Cyber agency: Voting software vulnerable in some states

From AP News.com (May 31):

ATLANTA (AP) — Electronic voting machines from a leading vendor used in at least 16 states have software vulnerabilities that leave them susceptible to hacking if unaddressed, the nation’s leading cybersecurity agency says in an advisory sent to state election officials.

The U.S. Cybersecurity and Infrastructure Agency, or CISA, said there is no evidence the flaws in the Dominion Voting Systems’ equipment have been exploited to alter election results. The advisory is based on testing by a prominent computer scientist and expert witness in a long-running lawsuit that is unrelated to false allegations of a stolen election pushed by former President Donald Trump after his 2020 election loss.

The advisory, obtained by The Associated Press in advance of its expected Friday release, details nine vulnerabilities and suggests protective measures to prevent or detect their exploitation. Amid a swirl of misinformation and disinformation about elections, CISA seems to be trying to walk a line between not alarming the public and stressing the need for election officials to take action.

CISA Executive Director Brandon Wales said in a statement that “states’ standard election security procedures would detect exploitation of these vulnerabilities and in many cases would prevent attempts entirely.” Yet the advisory seems to suggest states aren’t doing enough. It urges prompt mitigation measures, including both continued and enhanced “defensive measures to reduce the risk of exploitation of these vulnerabilities.” Those measures need to be applied ahead of every election, the advisory says, and it’s clear that’s not happening in all of the states that use the machines. [read more]

That’s not good.

More stories on the Dominion Voting System:

• ABSOLUTE PANIC: Pennsylvania Democrat Secretary of State Sues to Prevent State Senate Audit from Examining Dominion Voting Machines
• What Are They Hiding? Democrats Argue Voting Machines Too Fragile to Inspect – If Investigators Touch Them They Will Need to Be Replaced – Demand Rudy Giuliani Be Punished for Requesting Access to Dominion Machines
• EXPLOSIVE: Erroneous Code Was Present on Dominion Election System Software After Being Certified by the EAC
• New Mexico Audit Identifies Feature in Dominion Voting Machines that Allows Ballots to be Filled Out by Machine Itself