Yearly Archives: 2025

National: Mobile Voting Project’s vote-by-smartphone has real security gaps | Andrew Appel/CITP Blog

Bradley Tusk has been pushing the concept of “vote by phone.” Most recently his “Mobile Voting Foundation” put out a press release touting something called “VoteSecure”, claiming that “secure and verifiable mobile voting is within reach.” Based on my analysis of VoteSecure, I can say that secure and verifiable mobile voting is NOT within reach. It’s well known that conventional internet voting (including from smartphones) is fundamentally insecure; fraudulent software in the server could change votes, and malware in the voter’s own phone or computer could also change votes before they’re transmitted (while misleadingly displaying the voter’s original choices in the voter’s app). In an attempt to address this fundamental insecurity, Mr. Tusk has funded a company called Free & Fair to develop a protocol called by which voters could verify that their votes got counted properly. Their so-called “VoteSecure” is a form of “E2E-VIV”, or “End-to-End Verified Internet Voting”, a class of protocols that researchers have been studying for many years. Unfortunately, all known E2E-VIV methods, including VoteSecure, suffer from gaps and impracticalities that make them too insecure for use in public elections. In this article I will pinpoint just a few issues. I base my analysis on the press release of November 14, 2025, and on Free & Fair’s own “Threat Model” analysis and their FAQ. Read Article

National: 2025: The Year Cybersecurity Crossed the AI Rubicon | Dan Lohrmann/Government Technology

“Crossing the Rubicon” means passing a point of no return. The idiom comes from Julius Caesar illegally leading his army across the river Rubicon in 49 B.C., an act that sparked the Roman civil war and ultimately made him dictator for life. But how has cybersecurity crossed the AI Rubicon? Put simply, the integration of AI into both attack and defense has permanently changed the nature of cybersecurity, creating a before-and-after moment in 2025. We are witnessing a great acceleration in the speed and scale of change, with an exponential growth in threats, complexity and the deployment of AI tools that characterized the year. At the same time, cybersecurity has become a geopolitical weapon with a convergence of cyber and real-world conflict. This is a shift from mere data loss to nation-state conflict and hacktivism as the dominant narratives. Read Article

National: Republicans push mail-in voting for the midterms in defiance of Trump | Lisa Kashinsky/Politico

Republicans are making mail-in voting a core part of their midterm battle plans — a sharp contrast with President Donald Trump’s efforts to abolish the practice as they scramble to turn out his base. In Wisconsin, the state party is preparing a full-court press of mailers, emails, phone banks, door knocks and digital ads to get voters to sign up for mail ballots. In Michigan, the Monroe County GOP ran a social media campaign ahead of the fall election urging voters to utilize permanent absentee ballots and is planning an even bigger push next year. In Pennsylvania, where Republicans poured $16 million into boosting the number of GOP voters using mail ballots in 2024, the state party chair called it “a priority” for 2026. The nonprofit Citizens Alliance, which aided efforts to get Republicans to return their mail ballots in Pennsylvania last year, is planning to knock 750,000 doors ahead of the midterms to encourage infrequent voters to embrace the practice. Read Article

National: The Justice Department has now sued 18 states in an effort to access voter data | NPR

The Department of Justice has filed lawsuits against four more states as part of the Trump administration's attempt to access sensitive voter data. The DOJ is also suing one Georgia county, seeking records from the 2020 election. The department has now filed suit against 18 states — mostly Democratic-led, and all states that President Trump lost in the 2020 election — as part of its far-reaching litigation. For months, the Justice Department has been demanding certain states turn over complete, unredacted copies of their voter registration lists, including any driver's license numbers and parts of voters' Social Security numbers. Read Article

National: Congress could try to pass new election laws before the 2026 midterms | Carrie Levine/Votebeat

