Germany: Germany sees growing cyber threat but lacks legal means to retaliate | Reuters

The German government is scrambling to respond to a serious and growing threat of cyber attacks, but it lacks the legal framework to retaliate with cyber attacks of its own, top officials said on Monday. Cyber security is a major concern for Berlin as a Sept. 24 federal election approaches. German intelligence agencies said in December Russia was seeking to use propaganda, cyber attacks and other means to destabilize German society before the vote. “Cyber is what keeps me up at night,” Deputy Defense Minister Katrin Suder told reporters at an event hosted by the Federal Academy for Security Policy, a government training body. “This is not science fiction anymore … It is a topic of immense and growing importance.” Suder said the German military was making progress with a new cyber command that starts operations on Wednesday, and control over cyber functions that had been scattered across the military had become more centralized.

National: US Ambassador Haley Says Russia Was ‘Certainly’ Involved in U.S. Election | Bloomberg

The U.S. envoy to the United Nations says she’s maintaining a hard line against Russia, even as her boss — President Donald Trump — continues to dismiss reported Russian involvement in the 2016 U.S. election as “fake” news. “Certainly I think Russia was involved in the election,” Nikki Haley said in an interview with ABC’s “This Week” broadcast on Sunday, according to a transcript provided by the network. “There’s no question about that.” Haley, a former Republican governor of South Carolina, made her first Sunday-show appearances since becoming the nation’s top diplomat at the UN as the U.S. prepared to take over the rotating presidency of the UN Security Council.

France: Concerns of Russian meddling loom over French election | AFP

Russia looms large over France’s presidential election, with candidates on the hard left, right and far right all promising to improve ties with the Kremlin, accused by some of meddling in the vote. As U.S. authorities press their investigation into alleged Russian interference in favor of Donald Trump in America’s election, officials on both sides of the Atlantic are warning of possible attempts by Russia to also sway the French vote. This week, the chairman of the U.S. Senate Select Committee on Intelligence outright accused Russia of an “overt effort” to disrupt France’s April 23-May 7 vote. “I think it’s safe by everybody’s judgment that the Russians are actively involved in the French elections,” Sen. Richard Burr told reporters.

National: DHS on elections systems as critical infrastructure: ‘It was already the law’ | Cyberscoop

A Homeland Security official gave some more insight into their efforts on designating election systems as critical infrastructure shortly after the 2016 presidential election, saying it helped the department streamline communication in the event of a incident. Neil Jenkins, from DHS’s Office of Cybersecurity and Communications, gave the first detailed account Wednesday of the process leading up to the controversial decision, which was made by departing officials in the final days of the Obama administration and widely panned by state and local authorities. DHS designated election systems in 30,000 jurisdictions as critical infrastructure to ensure there would be someone in regular communication with state and local election officials about cyber threats to national polls. Jenkins told NIST’s Information Security and Privacy Advisory Board that in August and September, when officials first became aware of Russian efforts to interfere with the election, the “started trying to catalogue the services we could offer to state authorities,” to help them shore up network security and protect the systems that tabulated and reported results.

National: Mike Flynn Offers to Testify in Exchange for Immunity | Wall Street Journal

Mike Flynn, President Donald Trump’s former national security adviser, has told the Federal Bureau of Investigation and congressional officials investigating the Trump campaign’s potential ties to Russia that he is willing to be interviewed in exchange for a grant of immunity from prosecution, according to officials with knowledge of the matter. As an adviser to Mr. Trump’s presidential campaign, and later one of Mr. Trump’s top aides in the White House, Mr. Flynn was privy to some of the most sensitive foreign-policy deliberations of the new administration and was directly involved in discussions about the possible lifting of sanctions on Russia imposed by the Obama administration. He has made the offer to the FBI and the House and Senate intelligence committees through his lawyer but has so far found no takers, the officials said.

