Stay informed on election security with the latest updates on cyber threats, data protection, and integrity in the democratic process.
Search across headline titles and summaries.
Background for this topic.
Election is a legally governed process for choosing public officials or deciding a question through voting, with rules for registration, ballot creation, voting, counting, and certification. Its cybersecurity scope includes the digital systems supporting those stages—not only voting devices, but voter-registration databases, election-management systems, poll-worker accounts, result-reporting networks, and public information services.
Security priorities are preserving vote and result integrity, keeping essential services available, and protecting voter and worker information from unnecessary exposure. Material risks include unauthorized changes to ballot definitions or tallies, compromise of privileged accounts, disruption of reporting systems, and exploitation of software or network vulnerabilities. Defenses include least-privilege access, multifactor authentication, network separation, tested backups, vulnerability management, and paper records or other independent evidence that supports verification. Election security also requires documented procedures for detecting, containing, and correcting incidents without undermining lawful certification.
President Trump has long complained about perceived threats to election security. Now his DHS has kneecapped the agencies designed to support it. Experts are worried about what comes next.
Agency tries to save face as it also pulls essential funding for election security initiatives The US cybersecurity agency is trying to save face by seeking to clear up what it's calling "inaccurate reporting" after a former senior pentester claimed it laid off the entire Red Team.…
Election infosec advisory agency also shuttered A penetration tester who worked at the US govt's CISA claims his 100-strong team was dismissed after Elon Musk's Trump-blessed DOGE unit cancelled a contract – and that more staff at the cybersecurity agency have also been let go.…