National

Millions of voters across the country will cast ballots during Super Tuesday on old, insecure election equipment — even after nearly four years of handwringing and warnings about Russian election interference. The jurisdictions at risk include three of Tennessee’s biggest counties — Shelby, Knox and Rutherford — where the paperless voting machines at the polls will include devices with security flaws so alarming that voters tried suing to have the equipment removed from precincts. Dozens of small counties in Texas are also sticking with risky touchscreen machines that have no paper trail to help detect tampering or malfunctions. And in California, Los Angeles County is debuting new voting machines that have drawn scrutiny for security weaknesses, as well as their developer’s past alleged ties to the Venezuelan government. The news is better in other parts of the Super Tuesday map, as some counties and states have successfully replaced their old paperless voting equipment with more secure paper-based machines. But even some of this new technology presents vulnerabilities that hackers could exploit to tamper with the primaries. Other states holding primaries on Tuesday, including Massachusetts, Maine and Vermont, predominantly use the technology that most experts consider the most secure: paper ballots that voters fill out by hand.

National: Coronavirus And Super Tuesday Voting: It’s Touchy | Pam Fessler/NPR

Elections can be very tactile. Touchscreen voting machines, paper ballots, large crowds. With concern growing about the spread of the coronavirus, officials in a number of Super Tuesday states are taking extra precautions to assure voters that it’s safe to go to the polls. Millions of people are expected to cast ballots tomorrow in 14 states, including some where cases of the disease have already emerged. John Gardner, the assistant registrar of voters in Solano County, Calif. — where two health care workers tested positive for COVID-19 — says they’ve added an extra curbside location where people can drop off their completed ballots, “so voters don’t have to get out of their cars if they don’t want to.” Gardner says they have also sent out additional supplies of disinfectant wipes, hand sanitizer and gloves to every polling site in the county. Still, he’s seen no indication that the virus is discouraging either voters or pollworkers.

National: Some states encourage mail-in ballots as coronavirus worries grow | Alice Miranda Ollstein/Politico

Officials in some states with upcoming primaries are encouraging more people to avoid in-person polling sites amid heightened worries about the spread of coronavirus in the United States. Some are even increasing the opportunity for drive-by voting on Super Tuesday. California’s Solano County, the site of the country’s first identified case of the virus’ spread within the community, added new curbside sites where people can drop off their ballots without having to leave their cars. “If you can stay in your car to get service, lots of people want to take advantage of that even in a normal situation, but especially when they might be concerned about congregating in close proximity to a lot of other people,” said county election official John Gardner. Meanwhile, some election experts are urging states to relax their absentee voter policies in light of the new public health threat, though some state officials dismissed the idea of hastily rewriting election policies.

National: Officials fear coronavirus could be next front in election interference | Joseph Marks/The Washington Post

U.S. officials fear adversaries might weaponize public fears about coronavirus ahead of Super Tuesday to spread disinformation, amplify rumors and tamp down voter turnout. The concern comes as people test positive for the virus in numerous states, including California, Texas and Alabama – which are among the 14 states that will hold their Democratic primaries Tuesday. The virus, which has killed nearly 3,000 people worldwide, could offer a near-perfect test case for how operatives from Russia or elsewhere seeking to undermine confidence in the election could boost public fears to stop people from heading to the polls – maybe enough to swing a tight race or at least raise doubts in the results. It’s “one of a number of scenarios” of potential interference federal officials are monitoring, the Department of Homeland Security’s cybersecurity division chief Chris Krebs told Kevin Collier at NBC News. Krebs’s office declined to comment this weekend when I asked for more information about the possible response. “This is a new and obviously very scary virus, and misinformation can leverage off of that,” Peter Singer, a fellow at the New America think tank who has written extensively about information warfare, told me. “I would almost be surprised if we don’t see it.”

