Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cyberwarfare

Security Experts Warn of Foreign Cyber Threat to 2024 Voting

Top state election and cybersecurity officials warned about threats posed by Russia and other foreign adversaries ahead of the 2024 elections

Top state election and cybersecurity officials on Thursday warned about threats posed by Russia and other foreign adversaries ahead of the 2024 elections, noting that America’s decentralized system of thousands of local voting jurisdictions creates a particular vulnerability.

Russia and Iran have meddled in previous elections, including attempts to tap into internet-connected electronic voter databases. Distracted by war and protests, neither country appeared to disrupt last year’s midterm elections, but security officials said they expect U.S. foes to be more active as the next presidential election season draws near. The first primaries are less than a year away.

Jen Easterly, director of the federal Cybersecurity and Infrastructure Security Agency, referenced Russia’s attack on Ukraine and the U.S.-led effort to supply weapons and other aid to the besieged country as a possible motivator. She said the agency was “very concerned about potential retaliation from Russia of our critical infrastructure.”

She also mentioned China as a possible source of election interference, especially as the relationship between the two countries has deteriorated, mostly recently over the suspected spy balloon that floated across the country before being shot down by a U.S. fighter jet.

“We’ve not seen anything here, but I’d like to end that with the word – yet,” said Easterly, speaking during the annual gathering of the National Association of Secretaries of State.

Of particular concern is the decentralized nature of America’s election system. There are some 10,000 local voting jurisdictions throughout the U.S., including counties and townships, according to the National Conference of State Legislatures.

Not all of those have funding for new equipment, proper staffing or updated training of election workers. Easterly said it was a priority of her agency to get money and expertise to what she termed “target-rich, cyber-poor” entities.

Meagan Wolfe, administrator of the Wisconsin Elections Commission, said her state has about 1,850 local officials running elections, which makes it difficult to disburse federal money in a way that is effective over the long term. Wisconsin is a perennial swing state, where four of the past six presidential races have been decided by less than a percentage point and election conspiracies have found fertile ground since the 2020 election.

Advertisement. Scroll to continue reading.

“A lot of times if you don’t see anything bad happen in the cybersecurity space, it’s kind of forgotten about,” said Wolfe, who also is president of the National Association of State Election Directors. “People don’t remember that this is a real and imminent threat, and so getting those local jurisdictions, their governing bodies, to really buy into this concept and to support sustainable solutions for local election jurisdictions continues to be a real challenge, as well.”

Several secretaries of state called for additional federal funding for local election offices, which not only must prepare for cybersecurity threats but also have had to deal with harassment and threats since 2020.

Arizona Secretary of State Adrian Fontes noted that election workers and even voters in his state’s most populous county, Maricopa, have been targets of harassment and intimidation.

Stephen Spaulding, policy director for the U.S. Senate Committee on Rules & Administration, said the committee’s chairwoman, Democratic Sen. Amy Klobuchar, is trying to obtain more election funding after an attempt late last year fizzled. Congress allocated $75 million in election security grants to states, but that was far short of what many state and local officials had requested.

“More than $75 million from last year’s omnibus is clearly needed in our view,” Spaulding said. “We have repeatedly heard about how sustainable funding ensures our elections continue to run smoothly, facilitate predictability and planning, and we’re striving to work on a bipartisan basis to get that done.”

Related: Chinese Cyberspies Targeted Japanese Political Entities Ahead of Elections

Related: FBI, CISA Say Malicious Cyber Activity Unlikely to Disrupt Election

Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Kim Larsen is new Chief Information Security Officer at Keepit

Professional services company Slalom has appointed Christopher Burger as its first CISO.

Allied Universal announced that Deanna Steele has joined the company as CIO for North America.

More People On The Move

Expert Insights

Related Content

Cyberwarfare

WASHINGTON - Cyberattacks are the most serious threat facing the United States, even more so than terrorism, according to American defense experts. Almost half...

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Cyberwarfare

Russian espionage group Nomadic Octopus infiltrated a Tajikistani telecoms provider to spy on 18 entities, including government officials and public service infrastructures.

Malware & Threats

The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently...

Cyberwarfare

Several hacker groups have joined in on the Israel-Hamas war that started over the weekend after the militant group launched a major attack.

Cyberwarfare

An engineer recruited by intelligence services reportedly used a water pump to deliver Stuxnet, which reportedly cost $1-2 billion to develop.

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...