Security Gaps Persist, Report Warns, After U.S. Blames Iran In Election Scheme

Director of National Intelligence John Ratcliffe during his Senate confirmation hearing earlier this year.

Pool / Getty Images

Updated at 11:43 a.m. ET

Government agencies and political actors across the country remain vulnerable to a spoof email scam like the one blamed on Iran by the U.S. spy boss, cyber-analysts said.

Most state and political website domains don’t use a security protocol that constrains the ability for an attacker to send emails that pretend to have originated from their organization, according to a report Thursday by a San Francisco tech firm, Valimail, which analyzed a group of prospective targets.