National: The most pervasive ballot design flaw you don’t notice | Lily Smith/Fast Company

Many will remember the infamously confusing Palm Beach County butterfly ballot, which led to 26,000 misvotes, a recount, and ultimately handed George W. Bush the presidency in 2000. Twenty years later, we have new ballot design problems to deal with—and there’s one you’ve probably never heard of. Most of the ballot design flaws detailed in a recent resource from the Brennan Center for Justice seem rather innocuous. But there’s one in that, if fixed, could reduce margin of error and thereby make the voting system overall more reflective of voters’ intent: ballot design that splits one contest into two columns on a bubble-style page. There are a few other permutations of this layout, and they all share one key flaw: They split up information that should be categorized together. The first contest on a ballot might fall below the ballot instructions in the first column, causing voters to miss it. A contest might be split into two columns because there’s a large number of candidates to consider—or, on an electronic voting system, there might be two contests on the same page.

National: The 2020 race could become the coronavirus election. Is America ready? | Matt Pearce/Los Angeles Times

It’s hard to run an election during a pandemic, let alone stay healthy. In 1918, as Spanish influenza wreaked havoc in one of the greatest health disasters in United States history, politicians were sidelined as bans on public gatherings made it impossible to hold campaign rallies. There was no vaccine for that virus, which killed hundreds of thousands of Americans, and the best officials could do was keep people away from each other to limit the microbe’s spread. Voters in that year’s midterm election headed to the polling booths in masks for fear that a simple act of civic participation could be deadly. And for good reason: In Wayne, Neb., officials lifted a public-gathering ban five days before the election, allowing a flurry of last-minute campaigning — which also coincided with a rise in deadly infections. Now, for the first time in a century, a U.S. election faces the unusual threat of being upended by a potential pandemic as a new coronavirus has shocked the global economy, tested President Trump’s administration and fueled Democratic attacks on both his leadership and the private healthcare system’s ability to protect all Americans.

National: Some election officials scrambling to address coronavirus concerns ahead of Super Tuesday | Kelly Cannon/ABC

With fears of the novel coronavirus spreading gripping Americans following the first death in the U.S. and just days before Super Tuesday — when voters in 14 states and one territory head to the polls — election officials in some areas are scrambling to assure voters and make sure disruptions are minimized. The Super Tuesday primaries — where nearly a third of delegates are up for grabs — are run at the state and local level, and currently, a uniform national response to voter disruptions does not exist. When asked about contingency plans, the communications director for the National Association of Secretaries of State said she’d “defer to states,” as each may administer its own “specific plans” for emergency preparedness. “Whether that’s a hurricane, power outage, et cetera,” Maria Benson told ABC News in a statement.

National: Coronavirus Is Already Making It Harder for Americans Living Abroad to Vote in the 2020 Primaries | Abigail Abrams/Time

Americans living in China and South Korea have been told that due to the coronavirus outbreak they won’t be able to vote in person for the Democratic presidential primary next month and should instead vote online. As more cases of COVID-19 appear around the world, Americans living countries such as Italy and Japan could soon see their ability to cast ballots affected, according to Democrats Abroad, the group that manages U.S. citizens voting overseas. While more than 82,000 cases of COVID-19 have been confirmed worldwide and hobbled global markets, the new restrictions mark the first example of the virus impacting the 2020 election. The development comes as the Centers for Disease Control and Prevention this week identified the first potential case of the virus spreading within a U.S. community and warned that cities, businesses and schools should prepare for a larger outbreak. It also comes just days before Super Tuesday, when 14 states will hold primaries and Democrats who live overseas begin casting their ballots.

