Cybersecurity industry executives reacted to a new report issued by a San Mateo, California grand jury this week focuses on the vulnerabilities of the County’s email and online communication platforms to hijacking and propagating disinformation in the guise of election instructions or announcements.
Experts Comments
July 29, 2019
The Grand Jury is right about the necessary improvements to secure access to critical accounts, whether it’s email or social media. At the same time, I would recommend elections officials put in place response plans to trigger in the unfortunate case that a cyberattack is successful. These plans need to include a couple of things: monitoring that can identify that an attack took place, and a remediation plan to make the necessary corrections in as little time as possible.
Like(
July 29, 2019
A mobile soft token is by far a better solution – there are many different solutions everyone has a phone and they can easily be provisioned. An open, token-independent MFA management solution would be far more appropriate. Vote harvesting, postal ballots and ID-less voting are real threats to election integrity. If people are concerned, states and the Federal government could deploy secure e-voting systems which would ensure that only authenticated and entitled voters could participate in.....Read More
July 29, 2019
Raising awareness about potential threats and impersonation of officials managing elections is important, but it’s a bit unsettling to have a Grand Jury recommending specific security technology and even vendors. Two-factor authentication should be the norm for any important business transaction, and is used and offered by most online services. Intercepting SMS codes with a MIM attack is actually quite difficult and hardware authentication devices, while more secure, are less practical to.....Read More
Submit Your Expert Comments
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Pierluigi Stella, CTO, provides expert commentary at @Information Security Buzz.
"The fact that apparently two-factor authentication isn’t already being used is very appalling indeed..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/silicon-valley-grand-jury-election-security-report
Facebook Message
@Pierluigi Stella, CTO, provides expert commentary at @Information Security Buzz.
"The fact that apparently two-factor authentication isn’t already being used is very appalling indeed..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/silicon-valley-grand-jury-election-security-report