US has 'no strategy' for dealing with Russian cyber attack, says McCain

Trump administration blasted by former candidate

Senator John McCain has warned that the US "[doesn't] have a strategy" for dealing with cyberwarfare tactics that may be employed by Russian, Chinese or North Korean agents, The Guardian reports.

Speaking at the Republican party's annual retreat in Philadelphia, he reiterated the commonly-held belief among the US intelligence community that "the Russians were trying to influence the outcome of our election", and warned that America wasn't ready to respond to similar attacks on elections in Europe.

Many EU countries - France and Germany chief among them - are facing a groundswell of support for far-right parties in the upcoming elections, and there are fears that Russia may use offensive cyber capabilities to propel these parties to victory.

McCain was vocally critical about the state of US cyber security, saying "we don't have a policy and we don't have a strategy". "It is the one aspect of our confrontation where I believe our adversaries are ahead of us," he added.

Advertisement - Article continues below
Advertisement - Article continues below

"Much of the investment in the west has been on cyber defence and monitoring, rather than offence; whether at a government level or within the enterprise space," agreed Piers Wilson, Huntsman Security's head of product management.

He cautioned, however, that the ends does not always justify the means. "Whether the US or any other nation, if we claim to hold 'Western' values, we may find ourselves unwilling to take courses of action that others might find more acceptable," he said. "We shouldn't compromise those values just to reset a perceived asymmetry."

Despite McCain's scorn, signs would suggest infosec is front-of-mind for the Trump regime; the president's foreign policy makes specific mention of using "cyberwarfare" to fight terrorist groups.

However, there have also been recent indications that the personal security of Trump and his top aides may not be up to scratch. Eagle-eyed hackers recently spotted that Twitter accounts belonging to president Trump, vice president Mike Pence, the first lady and more were all vulnerable to security exploits due to a lack of basic protections including two-factor authentication and multi-stage verification.

By exploiting Twitter's password reset function, a hacker known as WauchulaGhost was able to ascertain the email addresses associated with these accounts, many of which were private accounts hosted by companies like Microsoft and Google.

Furthermore, TheNextWeb discovered that cabinet members and key advisors such as Steve Bannon, secretary of defense James Mattis and press secretary Sean Spicer were also vulnerable to the same tactics. Spicer also drew ridicule this week when he accidentally tweeted out an alphanumeric string that many suspected was his Twitter password.

Featured Resources

Digitally perfecting the supply chain

How new technologies are being leveraged to transform the manufacturing supply chain

Download now

Three keys to maximise application migration and modernisation success

Harness the benefits that modernised applications can offer

Download now

Your enterprise cloud solutions guide

Infrastructure designed to meet your company's IT needs for next-generation cloud applications

Download now

The 3 approaches of Breach and Attack Simulation technologies

A guide to the nuances of BAS, helping you stay one step ahead of cyber criminals

Download now



What is cyber warfare?

20 Sep 2019
internet security

Facebook exec calls Cambridge Analytica scandal a "non event"

8 Jan 2020
internet security

Avast and AVG extensions pulled from Chrome

19 Dec 2019

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Most Popular

mergers and acquisitions

Xerox to nominate directors to HP's board – reports

22 Jan 2020
operating systems

17 Windows 10 problems - and how to fix them

13 Jan 2020
public sector

UK gov launches £300,000 SEN EdTech initiative

22 Jan 2020
web browser

What is HTTP error 503 and how do you fix it?

7 Jan 2020