CISA published a 2026 election infrastructure security plan warning that U.S. election systems remain vulnerable because certification rules can delay security patches and many local networks lack basic cyber hygiene. The plan says voter registration databases have been targeted in all 50 states, with confirmed breaches in at least 20, and recommends faster patching paths, multifactor authentication, network segmentation, long-term log retention, paper ballots, post-election audits, CVE tracking, incident reporting, and software bills of materials.
Why it matters: Election offices and the public rely on these systems to stay available and trustworthy, and delayed patching or weak network controls can raise the risk of tampering or disruption. State and local officials, vendors, and partners should review the plan now and tighten patching, access controls, monitoring, and offline audit safeguards before elections.
Eduard Kovacs
2026.09.25
100% relevant
This article establishes a new tracked story because it is centered on CISA's newly published 2026 Election Infrastructure Security Plan, not on a previously tracked breach, exploit, or election-specific advisory in the list.
← Back to all stories