What Actually Happened With CISA and the Voting Machine Hack Request?
Recent government actions show a shift in posture for federal election security. Early in President Trump’s second term, officials directed the Cybersecurity and Infrastructure Security Agency (CISA) to secretly obtain and hack a voting machine—explicitly instructing that any vulnerabilities found should not be shared with the manufacturer, but kept within the White House. This approach bypasses established norms, where CISA traditionally discloses vulnerabilities to manufacturers so they can be fixed for future elections. Such nondisclosure could allow the exploitation of flaws and signals a move from transparency and remediation toward secrecy and potentially political leverage.
How Have CISA’s Cuts and Policy Shifts Impacted Election Security?
CISA, since 2018, has served as the main federal agency supporting election infrastructure against cyber threats. However, the agency has faced intense downsizing, losing a third of its workforce (about 1,000 jobs) along with many senior leaders departing. Further cuts loom ahead, including funding reductions that could lead to even fewer staff. With diminished resources, CISA’s ability to support state election authorities has eroded. Many states now find themselves without the federal support they previously relied on, breeding mistrust and concern about whether the agency is still positioned to act in the public interest or is now more closely aligned with current political leadership.
What Are the Risks and Trade-offs of Nondisclosure and Weakening Federal Election Security?
By choosing not to disclose vulnerabilities to voting machine vendors, the risk of unaddressed flaws in voting technology increases, leaving systems more open to attack or manipulation. Suppressing security reporting also erodes the collaborative environment that is essential for broad-based election defense. On top of this, workforce reductions mean fewer experts are available to help state or local governments with urgent security needs. Some states have been left to manage election security on their own, which can widen gaps between well-funded and under-resourced jurisdictions. These decisions undermine both the technical robustness of election systems and public trust in the process, as fewer checks and less transparency can fuel doubts about fairness and reliability.
What Should Election Officials and Security Professionals Do Now?
For those responsible for election infrastructure at the state or local level, it is critical to reevaluate plans for technical support. Without reliable CISA backing, officials should bolster relationships with trusted third-party security firms, emphasize staff training, and increase budget allocations for resilience testing. Transparency must be prioritized—regular communication about local election security measures can help rebuild trust with voters and stakeholders. Long-term, advocacy for restored and ringfenced federal security funding is essential to restore a healthy national election defense ecosystem.
Key Takeaways for Security Professionals and Election Stakeholders
Recent CISA directives and budget cuts highlight serious challenges for US election security and transparency. Nondisclosure of vulnerabilities increases risk, while weakened federal support leaves gaps that must be filled locally. Officials and security professionals should plan for increased self-reliance and pursue new partnerships, while advocating for the restoration of nonpartisan national security capacity. Proactivity now is critical to safeguard election integrity and maintain public trust.
- ProPublica
- Courthouse News
- NPR