Situation Room: AI tools can now find software vulnerabilities that humans might never detect, reshaping your risk exposure and expectations of vendors.
Resource Library: The AI + Elections Skills Hub is the go-to online destination for AI guidance in election administration.
Planning Desk: Analysis is the crucial step to activate your Incident Response Plan with three simple questions.
AI-Powered Bug Hunting: A New Challenge for Security
AI company Anthropic’s new AI model, Claude Mythos, recentlyscanned the Firefox web browser for vulnerabilities. The AI tool uncovered 271 vulnerabilities in the software code. Some had gone undetected for decades. A team of human experts might take months or years to find the same flaws. Mythos did it in days.
Anthropic considered this capability powerful enough that they chose not to release the model publicly. Instead, they provided access to roughly 50 major organizations – including Microsoft, Apple, Google, and the Linux Foundation – to scan their own systems, along with $100 million in usage credits for this defensive security work.
Why Election Officials Should Pay Attention
This Mythos story isn’t really about AI. It’s about software quality and what happens when the cost and time of finding hidden flaws approach zero. In the wrong hands, these tools can be used by malicious actors to find and exploit existing vulnerabilities more quickly than before. Three things have changed:
Asymmetric Speed: AI can find vulnerabilities - flaws that even the software’s creators don’t know exist - far faster than any human team. What once took skilled researchers weeks or months now takes AI only minutes or days.
Massive Scale: Attackers can use AI to scan thousands of systems simultaneously, probing for opportunities into election technology, such as internet-facing voter portals, websites, or election returns portals. ... READ MORE HERE.
The Situation Room focuses on real security incidents and threats in the news relevant to election security. To review previous issues, see thenewsletter archive.
AI + Elections Skills Hub: Tools for Election Professionals
TheAI + Elections Skills Hub from the Mechanics of Democracy Laboratory (MODL) at Arizona State University contains a wealth of useful resources and information for election professionals seeking practical AI guidance. Three resources worth bookmarking at this one-stop online destination:
Case Studies: Real-world examples showing how AI is being applied in election administration contexts.
AI Prompt Library: Ready-to-use prompts designed specifically for election office workflows and communications.
AI + Elections Clinic Substack: Ongoing research, insights, and updates from the team at MODL.
The Resource Library section of the newsletter spotlights election security resources. All highlighted resources are available online in the Resource Library.
Week E-25: Analysis: From Signal to Decision
As detailed in our previous Planning Desk, detection tells you something happened. Analysis tells you what it is, how bad it is, and who needs to know. This is the step that turns a signal into a decision, and it is where most offices either over-react (a routine error gets broadcast as an attack) or under-react (a real incident gets logged as a glitch and forgotten until it comes back bigger).
The good news: you already have your Incident Response Plan (IRP) from thePlanning Desk in issues 11-13. Analysis is the step that determines whether to activate it and at what level.
When a signal arrives, ask these three questions in this order:
What is it? Error, incident, or attack? Each answer requires a different response. An unofficial results shift caused by a data entry error on election night is not a cyber incident, even though it can look like one from the outside. Getting this framing right the first time is critical.... READ MORE HERE.
The Planning Desk is a running timeline of key election security tasks. You can find prior editions in thenewsletter archive.
Want to get daily updates on election news? Subscribe to electionline.
