New Area 1 security study shows that U.S. State & local election administrators remain vulnerable to phish

A recent study by Area 1 Security reveals that state and local election administrators are at varying stages of cybersecurity readiness, with many relying on rudimentary or non-standard technologies to protect themselves from phishing attacks. The majority (53.24%) have only basic controls in place, while fewer than 2 out of 10 (18.61%) election administrators have implemented advanced anti-phishing cybersecurity measures. Additionally, a surprising 5.42% rely on personal email accounts or technologies designed for personal use to conduct their duties. Area 1 Security recommends that election administrators end the use of Exim email servers and transition to cloud email infrastructure such as Google's GSuite or Microsoft's Office 365 in combination with a cloud email security solution. They also advise against using personal email technologies for election duties.