National: Voting on Your Phone: New Elections App Ignites Security Debate | Matthew Rosenberg/The New York Times

For more than a decade, it has been an elusive dream for election officials: a smartphone app that would let swaths of voters cast their ballots from their living rooms. It has also been a nightmare for cyberexperts, who argue that no technology is secure enough to trust with the very basis of American democracy. The debate, long a sideshow at academic conferences and state election offices, is now taking on new urgency. A start-up called Voatz says it has developed an app that would allow users to vote securely from anywhere in the world — the electoral version of a moonshot. Thousands are set to use the app in this year’s elections, a small but growing experiment that could pave the way for a wider acceptance of mobile voting. But where optimists see a more engaged electorate, critics are warning that the move is dangerously irresponsible. In a new report shared with The New York Times ahead of its publication on Thursday, researchers at the Massachusetts Institute of Technology say the app is so riddled with security issues that no one should be using it.

National: MIT researchers identify security vulnerabilities in voting app | Abby Abazorius/MIT News

In recent years, there has been a growing interest in using internet and mobile technology to increase access to the voting process. At the same time, computer security experts caution that paper ballots are the only secure means of voting. Now, MIT researchers are raising another concern: They say they have uncovered security vulnerabilities in a mobile voting application that was used during the 2018 midterm elections in West Virginia. Their security analysis of the application, called Voatz, pinpoints a number of weaknesses, including the opportunity for hackers to alter, stop, or expose how an individual user has voted. Additionally, the researchers found that Voatz’s use of a third-party vendor for voter identification and verification poses potential privacy issues for users.

National: CISA and states tell Senate more cybersecurity resources needed | Benjamin Freed/StateScoop

State IT officials and the federal government’s top civilian cybersecurity official told members of the U.S. Senate Tuesday that the federal government needs to provide state and local governments with more assistance and expertise in protecting their networks and other critical infrastructure. Chris Krebs, director of the Cybersecurity and Infrastructure Security Agency; Michigan Chief Security Officer Chris DeRusha; and Amanda Crawford, executive director of the Texas Department of Information Resources, each told members of the Senate Homeland Security Committee that while collaboration on cybersecurity between states and the federal government has improved in recent years, funding and resources for those activities are still in short supply. Krebs acknowledged his agency was not built to support state and local governments when it became the Department of Homeland Security’s newest branch in late 2018. But with ongoing threats to election security and a spike in ransomware attacks against local governments, he said, “we have had to build out our support to states.”

National: How Can State and Local Agencies Better Collaborate on Cybersecurity? | Phil Goldstein/StateTech Magazine

Some state governments, such as Massachusetts, have established formal plans to work with localities within their states on cybersecurity. However, as ransomware attacks proliferate across the country and strike big cities and small towns alike, state-level organizations say there needs to be greater IT security coordination between states and municipalities. Last month, the National Governors Association and the National Association of State Chief Information Officers released a report, “Stronger Together: State and Local Cybersecurity Collaboration,” designed to showcase best practices for such collaboration. “State governments are increasingly providing services to county and municipal governments, including endpoint protection, shared service agreements for cyber defensive tools, incident response and statewide cybersecurity awareness and training,” the report notes. At a minimum, the report says, increased engagement can provide government agencies with “a more accurate threat picture to enhance state and local governments’ cyber posture.” Yet agencies need to move beyond mere information sharing to “leverage limited resources for enhanced cyber capabilities,” the report notes.

National: Russia will try to meddle in 2020 U.S. election, intelligence report says | Courtney Kube/NBC

Russia interfered in Western elections in 2019 and is likely to do so again in 2020, according to the latest annual threat assessment by the Estonian Foreign Intelligence Service. NBC News obtained an exclusive preview of the annual report from the Baltic nation’s intelligence agency, which warns that Russia will continue to pursue cyber operations that threaten other nations. “Russia’s cyber operations have been successful and, to date, have not been sanctioned enough by the West to force Russia to abandon them,” the report says. Russia will try to interfere in the U.S. presidential election in November and in parliamentary elections in the nation of Georgia in October, it warns, saying, “The main goal is to ensure a more beneficial election result for Russia by favoring Russian-friendly candidates or those who have the most divisive influence in the West.”