Republicans, led by President Donald Trump, have had a lot to say about the rules and laws that govern our elections. Changing them, though, is harder. House Republicans are signaling plans for legislation to inscribe at least some of the party’s election-administration wish list into federal law, including changes to the landmark National Voter Registration Act that would make it easier to remove ineligible voters from the rolls. Republicans have long accused states of failing to appropriately clean their voter rolls, and the U.S. Justice Department has filed a host of lawsuits seeking access to unredacted state voter rolls in what government lawyers have said is an effort to make sure states are complying with their obligations under federal law. Trump issued a sweeping executive order on elections in March, and the White House said last month he is working on a second. But major provisions of the March order have so far been halted by the courts after federal judges found the president lacked the constitutional authority to enact them. Read Article

National: Key lawmaker says Congress likely to kick can down road on cyber information sharing law | Tim Starks/CyberScoop

With a little more than a month left before a foundational cyber threat information sharing law expires for a second time, Congress might have to do another short-term extension as negotiations on a longer deal aren’t yet bearing fruit, a key lawmaker said Tuesday. House Homeland Security Chairman Andrew Garbarino, R-N.Y., said the problem with a long-term extension of the Cybersecurity Information Sharing Act of 2015, which provides legal protections to companies to share cyber threat data with the federal government and other companies, is that there are three different views about how to approach it. The Trump administration and some in the Senate want a clean, 10-year reauthorization of the law, which Congress extended last month until Jan. 30 as part of the legislation that ended the government shutdown, after the information sharing law lapsed in October. But a reauthorization without any changes could run into House opposition, Garbarino said. Read Article

National: AI tops cybersecurity in survey of state IT priorities | Colin Wood/StateScoop

In a development that will surprise few who’ve been tracking government, technology or world events more broadly, artificial intelligence has, on average, overtaken all other concerns in state technology offices across the nation. The National Association of State Chief Information Officers, a group that represents state governments’ top IT officials, on Tuesday published its annual list of priorities, which is based on a survey of its membership. In last year’s list, AI was barely edged out for the top slot by cybersecurity, a technical and political concern that has made the list all 20 years since its first edition. But this year, said Doug Robinson, NASCIO’s executive director, AI won and “it wasn’t even close. It’s been a very swift ascension to No. 1.” For state CIOs, generative AI tools represent a means of offsetting workforce shortages that have been slow to repopulate after the COVID-19 pandemic, chatbots to provide residents more personalized experiences when they visit government websites, or a scalpel to shave a few extra hours of work off processing applications for safety-net benefits that will receive less support under the second Donald Trump presidency. Read Article

25 Years After Bush v. Gore, Supreme Court and Election Law Still Feel the Fallout | Stephen Spaulding/Brennan Center for Justice

It all started with that infamous ballot. Presidential candidates from major and minor parties appeared on either side of a line of holes down the center of the ballot for voters to punch through with a stylus to indicate their pick. On the left, the first two names were Republican George W. Bush and Democrat Al Gore, but confusingly they corresponded to the first and third holes. In addition to the layout problems was an issue with how the ballots recorded votes: Some voters punched cleanly through the card, while others left only dimples that election workers later examined with magnifying glasses to determine voter intent. Some ballots presented the issue of the “hanging chad,” where a piece of the ballot was left clinging by a corner or two. (The Smithsonian also has a bag of these.) Studies indicate that at least 2,000 Palm Beach County voters accidentally selected Reform Party candidate Pat Buchanan when they meant to vote for Gore, who lost Florida — and therefore the Electoral College — by just 537 votes. Read Article

National: Republicans in Congress eye more power for states to remove voters | Jonathan Shorman/Stateline

Republicans in Congress want to give states more authority to remove ineligible voters — including noncitizens and people who have moved or died — from voter rolls, seeking to reinforce the Trump administration’s own push to scrub the lists. At a U.S. House hearing on Wednesday, lawmakers weighed changing a landmark federal voter registration law, the 1993 National Voter Registration Act, or NVRA, which requires state motor vehicle agencies to offer residents the opportunity to register to vote. Some conservatives say the law makes it too difficult for states to keep their voter rolls up to date. Since President Donald Trump took office, the U.S. Departments of Justice and Homeland Security have ramped up efforts to scoop up data on voters and pressure state officials to conduct more aggressive maintenance of their lists to ensure that everyone on the roll is eligible to vote. Read Article

