One of the greatest cybersecurity threats to US November elecetion is well-timed ransomware attack. This threat is not only from froeign governments but also from criminals seeking fortune. We have seen in the past there is no exceptional increase in number of sophisticated attacks on local and state government and the fear is that these type of attacks can affect the voting systems directly or indirectly.
More information: https://uk.news.
Information Security Buzz (aka ISBuzz News) is an independent resource that provides the experts comments, analysis and opinion on the latest Information Security news and topics
Voting is undoubtedly critical infrastructure, as it is fundamental to our democracy and way of life. Should this be manipulated by way of a cyberattack, ransomware attack or any type of malware that affects computer networks or the networks of infrastructure providers, the sovereignty of the people could be in jeopardy and the integrity of votes called into question. With in-person, absentee and mail-in voting all on the table on November 3 because of the pandemic, the opportunities for motivated malicious attackers increase multifold. What’s more, elections officials on the local, state and federal level are expected to work overtime this year which further exacerbates the situation as fatigue can easily cloud their judgement when faced with a phishing email. Humans are the weakest link in the security life cycle; cybercriminals know this and are quick to exploit it. If you take on face value that ransomware could be used to cripple the election, then stringent measures need to be introduced over the course of the coming weeks to prevent this from happening; not least, offering security awareness training to anyone from the public and private sector involved in the election. Knowing what to look for will help reduce risks. And avoid clicking on attachments in emails. It is safer to double-check with your co-workers or partners to see if they have emailed you an attachment. The deployment of advanced anti-malware technology and a means of auditing for vulnerabilities are also critical procedures to implement in the week\’s ahead.