Florida: Palm Beach County elections office hit by ransomware before 2016 election | Hannah Morse/The Palm Beach Post

Current Palm Beach County elections supervisor Wendy Sartory Link said she recently learned about a 2016 ransomware attack at the elections office. Weeks before the 2016 election that would usher in Donald Trump as president, the Palm Beach County Supervisor of Elections Office was subject to a ransomware attack, elections supervisor Wendy Sartory Link told The Palm Beach Post on Wednesday. The attack more than three years ago happened while Susan Bucher was elections supervisor, but Link said she was unsure how the virus infiltrated the system. “We weren’t part of that, but have we been hacked in Palm Beach County? Yeah, we have,” Link said during an editorial board interview. But Link said she does not believe the ransomware attack against the county is one of the two Russian hacking attempts in Florida revealed in former Special Counsel Robert Mueller’s report last April.

Kansas: Senate panel considers bill requiring paper ballots in Kansas elections | Sydney Hoover/The Topeka Capital-Journal

The Senate Ethics, Elections and Local Government committee heard testimony Wednesday on a bill that would require all Kansas counties to use paper ballots to count votes. Ballots would have several requirements, including the voter’s signature. Votes would be counted by hand or using vote-tabulating equipment that would tally the paper ballot. “At one time, everything was paper ballots, but now Kansas currently has a mix,” said Sen. Richard Hildebrand, R-Baxter Springs. “Once you cast your ballot, you are up to whatever the machine says you voted without the verification from the voter.” Hildebrand said the bill would eliminate the chance of issues such as those during the Iowa caucuses, where a faulty mobile application failed to transmit votes and caused a delay in results.

Louisiana: How Louisiana ended up this year’s election security outlier | David Hawkings/The Fulcrum

The moment of truth for voting system reliability remains nearly nine months off, but already Louisiana has earned itself a troublesome and unique footnote in the story of the 2020 presidential election. It will surely be the only state running totally afoul of the new world of balloting best practices, which says creating and keeping a paper record is the only way to assure every vote is counted accurately (and recounted if need be) and properly reflects the will of the voter. There won’t be a single sheet of paper involved in tabulating the results in Louisiana on Election Day — unlike any of the other 49 states, according to a comprehensive study by Verified Voting, a nonpartisan group that promotes the integrity of elections. All 3,934 polling places will use entirely electronic voting machines that are at least 15 years old, and which do not generate printouts of anything as a fail-safe if something goes wrong.

Tennessee: Ballot Bombshell: Election Machine Issue In Shelby County Becomes Moot | Jackson Baker/Memphis News and Events | Memphis Flyer

Some drama was expected, but nothing like the more-than-audible gasp that exuded from the audience at Monday’s meeting of the Shelby County Commission, when Tami Sawyer articulated what was suddenly and shockingly becoming obvious: “There will be no new machines in 2020,” said Sawyer, summarizing it all in an epiphany after an hour or so of intense debate and argument on both sides of the speakers’ dock regarding what sort of new voting machines the county should get in its long-planned buy in time for the August election cycle locally. County Election Coordinator Linda Phillips had been making and repeating that promise of new machines for most of the last year, kindling up an ever-growing local controversy as to which type of machine. On Sunday she had published a viewpoint in The Commercial Appeal in which the following two sentences were the key ones: “Now that we are about to replace our outdated voting equipment, the controversy has reached the boiling point. I have spent my career conducting elections, and I’d like to share my viewpoint.”

Utah: Lawmaker says Iowa caucuses a cautionary tale for online voting | Art Raymond/Deseret News

Issues in the recent Iowa Democratic caucuses with a smartphone app are a further reminder, according to one Utah lawmaker, that the state should move slowly and deliberately toward any future change to a statewide online voting system.