National: Governors Shapiro (D) and Cox (R) join forces to denounce political violence | Colby Itkowitz and Yasmeen Abutaleb/The Washington Post

Josh Shapiro and Spencer Cox know firsthand what happens when political violence comes home. Shapiro, Pennsylvania’s Democratic governor who is widely expected to run for president in 2028, was asleep with his family when an arsonist set fire to their home. Cox, Utah’s Republican governor, was one of few voices who called for calm and “moral clarity” after the right-wing activist Charlie Kirk was fatally shot onstage at Utah Valley University in September. The two spoke together about rising political violence Tuesday at Washington National Cathedral, a rare bipartisan event in a deeply polarized country. Both criticized their parties for not doing enough to cool partisan tensions and condemn political violence when it affects their opponents. Read Article

National: Trump’s SAVE citizenship tool is flagging U.S. citizen voters | Jude Joffe-Block/NPR

Anthony Nel is the kind of voter who doesn't like to skip an election. The 29-year-old lives in the Dallas-Forth Worth area and usually votes early, which he did as recently as Texas' Nov. 4 constitutional election. So he was disturbed last month to open a letter from his local election office in Denton County, calling into question whether he was eligible to vote at all. "We have received information from the Texas Secretary of State reflecting that you might not be a United States citizen," read the notice. The notice said he needed to provide proof of citizenship — such as a copy of a U.S. passport, birth certificate or naturalization certificate — within 30 days. Otherwise, his registration would be canceled, though it said he could be immediately reinstated if he showed that documentation at a later date. Read Article

National: Voting by mail faces uncertain moment ahead of midterm elections | Jonathan Shorman/Stateline

Derrin Robinson has worked in Oregon elections for more than 30 years, long enough to remember when voters in the state cast their ballots at physical polling sites instead of by mail. As the nonpartisan clerk of Harney County, a vast, rural expanse larger than Massachusetts, Robinson oversees elections with about 6,000 registered voters. Oregon has exclusively conducted elections by mail since 2000, a system he thinks works well, requires fewer staff and doesn’t force voters to travel through treacherous weather to reach a polling place. “As you can tell, I’m not an advocate for going back,” Robinson said. Not everyone agrees. An Oregon Republican lawmaker has introduced legislation to end the state’s mail voting law, and organizers of a ballot measure campaign seeking to ban mail-in voting say they have gathered thousands of signatures. Read Article

National: CISA Left Leaderless as Plankey’s Nomination Stalls in Senate | Emily Hill/The National CIO Review

The nomination of Sean Plankey to lead the Cybersecurity and Infrastructure Security Agency (CISA) has effectively stalled following his exclusion from a recent Senate vote to advance a group of nominees. Plankey, a former Coast Guard officer and cybersecurity adviser, faced multiple procedural holds from senators, one of which was linked to a dispute over a Coast Guard contract. As Plankey was not included in a package of nominees that advanced last Thursday, Senate procedures now make it unlikely that his nomination will move forward in the current session. This development leaves CISA without a Senate-confirmed director at a time of increasing focus on national cybersecurity efforts and ongoing transitions in agency leadership. Read Article

National: John Robert’s Dream Is Finally Coming True | David Daley/The Atlantic

In 1982, when the Voting Rights Act was up for reauthorization, the Reagan Justice Department had a goal: preserve the VRA in name only, while rendering it unenforceable in practice. A young John Roberts was the architect of that campaign. He may soon get to finish what he started. Last month, at the oral argument in Louisiana v. Callais, a majority of the conservative justices seemed to signal their willingness to forbid any use of race data in redistricting. That could lead to the end of the VRA’s Section 2 protections for minority voters, and allow states across the South to redraw congressional districts currently represented by Black Democrats into whiter, more rural, and more conservative seats, potentially before the 2026 midterms. A central question of the case, hotly debated during oral arguments, is whether Section 2 should prohibit election laws and procedures that have a racially discriminatory effect, or just those passed with clear racially discriminatory intent. Roberts almost certainly had flashbacks. This is the same question that was at the center of the 1982 reauthorization fight. Back then, the future chief justice’s job was to design the Department of Justice’s VRA strategy. Read Article