Catch up on stories from the past week (and beyond) at the Slashdot story archive

 


Forgot your password?
Close
typodupeerror
×

Submission + - A bug in Joe Biden's campaign app gave anyone access to millions of voter files (techcrunch.com) 1

Submitted by mi
mi writes: A privacy bug in Democratic presidential candidate Joe Biden’s official campaign app allowed anyone to look up sensitive voter information on millions of Americans, a security researcher has found.

The campaign app, Vote Joe, allows Biden supporters to encourage friends and family members to vote in the upcoming U.S. presidential election by uploading their phone’s contact lists to see if their friends and family members are registered to vote. The app uploads and matches the user’s contacts with voter data supplied from TargetSmart, a political marketing firm that claims to have files on more than 191 million Americans.

Submission + - FBI, DHS say hackers have gained access to election systems (cisa.gov)

Submitted by Anonymous Coward
An anonymous reader writes: Hackers, possibly nation-state actors, have penetrated U.S. government networks and accessed election systems, the FBI and Cybersecurity and Infrastructure Security Agency (CISA) said in a joint alert.

In some cases, there was unauthorized access to election support systems, CISA added.

The agency,which is part of the Department of Homeland Security,explained there is no evidence so far that the integrity of elections data was compromised andthat "it does not appear these targets are being selected because of their proximity to elections information."CISA did intimate that election system data could be compromised, noting there are steps that election officials, their supporting IT staff, and vendors can take to help defend against this malicious cyber activity.

Hackers got access via a combination of vulnerabilities what CISA calls vulnerability chaining. It is a commonly used tactic and in this case targeted federal and state, local, tribal, and territorial (SLTT) government networks, critical infrastructure, and elections organizations.

The hackers targeted a Virtual Private Network (VPN) vulnerability and a flaw in Netlogon, a Windows protocol to authenticate users.

Patches are available for all of the vulnerabilities referenced in the joint cybersecurity advisory from CISA and the FBI, Tenable, a cybersecurity company, said in a statement sent to Fox News. Most of the vulnerabilities had patches available for them following their disclosure."

Comment Re:Shut up already (Score 1) 280

A scientific study is a conspiracy theory now? Have we really slid so far down the cliff that this is the level of discourse we want to accept?

They're doing study after study, each one not including zinc, which is absolutely essential with HCQ, since all HCQ does is increase cellular zinc absorption. What is the purpose of this, other then to discredit the cheap generic drug in order to beef up pharma stocks. Who sponsored this study?

Slashdot Top Deals

Real Programmers don't eat quiche. They eat Twinkies and Szechwan food.

Close