Photo: Thomas Trutschel/Photothek via Getty Images

Three of every 10 candidates running for the U.S. House of Representatives have websites with significant security vulnerabilities, according to research unveiled at cybersecurity conference DEF CON this weekend, per Reuters.

The big picture: Campaigns don't benefit from the kind of federal assistance that states are receiving from Congress to handle election security, and candidates often run on tight budgets and can't always pay for cybersecurity expertise.

  • There are a few free services available to campaigns to help protect against attacks that can flood sites with too much traffic and force them to shut down, including offerings from Cloudflare and Google-owned Jigsaw.
  • Otherwise, they can contact party officials when they suspect they've been targeted, or work with nonprofit groups such as the Defending Digital Democracy Project (D3P) at Harvard. That, or they can hope to have volunteers on board with cyber know-how.

Why it matters: Director of national intelligence Dan Coats has warned that Russian hackers are targeting both candidates and government officials. Midterms are less than 100 days away.

The details:

  • The researchers found problems with websites’ digital certificates that are supposed to verify secure connections.
  • Vulnerabilities were found for Democrats and Republicans alike.
  • The researchers said they are working to contact all the candidates implicated so they can better secure their websites.
  • The group also found several websites built to trick users by changing just a few letters of candidates’ names. The tactic can be used to build fronts for spearphishing campaigns.
  • Joshua Franklin, who used to work at the U.S. Commerce Department’s National Institutes for Standards and Technology and who led the research team, used automated scans and test programs to identify vulnerabilities.

Go deeper

Mike Allen, author of AM
2 mins ago - Politics & Policy

Trump sees court fight as virus respite

Spotted at Trump's rally last night at Harrisburg International Airport in Middletown, Pa. Photo: Joshua Roberts/Reuters

At a rally in Pennsylvania last night, President Trump basked in adulation for Judge Amy Coney Barrett and said: "She should be running for president!"

Why it matters: She might as well be. The Trump campaign is thrilled to be talking about something besides the president's handling of COVID, and is going all-in to amp up the court conversation.

Mike Allen, author of AM
2 mins ago - Politics & Policy

Democrats feel boxed in on strategy for Barrett confirmation fight

Photo: Chen Mengtong/China News Service via Getty Images

Democrats privately fear that going too hard on Judge Amy Coney Barrett in her confirmation hearings could wind up backfiring, if senators are perceived as being nasty to an accomplished woman.

Driving the news: Yesterday afternoon, NBC posted video of Coney Barrett outside her house in South Bend, Ind., loading four of her seven children — two of the seven adopted from Haiti, and another with Down Syndrome — into her Honda Odyssey minivan, then driving them all to her Air Force ride to Washington. "Good luck, Democrats," a Republican tweeted.

Updated 54 mins ago - Politics & Policy

Coronavirus dashboard

Illustration: Sarah Grillo/Axios

  1. Global: Total confirmed cases as of 10 a.m. ET: 32,881,747 — Total deaths: 994,821 — Total recoveries: 22,758,171Map.
  2. U.S.: Total confirmed cases as of 10 a.m. ET: 7,079,909 — Total deaths: 204,503 — Total recoveries: 2,750,459 — Total tests: 100,492,536Map.
  3. States: New York daily cases top 1,000 for first time since June — U.S. reports over 55,000 new coronavirus cases.
  4. Health: The long-term pain of the mental health pandemicFewer than 10% of Americans have coronavirus antibodies.
  5. Business: Millions start new businesses in time of coronavirus.
  6. Education: Summer college enrollment offers a glimpse of COVID-19's effect.

Get Axios AM in your inbox

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Please enter a valid email.

Subscription failed
Thank you for subscribing!