National: Three White House officials tied to files shared with House intelligence chairman | The Washington Post

At least three senior White House officials, including the top lawyer for the National Security Council, were involved in the handling of intelligence files that were shared with the chairman of the House Intelligence Committee and showed that Trump campaign officials were swept up in U.S. surveillance of foreign nationals, according to U.S. officials. The White House role in the matter contradicts assertions by the committee’s chairman, Rep. Devin Nunes (R-Calif.), and adds to mounting concerns that the Trump administration is collaborating with the leader of the House Intelligence Committee’s investigation of Russian meddling in the 2016 election. Though White House officials have refused to answer questions about the documents shared with Nunes, the White House said in a letter to the House committee Thursday that it had “discovered documents” that might show whether information collection on U.S. persons was mishandled and was prepared to show them to lawmakers.

National: Russian deception influenced election due to Trump’s support, senators hear | The Guardian

Donald Trump’s willingness to embrace Russian disinformation was one of the reasons Russia’s interference in the 2016 election worked, the Senate panel investigating the president’s alleged ties to the country heard on Thursday. Decades of Russian covert attempts to undermine confidence in western institutions, including planting or promoting false news stories or spreading doubt about the integrity of elections, will accelerate in the future unless the US confronts so-called “active measures”, several experts testified to the Senate intelligence committee. “Part of the reason active measures have worked in this US election is because the commander-in-chief has used Russian active measures at time [sic] against his opponents,” said Clint Watts of George Washington University’s Center for Cyber and Homeland Security. Those active measures have migrated online with alacrity in recent years. Watts, a former FBI special agent and army officer who came under personal siege from Russian-backed hackers, told the panel’s first public hearing that social media accounts associated with spreading pro-Russian fake news were visible as far back as 2009.

Russia: Senator: Russia used ‘thousands’ of internet trolls during US election | PCWorld

The Russian government used “thousands” of internet trolls and bots to spread fake news, in addition to hacking into political campaigns leading up to the 2016 U.S. election, according to one lawmaker. Disinformation spread on social media was designed to raise doubts about the U.S. election and the campaign of Democratic presidential candidate Hillary Clinton, said Senator Mark Warner, a Virginia Democrat. “This Russian propaganda on steroids was designed to poison the national conversation in America,” Warner said Thursday during a Senate hearing on Russian election hacking. The Russian government used “thousands of paid internet trolls” and bots to spread disinformation on social media.

National: FBI Director Comey sought to reveal Russian election meddling last summer: report | The Hill

FBI Director James Comey sought to publish an op-ed as early as last summer about Russian efforts to influence the 2016 presidential election, but was barred from doing so by the Obama White House, Newsweek reported Wednesday. In a White House meeting in June or July, Comey reportedly brought with him a draft of the proposed op-ed and presented it to top administration officials, including former Secretary of State John Kerry and former Attorney General Loretta Lynch. “He had a draft of it or an outline,” a source with knowledge of the meeting told Newsweek. “He held up a piece of paper in a meeting and said, ‘I want to go forward, what do people think of this?'”

Belarus: ‘It’s easier to hack an election than eBay’: confessions of a Belarusian hacker | The Guardian

According to Sergei Pavlovich, one of the Russian-speaking world’s most notorious hackers, “it is easier to hack an electoral system than eBay or Citibank”. The Belarusian cyber-criminal known as Policedog online started hacking early on, and by the age of 20 he says he was earning $100,000 a month as a “carder”, turning stolen credit card information into cash. By the early 2000s he was one of the leading figures in the Russian and Eastern European cyber-underworld. In an exclusive interview Pavlovich, now 33 and with a 10-year jail term behind him, gives a rare insight into a community that has been accused of carrying out aggressive cyber-activity on behalf of the Kremlin. Allegations that the Russian government deliberately hacked Democratic party emails to try to steer Donald Trump to victory in the US presidential election have been rebutted by the now president and denounced as “baseless” and “amateurish” by the Kremlin.

