising security standards for voting machines. “Congress must pass legislation establishing a more robust testing program—one that mandates that all voting-machine suppliers submit their systems to stronger, programmatic security testing conducted by vetted and approved researchers,” writes ES&S CEO Tom Burt in an op-ed for Roll Call. Over the last 18 months, election-security advocates have been pushing for new legislation shoring up the nation’s election infrastructure. Election-security reform proposals enjoy significant support among Democrats—who control the House of Representatives—and have picked up some Republican co-sponsors, too. However, such measures have faced hostility from the White House and from the Republican leadership of the Senate. “I don’t think there is any likelihood that we are going to move a bill that federalizes more of the election process,” said Sen. Roy Blunt (R-Mo.), a member of the Senate leadership team, last week.

National: Russia’s 2016 election interference was highly organized, but fixes for 2020 are possible: reports | Bradley Barth/SC Magazine

The campaign by Russia’s Internet Research Agency to interfere with the 2016 U.S. presidential election using fake Twitter accounts was even organized than many people realize, according to a new report from Symantec Corporation. But another new report from scholars at Stanford University prescribes more than 45 policy recommendations for how the U.S. can prevent a repeat performance of Russian meddling in 2020. The latter report, titled “Securing American Elections” represents the culmination of a study conducted by a team of scholars with expertise in areas such as cybersecurity, social media, election regulations, Russia and more. The recommendations are subdivided into seven categories: bolstering election infrastructure, regulating online political ads from foreign entities, countering election manipulation by foreign media, fighting state-sanctioned disinformation campaigns, improving transparency of foreign involvement in U.S. elections, establishing norms, and deterring future attacks.

National: McConnell Blocking Plans to Prevent Russian Election Attack | Jonathan Chait/New York Magazine

The House Judiciary Committee held hearings today on the Mueller report and its devastating findings of the Trump campaign efforts to collude with Russia, and Trump’s obstruction of justice thereof. The Republican message, articulated by ranking member Doug Collins, is that this is all in the distant past — the Mueller report came out in early spring; it’s already late spring — and we should focus on the future. “We’re not bringing Russians front and center,” he complained. “If we were attacked, then the priorities should be to go on the battlefields and not to the sideshow.” Funny thing about that: There actually are a lot of bills to safeguard the 2020 elections from the next Russian attack. Mitch McConnell is blocking all of them.

National: 5 steps to critical infrastructure collaboration | Randy James/FCW

The days of simply protecting critical infrastructure with guns, gates and guards or combating cyber threats solely with IT data and network protection are fleeting. Today’s threats are many and varied, as our physical and digital worlds become increasingly interconnected. They stretch all the way from contested regions around the globe back to the U.S. homeland — a country that is no longer the sanctuary it once was. Emerging threats — including the proliferation of weapons of mass destruction, information warfare against our election system, cyberattacks targeting both defense and civilian networks and even the recent Huawei indictments — put our nation’s military capability, critical infrastructure, democratic institutions and even the safety of everyday civilians at risk. In today’s threat landscape, our national defense strategy must incorporate a new, more robust and integrated “whole-of-nation” approach to homeland security. The plan must coordinate the assessment of defense and homeland security threats and synchronize how we address civilian critical infrastructure security and military mission assurance interdependencies. But the million-dollar question among government and industry leaders is not why we must adopt this approach — it’s how.

Editorials: Mueller and the Russian threat | James W. Pardew/The Hill

Special Counsel Robert Mueller warned Americans about the critical threat of Russian attacks on U.S. democracy in his recent valedictory press conference. Mueller’s statement is the latest alert on the urgent requirement for a comprehensive and tough national security strategy to deter and respond to future assaults on the U.S. Constitution by foreign entities. Part One of Mueller’s report on Russian interference in the 2016 U.S. election describes a brazen, wide-ranging attack by the Putin regime on the U.S. democratic system of government. Mueller found that Russian interference in the 2016 U.S. national election was sweeping and systematic. In part one, the report identified two major areas for Russian interference. The first was an aggressive social media campaign that favored presidential candidate Donald Trump and disparaged presidential candidate Hillary Clinton. Mueller states that Russian operatives on social media controlled multiple Facebook groups and Instagram accounts that had hundreds of thousands of U.S. participants. Russian Twitter accounts separately had tens of thousands of followers, all favoring one candidate or sowing discord within American society.

