US has 'no strategy' for dealing with Russian cyber attack, says McCain
Trump administration blasted by former candidate
Senator John McCain has warned that the US "[doesn't] have a strategy" for dealing with cyberwarfare tactics that may be employed by Russian, Chinese or North Korean agents, The Guardian reports.
Speaking at the Republican party's annual retreat in Philadelphia, he reiterated the commonly-held belief among the US intelligence community that "the Russians were trying to influence the outcome of our election", and warned that America wasn't ready to respond to similar attacks on elections in Europe.
Many EU countries - France and Germany chief among them - are facing a groundswell of support for far-right parties in the upcoming elections, and there are fears that Russia may use offensive cyber capabilities to propel these parties to victory.
McCain was vocally critical about the state of US cyber security, saying "we don't have a policy and we don't have a strategy". "It is the one aspect of our confrontation where I believe our adversaries are ahead of us," he added.
"Much of the investment in the west has been on cyber defence and monitoring, rather than offence; whether at a government level or within the enterprise space," agreed Piers Wilson, Huntsman Security's head of product management.
He cautioned, however, that the ends does not always justify the means. "Whether the US or any other nation, if we claim to hold 'Western' values, we may find ourselves unwilling to take courses of action that others might find more acceptable," he said. "We shouldn't compromise those values just to reset a perceived asymmetry."
Despite McCain's scorn, signs would suggest infosec is front-of-mind for the Trump regime; the president's foreign policy makes specific mention of using "cyberwarfare" to fight terrorist groups.
However, there have also been recent indications that the personal security of Trump and his top aides may not be up to scratch. Eagle-eyed hackers recently spotted that Twitter accounts belonging to president Trump, vice president Mike Pence, the first lady and more were all vulnerable to security exploits due to a lack of basic protections including two-factor authentication and multi-stage verification.
By exploiting Twitter's password reset function, a hacker known as WauchulaGhost was able to ascertain the email addresses associated with these accounts, many of which were private accounts hosted by companies like Microsoft and Google.
Furthermore, TheNextWeb discovered that cabinet members and key advisors such as Steve Bannon, secretary of defense James Mattis and press secretary Sean Spicer were also vulnerable to the same tactics. Spicer also drew ridicule this week when he accidentally tweeted out an alphanumeric string that many suspected was his Twitter password.
Successful digital transformations are future ready - now
Research findings identify key ingredients to complete your transformation journeyDownload now
Cyber security for accountants
3 ways to protect yourself and your clients onlineDownload now
The future of database administrators in the era of the autonomous database
Autonomous databases are here. So who needs database administrators anymore?Download now
The IT expert’s guide to AI and content management
Your guide to the biggest opportunities for IT teams when it comes to AI and content managementDownload now