In an unprecedented move, Nebraska State Senator Loren Lippincott has presented a groundbreaking bill to the Legislature’s government committee, advocating for the allocation of $200,000 to hire an “ethical hacker” dedicated to probing the state’s computer network, election equipment, and software. The proposed legislation aims to identify vulnerabilities in these systems proactively, reflecting a unique approach to cybersecurity.
Inspired by his nephew’s similar work, Lippincott’s bill positions Nebraska as a potential trailblazer in the realm of cybersecurity. While no other states were identified in his staff’s research that have employed independent hackers, Missouri has engaged a company utilizing “white hat hackers” for similar purposes.
“We hope to lead the way,” expressed Lippincott during the bill’s presentation.
In addition to hiring an ethical hacker, the legislation would permit the enlistment of a security company providing expert hackers to assess weaknesses in the state’s systems. This move comes in response to the escalating security challenges faced by state and local election officials nationwide, including cyber threats from foreign governments, criminal ransomware gangs, and the dissemination of election misinformation.
The timing of Lippincott’s bill aligns with FBI Director Christopher Wray’s recent warning about Chinese government hackers targeting critical U.S. infrastructure. It coincides with the launch of a program by the U.S. Cybersecurity and Infrastructure Security Agency aimed at enhancing election security in states. Furthermore, the proposal follows a recent cyberattack on government operations in Georgia, introducing additional challenges ahead of the state’s upcoming presidential primary in March.
Lippincott emphasized that the employment of an ethical hacker can help identify vulnerabilities preemptively, allowing for prompt fixes before malicious actors can exploit them. He likened it to discovering a hole in a dike, preventing potential breaches.
Accompanying this hacker-for-hire initiative is an $11 million cybersecurity bill presented on the same day. This supplementary proposal seeks to empower the state’s chief information officer, local governments, and school districts with resources to enhance cybersecurity through the acquisition of security software and hardware, comprehensive training, and preparedness drills.
At the hearing, both bills garnered support without opposition. The committee will deliberate in the coming days on advancing these pioneering proposals through Nebraska’s distinctive one-chamber Legislature, with the potential for three rounds of debate to pass the legislation.