Editorials: Knowing It’s Right: Limiting the Risk of Certifying Elections | Tammy Patrick/Democracy Fund

Every election we ask ourselves, what motivates voters to participate? Could it be the love of a charismatic candidate? The dislike of a less-than-desirable one? Passion for a specific ballot initiative? Do voters show up to the polls out of habit? The answer is as varied as the voting population, as is the reason voters do not participate. Research shows that while voters’ confidence in their own vote being counted accurately remains relatively constant, their belief that results at the national level are correct is in decline. As we work through reestablishing trust in our elections following Special Counsel Robert Mueller’s 22-month long investigation, the threat of interference in our elections by another nation-state remains. The American public wants to believe that when they vote it means something—we are teaching elections officials about a new way to audit our elections and check for the accuracy every voter deserves. As with most election administration processes, implementation success lies in preparation—and Risk Limiting Audits (RLAs), which some proponents often refer to as the “cheap and easy” method to check the accuracy of the results, are no exception.

Florida: FBI urged to disclose Florida election hack details after ignoring request | Andrew Blake/Washington Times

The FBI faced fresh calls Friday to release additional details about the hacking campaign that compromised election systems in Florida during the 2016 U.S. presidential race. Rep. Ted Deutch, Florida Democrat, pressed for transparency nearly two months since the release of special counsel Robert Mueller’s report about Russian election interference began to reveal the scope of its success in the Sunshine State. The FBI assessed that Russian hackers infiltrated at least one Florida county government during the 2016 race, Mr. Mueller wrote in the report. Many state officials were unaware of the breach prior to the report’s publication, and individuals briefed by the FBI afterward said they were told that a total of two Florida counties had been compromised. Nearly no further details have emerged since, however, and Florida’s governor said he signed a non-disclosure agreement legally preventing him from revealing what counties were hacked.

Michigan: Three communities auditing May election results as part of election security pilot program | Lauren Gibbons/mlive.com

Michigan elections officials are continuing pilot tests of an auditing system to check election results, with the ultimate goal of perfecting a process for verifying outcomes of both local and statewide races. The pilot audit kicked off in Lansing Monday, where local and state elections officials joined national experts and observers from around the country in overseeing a “risk-limiting audit” of the results in a May ballot question regarding a millage for the Lansing School District. The risk-limiting audit process relies on a mathematical formula to randomly select ballots for auditors to review, and is intended to detect any potential irregularities that could have influenced the outcome of the election. Colorado currently uses risk-limiting audits to test election results.

North Carolina: With Guilford and Mecklenburg voting machines facing decertification, confusion looms for 2020 election | By Will Doran/Greensboro News & Record

Roughly a third of North Carolina voters use electronic machines with no paper ballots. But that might all change next year for the 2020 presidential election. Supporters of the change say it will help ensure election security, especially given reports from the FBI and other sources that the Russian government attempted to influence America’s 2016 elections and may have hacked into some U.S. voting software. But the switch has been held up for years, despite first being ordered in a 2013 law. Now, some officials — including some in Guilford County and the new state elections director — worry that there’s not enough time left to get new voting systems in place for the 2020 elections. Guilford County uses an electronic machine with a paper backup, said Chris Duffey, deputy director of the Guilford County Board of Elections. However, these DRE touch-screen machines, which use electronic ballot counting as opposed to paper tabulation, will be decertified by state law effective Dec. 1, he said. The law, adopted in 2013, aims to thwart cyber hackers who might have the skills to manipulate digital election results.

North Carolina: Laptops used in 2016 North Carolina poll to be examined by feds – after 2.5 years | Lisa Vaas/Naked Security

More than two and a half years after the fact, the Feds are finally going to investigate the failure of voter registration software – from a ­company that had been cyber-attacked by Russians just days before the November 2016 US presidential election – in the swing state of North Carolina. Politico has reviewed a document and spoken to somebody with knowledge of the episode, both of which suggest that the vendor, VR Systems, “inadvertently opened a potential pathway for hackers to tamper with voter records in North Carolina on the eve of the presidential election.” Specifically, VR Systems used remote-access software to connect for several hours to a central computer in Durham County so as to troubleshoot problems with the company’s voter registration software. In fact, election officials would come to find out that this was common practice, according to Politico’s source, in spite of the fact that election technology security experts agree that it opens up systems to hacking.