France: Russia ‘actively involved’ in French election, warns US Senate intelligence chief | AFP

Senator Richard Burr, who has access to some of the most highly classified US intelligence, said Moscow has shown a clear will and ability to disrupt elections in Western democracies. “What we might assess was a very covert effort in 2016 in the United States, is a very overt effort, as well as covert, in Germany and France,” he told reporters. “I remind you that we’re within 30 days of the first French election, with four candidates. It will go down to two candidates with a runoff in May,” he said. “I think it’s safe by everybody’s judgment that the Russians are actively involved in the French elections.”

National: Trump Should Address Russia’s Election Interference, McCain Says | Bloomberg

President Donald Trump should discuss Russian attempts to influence the outcome of the U.S. election in November in an effort to fill intelligence gaps, Senator John McCain said. “I would very much like to see the president address this issue including the issue we continue to wrestle with that is the Russian interference in the last election,” McCain said Saturday at a German Marshall Fund forum in Brussels. “There are a lot of answers that are required.” FBI Director James Comey told the House Intelligence Committee this week that the bureau is probing Russian efforts to “interfere” in the Nov. 8 election, as well as potential ties between Trump’s associates and Moscow during the campaign. The president’s first national security adviser, Michael Flynn, was fired for making misleading statements about contact with Russian Ambassador Sergey Kislyak a few weeks before the inauguration.

National: Cancellation of Hearing on Russia Adds to Friction on House Intelligence Panel | VoA News

Key U.S. lawmakers appear locked into a war of words over halting progress in their investigation into Russian interference in the 2016 presidential election campaign. The latest skirmish was sparked by the abrupt cancellation Friday of an open hearing set to feature top former intelligence officials. House Intelligence Committee Chairman Devin Nunes, a California Republican, argued that it was instead necessary to hear closed-door testimony from the directors of the FBI and the National Security Agency. “The committee seeks additional information … that can only be addressed in closed session,” Nunes told reporters during a hastily arranged news conference. Word of the change ignited criticism from congressional Democrats, who pointed out FBI Director James Comey and NSA Director Admiral Mike Rogers had already testified on Monday.

Georgia: Prior to suspected breach, KSU voting center received warning | Atlanta Journal Constitution

Kennesaw State University officials received a warning before the presidential election that a server system used by its election center may be vulnerable to a data breach. But they only notified state officials that they could have a problem after a second contact from a potential hacker raised alarms about the security of millions of Georgia voter records, according to top state officials briefed on the issue but not authorized to speak on the record. It is not clear whether the university acted to address the potential problem identified by the hacker last fall, those officials said. KSU hasn’t publicly discussed the alleged breach, citing an open investigation. It is also not clear the hacker had any ill intent and ever actually accessed the records, which the university keeps on behalf of the state as part of its Center for Election Systems.

National: Trump-Russia inquiry in ‘grave doubt’ after GOP chair briefs White House | The Guardian

The top Democrat on one of the congressional committees investigating ties between Donald Trump and Russia has raised “grave doubt” over the viability of the inquiry after its Republican chairman shared information with the White House and not their committee colleagues. In the latest wild development surrounding the Russia inquiry that has created an air of scandal around Trump, Democrat Adam Schiff effectively called his GOP counterpart, Devin Nunes, a proxy for the White House, questioning his conduct. “These actions raise enormous doubt about whether the committee can do its work,” Schiff said late Wednesday afternoon after speaking with Nunes, his fellow Californian, before telling MSNBC that evidence tying Trump to Russia now appeared “more than circumstantial”. Two days after testimony from the directors of the FBI and NSA that dismissed any factual basis to Trump’s 4 March claim that Barack Obama had him placed under surveillance, Nunes publicly stated he was “alarmed” to learn that the intelligence agencies may have “incidentally” collected communications from Trump and his associates.

