Vulnerabilities / Threats

3/22/2018
12:20 PM
100%
0%

US Federal Spending Bill Includes $380 Million for Securing Election Systems

Spending bill includes election technology grants for states to shore up security of their voting systems, reports say.

Congress has included $380 million for election cybersecurity in its new omnibus spending package, marking the legislative branch's first official move toward improving security of the voting and election systems in the wake of concerns over Russian meddling in the 2016 race, Reuters reports.

The funding would include election technology grants for states to better lock down their election systems, according to report in The Hill. The bill also is expected to include additional funding for the FBI - $307 million - in its efforts to battle Russian nation-state cyberattackers.

Also in the package is $26 million for the US Department of Homeland Security's cybersecurity unit for its programs helping states lock down their election systems.

Read more here and here

Interop ITX 2018

Join Dark Reading LIVE for two cybersecurity summits at Interop ITX. Learn from the industry’s most knowledgeable IT security experts. Check out the security track here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
3/27/2018 | 7:48:08 AM
Re: Spending bill to improve our voting systems
Always have faith in the ability of states to receive revenue and find OTHER useful pockets to put it in.  Having tech is great ---- having IT staffers who know how it works (and not in Bangalore) is better. 
cyclepro
50%
50%
cyclepro,
User Rank: Strategist
3/23/2018 | 9:30:53 AM
Spending bill to improve our voting systems
It is great that Congress is acting on this. However I wonder if it will be in time for the mid-term elections. If not then what can we do to secure the systems in time for those elections?

 

Anyway.. It is a good move and about time!

Maybe both political parties can take heed from this and protect their servers better as well.

 
Crowdsourced vs. Traditional Pen Testing
Alex Haynes, Chief Information Security Officer, CDL,  3/19/2019
BEC Scammer Pleads Guilty
Dark Reading Staff 3/20/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Well, at least it isn't Mobby Dick!
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
The State of Cyber Security Incident Response
The State of Cyber Security Incident Response
Organizations are responding to new threats with new processes for detecting and mitigating them. Here's a look at how the discipline of incident response is evolving.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-20165
PUBLISHED: 2019-03-22
Cross-site scripting (XSS) vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web script or HTML via the vgnextoid parameter to a menuitem URI.
CVE-2019-1716
PUBLISHED: 2019-03-22
A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code. The vulnerability ...
CVE-2019-1763
PUBLISHED: 2019-03-22
A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to bypass authorization, access critical services, and cause a denial of service (DoS) condition. The vulnerability exist...
CVE-2019-1764
PUBLISHED: 2019-03-22
A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. The vulnerability is due to insufficient CSRF protections for the ...
CVE-2019-1765
PUBLISHED: 2019-03-22
A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an authenticated, remote attacker to write arbitrary files to the filesystem. The vulnerability is due to insufficient input validation and file-level permis...