"As we head into tomorrow," @CISAJen says on a press call happening now, "I can say with great confidence that our election infrastructure has never been more secure and that the election community has never been better prepared to deliver safe, secure, free, and fair elections."
Easterly: "From the national level, during the early-voting period, we have observed small-scale incidents resulting in no significant impacts to election infrastructure."
Easterly: "These include low-level distributed denial-of-service activity, criminal destruction of ballot drop boxes, some severe weather in the central United States, and continued threats targeting election officials."
Six years after @CyberSolarium urged Congress to make software vendors legally liable for product failures, very little has been done.
My new story for @TheRecord_Media explores the legal, technical, and political challenges facing software liability: therecord.media/cybersecurity-…
Problem #1: Software vendors have been protected from virtually any form of legal accountability for decades, dating back to when policymakers were afraid of stifling the nascent industry.
Licenses disclaim liability.
It's "a golden-child industry," one legal expert told me.
Problem #2: There are a lot of complex legal and technological issues to sort out, including what makes a product reasonably secure, what kind of harm is actionable, how to address open-source software and insurance companies, and how to set civil suit burdens.
I like the detail that the candidates' positions on the left or right were determined by a coin toss. Is there a better side that both of them really wanted? #Debates2024
If it were me, I would show up with four mugs and a six-piece suit, but I'm built different.
NEW: Citing natsec concerns, U.S. bans Russian cyber firm @kaspersky from selling its products in the U.S. New sales end 7/20, software updates to existing customers end 9/29.
First use of Trump-era authorities. Move could jolt many businesses.
@CommerceGov knows roughly how many organizations use Kaspersky and will work with DHS and DOJ to brief them on alleged national security risks and help them transition to other vendors.
@CISAgov will lead outreach to critical infrastructure orgs, some of which do use Kaspersky.
Kaspersky has been banned on USG networks since 2017.
In 2019, Trump signed an EO letting Commerce ban all U.S. transactions of risky foreign-linked IT products and services.
This is the first action to use that authority -- and it could be a legal test case if Kaspersky sues.
Chair Mark Green calls the CSRB report's findings "extremely concerning."
"It falls to this committee to do the due diligence and determine just where Microsoft sits and how it's taken this report to heart."
Green: "We want to give the company we put so much faith in as a government the opportunity to discuss the lessons learned, the actions taken, and, of course, to share where they feel the report could have been wrong."
The Senate Intelligence Committee is holding a hearing on threats to the 2024 election, with DNI Avril Haines, @CISAJen, and FBI National Security Branch chief Larissa Knapp testifying. intelligence.senate.gov/hearings/open-…
SSCI Chair Mark Warner delivers an opening statement summarizing the many different kinds of foreign election interference we've seen, from Russia in 2016 to Iran in 2020 to China now. He also describes Russian interference in other countries' elections.
"In many ways, our adversaries could be more sophisticated and aggressive in both scale and scope in this election even than in prior years," Warner says.