Editorials: Lessons learned from the Russian hacking scandal and our “cyber” election | Joel Wallenstrom/TechCrunch

Information security — or what is commonly referred to as ‘cyber’ — has dominated the narrative in this week’s hearings on Capitol Hill about the Russian interference in the 2016 elections. Despite the political noise, a fact-based public debate on how to deal with strategic and targeted attacks is what’s needed now to develop better defenses for all – businesses or government organizations. There is a universal agreement that a highly-motivated and unapologetic entity has conducted an advanced and persistent campaign to disrupt, undermine and gain power over its strategic adversary. The questions become – what have we learned from the 2016 campaign and how are we going to adapt to prevent similar cyber campaigns in the future? The alleged attempt by Russia to influence the outcome of the US elections is today’s news. Yet this has not been and will not be the last time such operations have been conducted by nation-states, including our own.

National: Comey stands by U.S. intelligence assessment that Putin wanted Trump to win election | Los Angeles Times

Two of the nation’s top counter-intelligence officials stood by the U.S. intelligence assessment in January that Russian President Vladimir Putin’s government sought to help Donald Trump win the 2016 election. Under questioning from Rep. Mike Conaway (R-Texas), FBI Director James Comey and Adm. Mike Rogers, director of the National Security Agency, said nothing has changed since they issued their Jan. 6 report on Russian interference in the election. The report found that senior Russian officials, including Putin, wanted to undermine the U.S. democratic process, hurt Democratic nominee Hillary Clinton and help Trump’s campaign. Comey and Rogers declined to provide details on how the intelligence community reached that assessment.

France: Google Launches ‘Protect Your Election’ Tool Before French Vote | Fortune

As worries mount about cyberthreats to democracy, Google on Tuesday announced the launch of a free set of tools to help election websites, human rights groups, and other parties defend their computer systems from attacks. The arrival of the toolkit, known as “Protect Your Election,” comes as France prepares to go to the polls next month, and a week after hackers took down one of the Netherlands’ leading election information sites during that country’s vote last week, according to Google, citing local media. “Unfortunately, these types of attacks are becoming easier, cheaper, more better organized. With national elections approaching in France, we want to do our part to help,” said a blog post signed by staffers from Google France and from Jigsaw, the policy arm of Google’s (GOOGL, -2.05%) parent company, Alphabet.

National: Russian hackers were likely surprised by blowback from cyberattacks on U.S. elections, analysts say | Los Angeles Times

The Russian cyberattacks that targeted last year’s U.S. presidential elections were as much about wanting to keep Hillary Clinton out of the White House as about proving to the world that the Kremlin was capable of pulling off this feat, a leading Russian expert on cybersecurity said Monday. “Russian hackers deliberately tried to weaken positions of Hillary Clinton,” said Andrei Soldatov, author of a 2015 book on the Kremlin’s cyberwars against its critics. “She was seen as Russia’s enemy No. 1, a person who inspired Moscow protests [against President Vladimir Putin], a person who would harm Russia the most.” But Moscow may have miscalculated the fallout of its intrusion, which has so far led to resignation of a high-ranking U.S. official, congressional investigations and a bipartisan circling of the wagons around the need to protect the integrity of America’s democracy, several leading Russia experts said.

National: Russia will strike US elections again, FBI warns | ITworld

Future U.S. elections may very well face more Russian attempts to interfere with the outcome, the FBI and the National Security Agency warned on Monday. “They’ll be back,” said FBI director James Comey. “They’ll be back in 2020. They may be back in 2018.” Comey made the comment during a congressional hearing on Russia’s suspected efforts to meddle with last year’s presidential election. Allegedly, cyberspies from the country hacked several high-profile Democratic groups and people, in an effort to tilt the outcome in President Donald Trump’s favor. Although Russia has denied any involvement, the FBI expects the country to strike again. “One of the lessons they [Russia] may draw from this is they were successful,” Comey said. “Because they introduced chaos and division and discord.” NSA director Michael Rogers agreed: “I fully expect them to continue this level of activity.”

