Security News

Report: Iowa Caucus App Vulnerable to Hacking
2020-02-06 10:49

A review by two computer security experts of the mobile app that malfunctioned during Iowa's critical tally of the Democratic Party's caucus has uncovered that it insecurely sends data, ProPublica reports. Veracode found that the app was vulnerable to hacking "Because of a lack of safeguards, transmissions to and from the phone were left largely unprotected," it reported.

The Iowa Caucus: No Hacking, But a Bungled Risk Matrix
2020-02-05 14:19

Iowa's much-anticipated caucus results were delayed after a mobile app commissioned by Iowa's Democratic Party malfunctioned. "We sincerely regret the delay in the reporting of the results of last night's Iowa caucuses and the uncertainty it has caused to the candidates, their campaigns, and Democratic caucus-goers," says Shadow Inc. CEO Gerard Niemira in a statement on the company's website.

Iowa Fiasco Highlights Security Risks in US Vote, Officials Say
2020-02-05 14:06

US officials and cyber experts warned Tuesday that the voting debacle in the Democratic caucuses in Iowa underscored the vulnerabilities in the country's election infrastructure in everything from hacking to trust-eroding conspiracy theories. The technology problems which have prevented a complete vote count in the first test for the 2020 election were founded on what experts described as a poorly-tested, poorly performing vote reporting smartphone app.

Untested app and no training for volunteers are fatal in Iowa caucus
2020-02-04 18:36

SEE: Iowa caucus app fiasco: How it happened and lessons learned. "Inevitably, the cost of this misstep is considerably greater since damage control and ultimately training staff properly is required, as well demonstrated with the app rollout in Iowa caucuses," Jones said.

Iowa Drops Trespassing Charges Against Penetration Testers
2020-02-03 10:48

Iowa prosecutors have dropped trespassing charges against a pair of penetration testers who were contracted to test the electronic and physical security of three judicial facilities. "The arrests raise national awareness on the quiet war being waged against cybercrime, and the critical role red team penetration testing plays in defending the integrity of public and private sector commerce."

Iowa Prosecutors Drop Charges Against Men Hired to Test Their Security
2020-01-31 21:06

On Sept. 11, 2019, two security experts at a company that had been hired by the state of Iowa to test the physical and network security of its judicial system were arrested while probing the security of an Iowa county courthouse, jailed in orange jumpsuits, charged with burglary, and held on $100,000 bail. Gary DeMercurio, 43 of Seattle, and Justin Wynn, 29 of Naples, Fla., are both professional penetration testers employed by Coalfire Labs, a security firm based in Westminster, Colo. Iowa's State Court Administration had hired the company to test the security of its judicial buildings.

Communication, communication – and politics: Iowa saga of cuffed infosec pros reveals pentest pitfalls
2019-11-07 19:35

Tales from the coal face as experts reflect on what can possibly go wrong on the job Analysis It has been six weeks since Coalfire's Gary Demercurio and Justin Wynn were nabbed in Dallas County,...

Iowa Grocery Chain Investigating Possible Hack of Payment Processing Systems
2019-08-16 19:12

A West Des Moines, Iowa-based grocery chain that also operates restaurants, fuel-pumps and drive-thru coffee shops is warning its customers about a security incident involving some of its payment...

Iowa Health Group Data Breach Hits 1.4 Million Patients
2018-07-31 11:02

UnityPoint Health Says Hackers' Likely Goal Was Business Email Compromise FraudA large Midwestern health network says a successful phishing campaign exposed a raft of personal and medical data...