National: CISA publishes cyber toolkit for election officials ahead of midterms | Benjamin Freed/StateScoop
The Cybersecurity and Infrastructure Security Agency on Wednesday released a guide to digital threats facing state and local election officials and recommendations on how to mitigate them in the run-up to November. The “Cybersecurity Toolkit to Protect Elections” aims to help election administrators and their staffs protect themselves against threats including phishing, ransomware, email scams, denial-of-service attacks and other vectors that could potentially disrupt the voting process or confuse voters. The guide notes, for instance, that election officials “are often required to open email attachments, which could contain malicious payloads,” to run processes like absentee ballot applications. It also warns that a ransomware attack against an election office could scramble or leak voter registration data or the software used to publish unofficial election results. The cyber toolkit is the latest output from CISA’s Joint Cyber Defense Collaborative, or JCDC — the year-old initiative borrows its name from the band AC/DC — and comes as CISA Director Jen Easterly and many election officials gather in Las Vegas for the Black Hat and DEF CON events. Easterly launched the JCDC effort in 2021 to build engagement between federal cyber authorities, the tech industry and state and local governments.
Full Article: CISA publishes cyber toolkit for election officials ahead of midterms