Germany: Hacked information bomb under Germany’s election | Politico

A Bundestag committee on the hack was later informed that the intruders — possibly a team of Russian hackers, known variously as APT28, Sofacy and Fancy Bear, with suspected links to the Kremlin — had roamed around freely in the system for three weeks, spying on communication between lawmakers and their staff, and eventually absconding with a large trove of information. In the aftermath, the parliament held several emergency meetings and brought in government cyber specialists to analyze the attack. Eventually, the network and its security system were rebuilt from scratch, according to Klaus Vitt, Germany’s highest ranking government official in charge of information technology. But by then, the proverbial horse had bolted.

National: Election systems security under increasing scrutiny | GCN

Between outdated technology, Russian hacking threats, tight budgets, the president’s promises to investigate voter fraud and incomplete information about federal assistance for securing voting systems, local elections officials have their hands full. In Bexar County, Texas, which is saddled with the oldest elections technology in the state, officials scour eBay for Zip disks, the storage media the county’s system uses to help merge results.”I’d be dead in the water without our technical support people looking online to buy the pieces and parts to keep us going,” Jacque Callanen, the county’s elections administrator told the Associated Press. Similarly outdated systems are common across the country, but municipalities probably will not be able to foot the bill for new systems without help from their state legislatures, which are also strapped for cash.

National: Democratic bill would codify elections as critical infrastructure | The Hill

A new bill from three House Democrats would codify elections as critical infrastructure. Reps. Mark Pocan (Wis.), Keith Ellison (Minn.) and Hank Johnson (Ga.) introduced the Securing America’s Future Elections (SAFE) Act, which would launch several cybersecurity programs, including codifying the decision from former Homeland Security Secretary Jeh Johnson to reclassify elections as critical infrastructure. Designating a sector as critical infrastructure gives the Department of Homeland Security (DHS) additional leeway to provide assistance and training toward its security. The label currently applies to 16 sectors, including power, telecommunications and emergency services. “One thing Democrats and Republicans should agree on is that we should be doing everything in our power to guarantee the sovereignty of our county and the integrity of our elections. This bill will do just that,” said Pocan in a written statement.

National: Russia Election Meddling Gets Airing on the Hill With Comey | Bloomberg

Members of the House Intelligence Committee will press FBI Director James Comey to provide details of any investigation his agents are conducting over contacts between President Donald Trump’s associates and Russia, during or after the presidential campaign. Comey on Monday will testify publicly for the first time since Trump’s inauguration about Russia’s meddling in the U.S. presidential election and the web of conspiracies — or conspiracy theories — entangling Trump and those close to him. While the FBI and other intelligence agencies have already found that Russia hacked into Democratic emails and leaked them in an attempt to help Trump, members of intelligence panel want more information from Comey.

Editorials: The Right Way to Investigate Russia’s Election Meddling | Carl Levin & John Warner/Politico

As Congress gears up to investigate Russia’s reported interference in American elections, precisely what form that inquiry will take is up for debate. But even at this early stage, one thing is clear: Whether it is done by the Intelligence Committees, a joint or select committee, or some other congressionally created framework, a vital goal of any such investigation must be bipartisanship. It’s not simply that an investigation must be conducted—from start to finish—in a bipartisan manner; it’s that history confirms that an investigation will be of value only if the American public perceives it as bipartisan. Indeed, some of the most important investigations Congress has ever conducted—the hearings on Watergate, Iran-Contra and the joint inquiry into the terrorist attacks of Sept. 11, 2001—made a real difference precisely because their bipartisan nature enabled them to get at the truth and gain the trust of the American people. Unfortunately, such bipartisanship will now pose a challenge.