National: States and Federal Government Must Help Local Cybersecurity Efforts | Daniel Castro/Government Technology

Cybersecurity continues to be a major challenge for state and local governments, and the issue will likely grow in importance in the coming year. First, they are popular targets. During the first half of 2019, nearly two-thirds of ransomware attacks targeted state and local governments. Second, they face a multitude of threats — data breaches, ransomware, phishing, malware and more — and they must be prepared to defend against all of them. For example, last year, government officials in Cabarrus County, N.C., fell victim to an online social engineering attack in which the scammer stole $1.7 million in taxpayer funds. Third, and perhaps most important, with continued growth in e-gov applications and smart city initiatives, state and local governments are collecting and storing more data than ever before. Securing this information will need to be a top priority. Unfortunately, many agencies simply aren’t up to the task. They don’t have the talent, training or resources to respond to the most advanced attacks. Nor is it necessarily reasonable to expect them to. They can outsource some of these security roles to the private sector, just as they do with other IT responsibilities, but they still must be accountable.

National: Election related websites outdated, exposed vulnerabilities | Jack Gillum/Pro Publica and Raleigh News & Observer

The Richmond, Va., website that tells people where to vote and publishes election results runs on a 17-year-old operating system. Software used by election-related sites in Johnston County, N.C., and the town of Barnstable, Mass., had reached its expiration date, making security updates no longer available. These aging systems reflect a larger problem: A ProPublica investigation found that at least 50 election-related websites in counties and towns voting on Super Tuesday — accounting for nearly 2 million voters — were particularly vulnerable to cyberattack. The sites, where people can find out how to register to vote, where to cast ballots and who won the election, had security issues such as outdated software, poor encryption and systems encumbered with unneeded computer programs. None of the localities contacted by ProPublica said that their sites had been disrupted by cyberattacks.

National: MIT Professor: Blockchain is good in itself, but not good for votes | Jonita Singh/Wink Report

Computer scientist Ronald Rivest has said that blockchain is not the right technology to vote, although it may find the right application in a number of other areas. Rivest gave his opinion at the RSA Security Conference, held earlier this week in San Francisco, reported technology-focused news broadcast ITWire on February. 28. Rivest – who is a cryptography expert and professor at the Massachusetts Institute of Technology – called voices an interesting problem that requires a stricter approach compared to many existing security applications. He said:

“Blockchain is the wrong security technology to vote. I like to bring a combination lock to a kitchen fire or something. It is good for certain things in itself, but it is not good to vote. “

National: DHS Rolls Out ‘Tabletop in a Box’ Election Cybersecurity Tool | Phil Goldstein/StateTech Magazine

February 28, 2020

With the 2020 election primary season fully underway, state and local election officials are ramping up their cybersecurity efforts to counter malicious threats. They are also getting support from the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency. Several weeks ago, CISA released a 58-page guide, its “Elections Cyber Tabletop Exercise Package,” which it calls a “tabletop in a box.” The guide is designed to allow state and local officials to conduct election security drills simulating phishing and ransomware attacks, corrupted voter registration information, disinformation campaigns and attacks on voting equipment. As StateScoop reports, such tabletop exercises, “are designed to give secretaries of state, election directors, IT leaders and other officials a war game-like environment simulating the threats posed by foreign governments and other adversaries that might try to disrupt a real election.” Tabletop exercises can be used to “enhance general awareness, validate plans and procedures, rehearse concepts, and/or assess the types of systems needed to guide the prevention of, protection from, mitigation of, response to, and recovery from a defined incident,” the guide states.

National: #RSAC: Election Security Beyond the Ballot Box | Sean Michael Kerner/Infosecurity Magazine

February 28, 2020

There has been a lot written in recent years about election security and ensuring the integrity of voting systems. While voting machines are important, so too are non-voting election technologies, which was the topic of a session at the RSA Conference in San Francisco. Aaron Wilson, Senior Director of Election Security at the Center for Internet Security (CIS), explained that non-voting election systems include things that support elections. Those systems include electronic poll books, election night reporting systems, voter registration systems, and electronic ballot delivery. “There is a lot to that attack surface, but there are not a lot of standards and regulations,” Wilson said. The Center for Internet Security has developed a guide to help secure those non-voting election systems that has 160 best practices to help reduce risk and improve confidence. The overall goal, according to Wilson, isn’t necessarily that every election official will do all the steps, but rather they will have a guide that provides questions to ask vendors and IT staff.

