Endpoint

3/9/2018
12:27 PM
50%
50%

Tennessee Senate Campaign Sees Possible Hack

Phil Bredesen's campaign for US senate sees a hacker's hand in email messages

The mid-term US election season is underway and it seems that hackers are already busy. Phil Bredesen (D), the former governor of Tennessee, is running for senate in that state. And his campaign has notified the FBI that they think a hacker has already been in their network.

Signals of a hack came from a phishing email asking for money: a message sent from an email account almost identical to that of the campaign's media buyer. In itself, that's not evidence of a hack, but there were details about the message, including dates of upcoming media purchases that indicate the sort of inside knowledge available through hacked servers or accounts.

There is significant concern among US law enforcement and intelligence officials that Russian hackers, who were active during the 2016 election, will seek to disrupt and influence the 2018 election, as well. While the Bredesen campaign evidence points to criminal, rather than political, motivation, it does indicate that political campaigns should still be paying more attention to computer security than many seem prepared to pay.

The FBI declined the opportunity to comment, as is normal for on-going investigations.

Read more here and here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
More Than Half of Users Reuse Passwords
Curtis Franklin Jr., Senior Editor at Dark Reading,  5/24/2018
Is Threat Intelligence Garbage?
Chris McDaniels, Chief Information Security Officer of Mosaic451,  5/23/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
[Strategic Security Report] How Enterprises Are Attacking the IT Security Problem
[Strategic Security Report] How Enterprises Are Attacking the IT Security Problem
Enterprises are spending more of their IT budgets on cybersecurity technology. How do your organization's security plans and strategies compare to what others are doing? Here's an in-depth look.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-11471
PUBLISHED: 2018-05-25
Cockpit 0.5.5 has XSS via a collection, form, or region.
CVE-2018-11472
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has Reflected XSS during Login (i.e., the login parameter to admin/index.php).
CVE-2018-11473
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has XSS in the registration Form (i.e., the login parameter to users/registration).
CVE-2018-11474
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has a Session Management Issue in the Administrations Tab. A password change at admin/index.php?id=users&action=edit&user_id=1 does not invalidate a session that is open in a different browser.
CVE-2018-11475
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has a Session Management Issue in the Users tab. A password change at users/1/edit does not invalidate a session that is open in a different browser.