To that end, Rep. Mike McKell, R-Spanish Fork, is sponsoring a proposal to spend some 20 months on a study to determine what, if any, digital voting system is secure enough to trust with running Utah elections. That proposal, HB292, got unanimous support from the House Government Operations Committee on Wednesday and is now headed to the full body for further consideration. Ahead of the meeting, McKell told the Deseret News the proposed study isn’t due until October 2021 and would have no impact on the upcoming general election, nor the 2021 off-year municipal elections. The goal of the study, McKell said, is to take the necessary time to do a thorough assessment of the potential advantages, and pitfalls, of moving the voting process into the digital realm. “I think we need to slow things down and commit to a thorough review of internet voting,” McKell said. “I think there are a lot of pressures in play to use new technologies and take advantage of efficiencies they can bring. “But we just saw a whole host of problems in Iowa … that are a reminder that we’re just not there yet.”

Wisconsin: Cities Still Recovering From January Cyberattacks | Miranda Suarez/Wisconsin Public Radio

Two Wisconsin cities are still recovering after they were hit with ransomware in January, and one state official predicts those kinds of attacks will only get worse in the future. Ransomware is a kind of cyberattack that locks governments or companies out of their data, usually demanding money in exchange for access. It often enters a system through phishing emails, which contain a shady link or attachment. Ransomware shut down internal computer systems, like email, in Oshkosh and Racine on Jan. 28 and Jan. 31, respectively. Oshkosh city spokesperson Emily Springstroh said the city is mostly back online, but they don’t know yet how the virus got in.

Bulgaria: Government will buy voting machines for all polling stations | The Sofia Globe

The Bulgarian government will provide funds to buy voting machines so that there is one at each polling station at the next elections, Prime Minister Boiko Borissov told a Cabinet meeting on February 12. He added, however, that he was not convinced that this would solve anything. In 2019, Bulgaria’s Parliament amended the Electoral Code to require the use of 3000 voting machines in last year’s presidential elections, 6000 in the municipal elections, and in National Assembly elections. Ahead of the autumn 2019 municipal elections, the law was amended again, to remove the requirement for the use of machines in that vote. That followed a Central Electoral Commission (CEC) analysis after the European Parliament elections that the deployment of voting machines – the first time they had been used on a large scale in Bulgaria – had created a number of difficulties.

Iran: U.S. must increase defenses against Iranian information operations, report says | Sean Lyngaas/CyberScoop

As social media platforms battle Iranian bots and trolls, the U.S. government needs to step up its own fight against Tehran’s digital influence operations, a new study says. With the 2020 election approaching, Washington should do more to attribute Iranian and other foreign influence operations and warn the public about them, scholars at the Atlantic Council think tank argue. “Iran has invested significant resources and accumulated vast experience in the conduct of digital influence efforts,” the report says. It calls on the Department of Homeland Security to create an intergovernmental agency to alert U.S. officials and the public of foreign influence operations. U.S. intelligence agencies need to work closely with social media companies to pinpoint foreign influence operations, Atlantic Council scholars Emerson Brooking and Suzanne Kianpour’s advise. That collaboration is a work in progress.

Taiwan: Taiwan’s Electoral System Puts the US to Shame | Dominique Reichenbach/The Diplomat

The looming 2020 U.S. presidential election will no doubt spark debate about the electoral college yet again, and the delayed and contested results from the Iowa caucus, the first test in the Democratic primary process, have already brought outrage. With that background in mind, the United States could learn a valuable lesson about improving democratic participation and voting processes from Taiwan. At 4:30 p.m. on January 11, 2020, a polling station in a first-floor classroom of Longan Elementary School in Da’an District of Taipei transformed into a paragon of democracy and civic engagement. An audience of 15 Taiwanese adults and children watched quietly as a man, on stage right in the theater of democracy, reached into a ballot box, pulled out a messy stack of pink papers and passed them one by one to a female announcer. The announcer held the first ballot high above her head and called “Number 3 Tsai Ing-wen Ticket” in a strikingly clear voice, breaking the silence of the room. A woman behind her etched a tally in Tsai’s column on the official tracking sheet, marking the beginning of the election count.