National: New Intelligence Chief Asks Election Czar to Remain in Post | Julian E. Barnes/The New York Times

The new acting director of national intelligence, Richard Grenell, has asked an intelligence official who angered some lawmakers with a briefing about Russian interference in the 2020 election to stay on in her role. Mr. Grenell’s move is a peace offering to the 17 intelligence agencies he oversees and a potential sign that he will not be conducting a widespread purge, as some administration officials have feared. Mr. Grenell, a Trump loyalist who has little experience in intelligence, removed the No. 2 official in his office in his first day on the job last week. Whether Mr. Grenell, appointed to the post last week by President Trump, can win over members of Congress and the intelligence community will depend in part whether he can convince them that he will focus on protecting the elections from outside interference. Some administration officials feared that the official who briefed the lawmakers, Shelby Pierson, would be removed as well. As the intelligence community’s top election security official since last year, she was subjected to withering criticism after her briefing to a classified hearing of the House Intelligence Committee on Feb. 13 touched off a fierce partisan debate over the nature of Russia’s interference in the 2020 election.

National: Christopher Krebs – the ‘accidental director’ on the front line of the fight for election security | Maggie Miller/The Hill

Christopher Krebs, the first director of the Cybersecurity and Infrastructure Security Agency (CISA), is zeroing in on elections ahead of November. CISA was created out of the former National Protection and Programs Directorate (NPPD) and signed into law by President Trump in late 2018. It is one of the primary federal agencies tasked with assisting state and local officials in bolstering election security. “I spend at this point 40 to 50 percent of my time on election security issues,” Krebs told The Hill during an interview at CISA headquarters this month. “A top priority for us right now is protecting 2020.” During the 2018 midterm elections, CISA hosted a situational awareness room on Election Day to continuously monitor threats across the country and worked closely with regional officials to address cyber vulnerabilities. Krebs said he saw getting through the midterms “unscathed” as part of his legacy as the first director of CISA, the newest agency in the Department of Homeland Security (DHS). “I’m not looking at 2020 as a metric or some sort of legacy mark, but what I want my legacy to be — and I hope to be here for longer — is that CISA is a meaningful player in the national and international stage,” Krebs said.

National: Dueling Narratives Emerge From Muddied Account of Russia’s 2020 Interference | David E. Sanger/The New York Times

As accusations swirled Sunday about Russia’s efforts to interfere with the 2020 election, President Trump’s national security adviser and former Vice President Joseph R. Biden Jr. could not agree on what Moscow is, or is not, doing. Their disagreement came as intelligence officials disputed reports that emerged last week about a briefing of the House Intelligence Committee. The officials now maintain that the House members either misheard or misinterpreted a key part of the briefing, and that the Office of the Director of National Intelligence did not mean to say that it believes the Russians are currently intervening in the election explicitly to help President Trump. They do believe that Russia is intervening in the election, and that Moscow prefers Mr. Trump, a deal maker it knows well. But at least for now, those two objectives may not be linked. The differing interpretations only made it easier for the Trump administration and Democrats to put forward their own version of what the Russians are doing. As the national security adviser, Robert C. O’Brien, defended Mr. Trump and intimated that the Russians favored the Democratic presidential front-runner, Senator Bernie Sanders, Mr. Biden blamed the president and other Republicans for allowing Russia to continue to interfere in the election.

National: Ransomware top of mind for DHS cyber chief | Derek B. Johnson/FCW

The Department of Homeland Security’s cyber chief said his organization is trying to do more to address ransomware and other digital threats that directly touch the lives of citizens. Speaking at the RSA Conference in San Francisco, Cybersecurity and Infrastructure Security Agency Director Christopher Krebs said his agency has stepped up efforts to proactively reach out to federal agencies, local governments, businesses and critical infrastructure managers about how to prepare and what to do if their data is encrypted and held ransom by criminals or state-aligned hacking groups. “For years and years and years, particularly in the federal government, we’ve been focused on the nation-state adversary, the highly capable, the big four: Russia, China, Iran [and] North Korea,” he said. “I think we’ve been a little bit late to the game on ransomware,” he said, adding, it’s what average Americans see “in their schools, their hospitals and their municipal agencies.” Krebs described CISA’s role as that of a middleman uniquely positioned to canvass all the major stakeholders in the cybersecurity ecosystem and “facilitate a knowledge transfer from the haves to the have-nots.” CISA can leverage the collective financial and human capital resources of the big fish — like major banks — and push that knowledge and awareness down the chain to the broader cybersecurity ecosystem.