Ohio: Students find new uses for old Ohio voting machines that shouldn’t have been sold to Dispatch | Marc Kovac/The Columbus Dispatch

Government offices have different ways of dealing with stuff they formally declare is no longer needed. Electronics often are shipped to a recycler, but furniture, vehicles, clothing and other items sometimes are offered for sale to the general public. Licking County offers old equipment, confiscated property and other items on GovDeals.com, an online auction site used by government offices across the country. For a couple of months earlier this year, the county’s board of elections posted a handful of different auctions for “Diebold AccuVote-TSx” voting machines, purchased for $2,700 each in 2005 and ’06. The lots sold for between $7 and $19. “Be Creative… what could I do with a Used Voting Machine?,” the auction listing read. The Dispatch took the suggestion literally and bought one lot of five machines at a cost of $3.40 each, receiving touchscreen units and stands, along with headphones, keypads, memory cards, keys and voter access cards. The actual elections software was removed before the sale, but the units were otherwise functional.

South Carolina: Company that courted South Carolina elections chief wins $51M bid for new voting machines | Tom Barton/The State

South Carolina voters will get a paper printout of their completed ballots starting next year, when the state puts in place some 13,500 new voting machines. State officials on Monday announced that a $51 million contract had been awarded to Election Systems and Software, the nation’s largest voting equipment vendor, to provide the new voting machines which promise more security in producing a paper ballot. ES&S has a lengthy history with South Carolina. The company provided the state’s existing voting system, in place since 2004. The paperless system has drawn increasing scrutiny, raising questions about accuracy of counting votes and whether the system is vulnerable to hacking. The company also has ties to elections officials in South Carolina and other states, an investigation by McClatchy and The State revealed. Marci Andino, executive director for the S.C. State Election Commission, formerly served on an advisory panel to the company, which treated her and elections officials from other states to trips to Las Vegas and elsewhere. Andino said she ran her trips by state ethics officials and has stepped down from the advisory role with ES&S prior to the state’s efforts to procure a new voting system.

South Carolina: State chooses new voting machines that will print paper ballots but some fear it’s not safe | Mike Fitts/Post and Courier

Beginning with the presidential primary next year, South Carolina voters will mark their choices on paper ballots by touching digital screens under a new $51 million voting system announced Monday by the state Election Commission — a choice criticized by a civic group that advocates for safe balloting. Under the system made by Election Systems & Software, voters will put their paper ballot into a touchscreen system and choose their candidates. They print out a completed ballot to review their selections and then put the ballot into a scanner to formally record their votes. … The League of Women Voters of South Carolina, however, was disappointed in the choice. The group sees this system as overly elaborate and possibly vulnerable to hacking or other mischief, especially when compared with a simple paper ballot.

International: Russians’ US election interference has inspired copycats around the world: US study | Charissa Yong/The Straits Times

Russia will not be alone in trying to interfere with the next American election, and other copycats are using similar techniques against other democracies around the world, Stanford University researchers have warned in a report. Russian influence operations used against America during its 2016 presidential election – from brigades of online impostors deepening pre-existing social divisions to hacking operations and obvious propaganda – have been picked up around the world, they said. “American policymakers rightly are focused on threats to election integrity in the United States in the run-up to the 2020 presidential vote, but these threats are part of a much larger, ongoing challenge to democracies everywhere,” said the report titled “Securing American elections”, which was released on June 5. The 96-page report was written by 14 authors, including former US ambassador to Russia Michael McFaul and former Facebook chief security officer Alex Stamos, who headed the social media giant’s investigation into 2016 election manipulation before he joined Stanford University in August last year.

Russia: Putin says Russia didn’t meddle in US vote, despite evidence | Gary Pruitt/Associated Press

Russian President Vladimir Putin on Thursday reaffirmed his staunch denial that his government meddled in the 2016 U.S. presidential election despite the extensive evidence to the contrary, and insisted Moscow has no intention of interfering in any future votes, either. Speaking in response to a question from The Associated Press during a meeting with chief executives of international news agencies in St. Petersburg, the Russian leader said that “we didn’t meddle, we aren’t meddling and we will not meddle in any elections.” Putin and other Russian officials have hotly denied any interference with the U.S. vote to help Donald Trump win the presidency, even though U.S. special counsel Robert Mueller has uncovered evidence of a Kremlin operation to interfere with the 2016 vote. He charged 12 Russian military intelligence officers with breaking into Democratic Party emails, and also indicted other Russians who used phony social media accounts to spread divisive rhetoric and to undermine the U.S. political system.