Georgia: Advocates Call for Paper Ballots in Georgia Amid FBI Review | Associated Press

A group of technology experts said Tuesday that Georgia’s top elections officials should stop using electronic voting machines as the FBI reviews a suspected data breach. Secretary of State Brian Kemp and Kennesaw State University this month confirmed a federal investigation focused on the school’s Center for Election Systems. The center tests and certifies Georgia’s voting machines and electronic polling books used to check in voters at polling locations. Employees also format ballots for every election held in the state. The center isn’t part of Kemp’s office or connected to its networks, including Georgia’s database of registered voters maintained by the secretary of state’s office. The Atlanta Journal-Constitution first reported the investigation into the suspected cyberattack. In a letter to Kemp on Tuesday, 20 technology experts and computer science professors affiliated with the national Verified Voting organization said paper ballots will preserve voters’ confidence in the results of an upcoming special election to fill Georgia’s 6th District congressional seat. The letter said using equipment maintained by the center while it is the focus of a criminal investigation “can raise deep concerns.”

France: Election under high cyber threat | EUObserver

French authorities are on high alert to head off a cyber-attack that could affect the result of the upcoming presidential election.
Prime targets could be candidates’ websites and government networks. The threat was publicly recognised by president Francois Hollande, who accused Russia of trying to interfere in the campaign, ahead of the first round on 23 April and a run-off on 7 May. “Russia is using all of its means to influence public opinion,” he said in a recent interview to several European newspapers. “It is not the same ideology as in the time of the USSR, [but] it is sometimes the same methods, with more technology,” he said, adding that Russia had “a strategy of influence, of networks, with very conservative moral views”. … In early March, the government decided to ban electronic voting in June’s legislative elections for French voters abroad. Electronic voting was not planned for the presidential election itself.

Georgia: Election officials reject advocacy groups’ call for paper ballots | Marietta Daily Journal

Georgia and Cobb election officials are rejecting calls from advocacy groups for voters to use paper ballots while the FBI investigates a data breach at Kennesaw State University. Voters will continue to use electronic voting machines during upcoming elections, said Candice Broce, spokesperson for Georgia Secretary of State Brian Kemp. The use of paper ballots is reserved as a backup system in case there is a problem with the voting machines, she said. Cobb voters will also use the voting machines in next week’s special elections for the 1 percent special purpose local option sales tax for education and the vacant Marietta school board Ward 6 seat, said Janine Eveler, director of Cobb elections. Earlier this month, KSU announced a federal investigation at the Center for Elections Systems located on the Kennesaw campus to determine if there was a data breach that might have affected the center’s records, according to Tammy DeMel, spokesperson for the university.

Georgia: Democrats turn to KSU for answers on voter data hack | Atlanta Journal Constitution

The Democratic Party of Georgia appealed to Kennesaw State University for details about an alleged breach of confidential data that could affect millions of Georgia voter records, after the state’s top elections official rebuffed a similar request. Party chair DuBose Porter demanded Thursday that KSU president Sam Olens reveal data about the extent of the attack, and urged him to accept help from the Department of Homeland Security to secure the elections infrastructure. The FBI launched an inquiry into the suspected cyberattack this month at the request of state officials after they received notice that records kept by the Center for Election Systems at KSU may have been compromised. State officials have released few details amid the pending investigation, and KSU didn’t immediately respond to Porter’s request.

Netherlands: Fake news or hacking absent in Dutch election campaign | NL Times

Even the digitally savvy activists of the Pirate Party still use analog campaign methods. “Hello, can I offer you a flyer?”, the party’s leader, Ancilla van de Leest, asked passers-by in Amsterdam on Tuesday. The two men on their way to Amsterdam’s LGBTQ film festival kindly rejected her offer. “Do go out and vote, though,” she responded. One day before the elections for the Dutch lower house of parliament, Van de Leest’s party is predicted by an aggregate of six polls to receive around 1 percent of the votes, which for the first time could be enough for a seat. If elected, Van de Leest hopes to increase the level of debate on digital affairs. “The level of knowledge [about technology] is really low,” she said about the current members of parliament, adding that MPs often admit so themselves.