National: Americans should not be confident about security of 2020 election, experts say | Joseph Marks/The Washington Post

Americans should not be confident about the security of the 2020 election, according to a slim majority of experts surveyed by The Cybersecurity 202. The assessment from 57 percent of The Network, a panel of more than 100 cybersecurity experts who participate in our ongoing informal survey, puts a serious damper on the years-long push by federal, state and local government officials and political parties to bolster election security since a Russian hacking and influence operation upended the 2016 contest. “There are no signs that any part of our institutions are capable of providing an election that is reasonably secure from tampering and manipulation,” said Dave Aitel, a former NSA computer scientist who is now CEO of the cybersecurity company Immunity. “Every part of the voting process is vulnerable. This includes the voter registration process, the voting itself, the vote tabulation, and the results-reporting system,” said Bruce Schneier, fellow and lecturer at the Harvard Kennedy School of Government. Cindy Cohn, executive director of the Electronic Frontier Foundation, called for “more serious security measures for voting, from registration through to reporting the results back to the central voting authority.”

National: Defending against multifaceted election attacks | Lavi Lazarovitz/GCN

Much has been made of the vulnerabilities inherent in voting infrastructure over the past few years. DEFCON hacking villages have repeatedly found flaws in voting machines, and researchers across the country have outlined the ways attackers could infiltrate voting systems and influence an election. While these headlines generate attention, they tend to overshadow the myriad of other ways attackers could impact elections without touching a single vote. While many of the attacks in 2016 took the form disinformation campaigns, there are many other opportunities — direct and indirect — for attackers to have an impact. So while it is incredibly important to continue hardening the security of the physical voting machines, we must guard against other ways attackers could influence an election outcome without ever compromising a machine. From a security perspective, vulnerabilities have been the main talking point when it comes to elections. But while changing a vote is one thing, preventing voters from getting to the polls altogether could prove more effective.

National: The Coronavirus Outbreak Is Raising Questions About Voting In The 2020 Presidential Primaries | Zahra Hirji/Buzzfeed

US citizens living in China have been told they won’t be able to cast their vote in person for the Democratic primary next month and will instead need to vote online, according to Democrats Abroad, the group in charge of overseeing voting overseas. And as the coronavirus outbreak has spread to 38 countries, triggering concerns about a global pandemic, CDC officials warned on Tuesday that they expect the virus to spread to the US — and told US businesses and schools to prepare. The news raises questions about whether the coronavirus outbreak could interrupt the lead-up to the biggest national event of the year: the 2020 election.

National: Reliability of pricey new ballot marking devices questioned | Frank Bajak/Associated Press

In the rush to replace insecure, unreliable electronic voting machines after Russia’s interference in the 2016 U.S. presidential race, state and local officials have scrambled to acquire more trustworthy equipment for this year’s election, when U.S. intelligence agencies fear even worse problems. But instead of choosing simple, hand-marked paper ballots that are most resistant to tampering because paper cannot be hacked, many are opting for pricier technology that computer security experts consider almost as risky as earlier discredited electronic systems. Called ballot-marking devices, the machines have touchscreens for registering voter choice. Unlike touchscreen-only machines, they print out paper records that are scanned by optical readers. South Carolina voters will use them in Saturday’s primary. The most pricey solution available, they are at least twice as expensive as the hand-marked paper ballot option. They have been vigorously promoted by the three voting equipment vendors that control 88 percent of the U.S. market.

