NewsPublished 29 Oct 2026

How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI

Source SecurityWeek

Description

The security of US elections is challenged by unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns. Voting machines certified by the Election Assistance Commission (EAC) may remain unpatched for years, increasing the risk of compromise. The air-gapped nature of these machines offers some protection but can be bypassed with physical access. Ballots include human-readable and QR code elements, but voters cannot verify the QR code data scanned for counting, raising trust issues. Influence campaigns aim to undermine public confidence in election outcomes. Experts recommend treating voting machines as part of a broader hostile system and improving transparency and verification methods.

Impact

Unpatched and potentially compromised voting machines can lead to inaccurate vote recording and counting. The unverifiable QR-coded ballots prevent voters from confirming the accuracy of the counted votes. AI-driven influence campaigns may erode public trust in election legitimacy. These factors collectively threaten the integrity and perceived legitimacy of US elections.

Defensive guidance

Experts recommend treating voting machines as components in a hostile system, making software open source to improve transparency, limiting the impact of any compromise, and enabling robust verification and audit processes. Physical security to prevent unauthorized access to machines is critical. The certification process should be aligned more closely with election cycles to ensure timely software updates and patches.

Summary

US election voting machines are certified by the EAC, but certification can occur up to two years before use, resulting in potentially unpatched software during elections. Machines are air-gapped but can be hacked if physical access is gained, as demonstrated in DEF CON Voting Village tests. Ballots include human-readable and QR code data; however, the QR code data scanned for counting is not verifiable by voters, creating trust concerns. Influence campaigns, including AI-driven ones, target voter confidence. Experts suggest that voting machines should be considered one component in a hostile environment with potential vulnerabilities in software, firmware, supply chain, and administration. Recommendations include making software open source, limiting compromise impact, and enabling outcome verification.

References

securityweek.com/how-secure-are-us-elections-voting-machine-risks-and-the-growing-threat-of-ai/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 29 Oct 2026, 15:06 UTC

Technical details

References

Community reviews