[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fG8LVW3qXI8M9669rpMZokQ-d7m2CaTUtArXskrC7g4Y":3},{"article":4,"iocs":51,"watch_terms":52,"solutions":53,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"7d2aecc5-42fc-4414-a857-9b0716741a16","CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks","cisa-election-security-plan-flags-patching-barriers-voter-database-attacks-c5db4d","Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July. The post CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks appeared first on SecurityWeek.","CISA's 2026 Election Infrastructure Security Plan identifies key cyber threats to US elections, including vulnerabilities in election software hindered by certification processes and the risk of attacks on voter registration databases. The plan emphasizes improving cyber hygiene, implementing multi-factor authentication, and addressing insider risks, while also recommending changes to the software certification ecosystem to allow for faster patching.","CISA's 2026 Election Security Plan highlights patching barriers and voter database threats.","https:\u002F\u002Fwww.securityweek.com\u002Fcisa-election-security-plan-flags-patching-barriers-voter-database-attacks\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002Felection-voting.jpeg","2026-09-25T12:39:12+00:00","2026-09-25T14:00:15.442879+00:00",8,[17,20,23,26],{"name":18,"type":19},"CISA","vendor",{"name":21,"type":22},"Election Infrastructure Security Plan","product",{"name":24,"type":25},"Voter registration databases","technology",{"name":27,"type":25},"Software Bill of Materials (SBOM)","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":28,"icon":30,"name":31,"slug":32},null,"Policy","policy",[34,39,44,46],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":45},{"id":28,"icon":30,"name":31,"slug":32},{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21],{"controls":54,"vendors":135},[55,84,113],{"slug":56,"name":57,"problem":58,"products":59},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[60,68,76],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":85,"name":86,"problem":87,"products":88},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[89,97,105],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":114,"name":115,"problem":116,"products":117},"patch-management","Automated patch management","Known holes get closed in days, not months.",[118,126,130],{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":114,"product_name":127,"url":128,"description":129},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":131,"product_name":132,"url":133,"description":134},"intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",[],{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":153},"election-infrastructure-patching-delays-leave-voting-systems-exposed","Election Infrastructure Patching Delays Leave Voting Systems Exposed","CISA's 2026 Election Infrastructure Security Plan reveals that software certification requirements for election systems create dangerous delays in applying critical security patches, leaving known vulnerabilities exploitable for extended periods. Voter registration databases are identified as high-value targets, and slow remediation cycles amplify the risk of successful attacks during election cycles. Insider threats and weak authentication practices compound the exposure. This matters because compromised election infrastructure can undermine public trust, alter voter data, and disrupt democratic processes at a national scale.",[141,142,143,144,145,146,147,148,149,150,151,152],"CIS Control 7 – Continuous Vulnerability Management","CIS Control 6 – Access Control Management","CIS Control 14 – Security Awareness and Skills Training","NIST SP 800-53 SI-2 (Flaw Remediation)","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AU-6 (Audit Record Review)","NIST SP 800-53 IR-4 (Incident Handling)","NIST Cybersecurity Framework – Respond (RS.RP)","NIST SP 800-84 (Guide to Test, Training, and Exercise Programs)","EAC Voluntary Voting System Guidelines (VVSG) 2.0","CISA Election Security Risk Profile – Voter Registration Systems","ITIL Change Management – Emergency Change Procedures",{}]