On-Prem

Public Sector

CISA: Wow, that election had a lot of foreign trolling. Trump's Homeland Sec pick: And that's none of your concern

Cyber agency too 'far off mission,' says incoming boss Kristi Noem


America's lead cybersecurity agency on Friday made one final scream into the impending truth void about election security and the role CISA plays in maintaining it.

The 2024 election cycle was the "most challenging threat environment" the United States has ever faced, said Cait Conley, who, as senior advisor to CISA Director Jen Easterly, helped oversee the agency's election security mission.

These threats spanned envelopes mailed to election offices containing "suspicious white powder," sometimes laced with fentanyl; election officials being swatted at their homes; ballot drop boxes being blown up; ransomware gangs targeting election vendors and offices; and criminals trying to knock election-related websites offline.

Plus, CISA and friends saw a ton of attempts by foreign trolls to unduly influence and divide Americans going to the polls.

"We also observed the most aggressive use of foreign malign influence campaigns in an election cycle, largely led by Russia and Iran," Conley added.

We do not have evidence of any malicious activity that had any material impact

To combat these and other threats, CISA worked with election officials and conducted more than 700 election infrastructure cybersecurity assessments, weekly vulnerability assessments, 200 election security tabletop exercises, and more than 500 training sessions. 

The end result of these efforts, according to Conley: "We can affirm that we do not have evidence of any malicious activity that had any material impact."

Conley wrote this in a Friday afternoon essay, quite possibly on her way out the door for good. Biden-appointed federal staff, including those at CISA, will by and large have left their posts by the time President-elect Trump is sworn into office on Monday next week.

And from that day, some of CISA's efforts including combating election disinformation may also be shuttered.

At her confirmation hearing in Congress on Friday, South Dakota Governor Kristi Noem, Trump's pick to lead the Dept of Homeland Security, indicated she would make cuts to the cyber-agency.

Homeland Security oversees CISA, and CISA's focus on countering online disinformation — especially as it relates to election security and Trump's loss to Joe Biden in 2020 — has drawn the ire of the president-elect.

Noem on Friday essentially said that countering online foreign influence in US elections isn't CISA's problem.

"CISA's gotten far off mission," Noem said during questioning by senators. "They're using their resources in ways that was never intended. The misinformation and disinformation that they have stuck their toe into and meddled with should be refocused back onto what their job is."

CISA's job, she added, is preventing cyberattacks, and working with critical infrastructure along with state and local governments to ensure they can protect their systems against foreign intruders. 

This mission, in Noem's estimation, does not extend far enough to underpin CISA's pledge to "counter efforts by our foreign adversaries to undermine trust and confidence in the American democratic process." 

Conley, on the other hand, counts these counter-efforts as the agency's "most important" steps taken during the 2024 elections alongside other federal agencies, including the FBI.

"As a federal government, we are committed to defending election infrastructure against all threats, including those posed by foreign influence operations," Conley said. "Elections are political, election security is not."

Noem, the new boss, believes otherwise. ®

Send us news
72 Comments

Biden signs sweeping cybersecurity order, just in time for Trump to gut it

Ransomware, AI, secure software, digital IDs – there's something for everyone in the presidential directive

Mitel 0-day, 5-year-old Oracle RCE bug under active exploit

3 CVEs added to CISA's catalog

China's Salt Typhoon spies spotted on US govt networks before telcos, CISA boss says

We are only seeing 'the tip of the iceberg,' Easterly warns

GoDaddy slapped with wet lettuce for years of lax security and 'several major breaches'

Watchdog alleged it had no SIEM or MFA, orders rapid adoption of basic infosec tools

Microsoft eggheads say AI can never be made secure – after testing Redmond's own products

If you want a picture of the future, imagine your infosec team stamping on software forever

Look for the label: White House rolls out 'Cyber Trust Mark' for smart devices

Beware the IoT that doesn’t get a security tag

Miscreants 'mass exploited' Fortinet firewalls, 'highly probable' zero-day used

Ransomware 'not off the table,' Arctic Wolf threat hunter tells El Reg

Ransomware crew abuses AWS native encryption, sets data-destruct timer for 7 days

'Codefinger' crims on the hunt for compromised keys

After China's Salt Typhoon, the reconstruction starts now

If 40 years of faulty building gets blown down, don’t rebuild with the rubble

FCC to telcos: By law you must secure your networks from foreign spies. Get on it

Plus: Uncle Sam is cross with this one Chinese biz over Salt Typhoon mega-snooping

Just as your LLM once again goes off the rails, Cisco, Nvidia are at the door smiling

Some of you have apparently already botched chatbots or allowed ‘shadow AI’ to creep in

Database tables of student, teacher info stolen from PowerSchool in cyberattack

Class act: Cloud biz only serves 60M-plus folks globally, no biggie