National: With 2020 general election approaching, voting security under growing scrutiny | Maya Rodriguez/Scripps Media

It’s the foundation of American democracy: voting. Depending on where you are in the U.S., though, your election experience could look very different from that in your neighboring state or even just your neighbor. “It really does depend on where you are in the country,” said Marian Schneider, who heads up Verified Voting, a non-profit, non-partisan group that advocates for better election security. In particular, the group takes a closer look at when it comes to the use of computers in elections. “We use computers in every aspect of election administration in this country,” Schneider said. “We have also historically underfunded our elections and not put the money into them that we need in order to run a computerized operation.”

National: Russia trying to help Bernie Sanders’s campaign, according to briefing from U.S. officials | Shane Harris, Ellen Nakashima, Michael Scherer and Sean Sullivan/The Washington Post

U.S. officials have told Sen. Bernie Sanders that Russia is attempting to help his presidential campaign as part of an effort to interfere with the Democratic contest, according to people familiar with the matter. President Trump and lawmakers on Capitol Hill also have been informed about the Russian assistance to the Vermont senator, those people said, speaking on the condition of anonymity to discuss sensitive intelligence. It is not clear what form that Russian assistance has taken. U.S. prosecutors found a Russian effort in 2016 to use social media to boost Sanders’s campaign against Hillary Clinton, part of a broader effort to hurt Clinton, sow dissension in the American electorate and ultimately help elect Donald Trump. “I don’t care, frankly, who [Russian President Vladimir] Putin wants to be president,” Sanders said in a statement. “My message to Putin is clear: Stay out of American elections, and as president I will make sure that you do. “In 2016, Russia used Internet propaganda to sow division in our country, and my understanding is that they are doing it again in 2020. Some of the ugly stuff on the Internet attributed to our campaign may well not be coming from real supporters.”

National: Sanders blasts Russia for reportedly trying to boost his presidential campaign | Susan Heavey and Simon Lewis/Reuters

Democratic presidential candidate Bernie Sanders on Friday warned Russia to stay out of U.S. elections after American officials had told him Moscow was trying to aid his campaign. “The intelligence community is telling us they are interfering in this campaign, right now, in 2020. And what I say to Mr. Putin, if elected president, trust me you are not going to be interfering in American elections,” Sanders told reporters in Bakersfield, California. Sanders, 78, a democratic socialist from Vermont, is considered the front-runner for the Democratic nomination and is favored to win the Nevada caucuses on Saturday. The Washington Post on Friday, citing people familiar with the matter, said U.S. officials had told Sanders about the Russian effort and had also informed Republican President Donald Trump and U.S. lawmakers. It was not clear what form the Russian assistance took, the paper said. A congressional source confirmed intelligence officials have told lawmakers Russia appears to be engaging in disinformation and propaganda campaigns to boost the 2020 campaigns of both Sanders and Trump. The source, however, cautioned that the findings are very tentative.

National: Congress to get election security briefing next month amid Intel drama | Jordain Carney/The Hill

The administration is gearing up to brief lawmakers on election security as the country wades deeper into the 2020 primaries. Both the House and Senate will be briefed, separately, on March 10, according to Speaker Nancy Pelosi (D-Calif.) and a Senate aide. The briefings will come a week after Super Tuesday, when primary voters in more than a dozen states will head to the polls. On March 10, voters in six more states will cast ballots. The announcement of the briefings come as President Trump’s shake up of top intelligence community positions has sparked fierce criticism from Democrats and some national security professionals, and after reports that intelligence leaders have told lawmakers that Russia is again seeking to aid Trump’s campaign efforts. “American voters should decide American elections — not Vladimir Putin. All Members of Congress should condemn the President’s reported efforts to dismiss threats to the integrity of our democracy & to politicize our intel community,” Pelosi said in a tweet on Thursday.

National: DHS Publishes 2020 Strategic Plan for Election Security | Lucas Ropek/Government Technology