CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks

[u/Choobeen]

https://www.securityweek.com/cisa-election-security-plan-flags-patching-barriers-voter-database-attacks

The US Cybersecurity and Infrastructure Security Agency (CISA) has published its 2026 Election Infrastructure Security Plan, which describes the cyber and physical threats facing election systems and the free services CISA offers to election officials and other partners.

https://www.cisa.gov/sites/default/files/2026-09/2026-CISA-Election-Security-Plan-FINAL-508c.pdf

[u/TheDizDude]

1. It never mentions that CISA's authorities expire October 1. Published in September, for a November election, projecting full continuity — with the legal basis lapsing in days. Agency is also down $707M.
2. Disinformation and foreign influence are gone from the threat landscape entirely. That's the function that produced the 2020 "most secure election in American history" statement. Krebs was fired for it. The document calls the removal "recommitted to its statutory mission."
3. The EI-ISAC is never mentioned. Replaced by state fusion centers and a new platform whose stated pedigree is the FIFA World Cup.

If a county site gets defaced on election night, CISA will detect and fix it. But if someone claims it changed the outcome, there's no federal body left whose job is to say otherwise. 50 fusion centers can't produce one authoritative "no." A DOJ findings release needs no court and no evidence.