Cnn US Cyber Team Not Activated for 2026 Midterm Election Security
Article Content
- •The Election Security Group (ESG) has not been activated for the 2026 midterm elections.
- •Lawmakers are alarmed, calling the lack of activation a major national security mistake.
- •Experts warn that the US is heading into elections partially blind to foreign influence.
As of April 30, 2026, the US military and intelligence officials have not activated the Election Security Group (ESG) to protect the upcoming midterm elections from foreign interference. This marks the first election cycle since 2020 where the ESG, which has been crucial in countering threats from foreign actors like Russia and Iran, remains dormant. Lawmakers, including Senator Angus King, have expressed alarm, labeling the inaction a significant national security mistake. The head of the NSA and Cyber Command, Gen. Joshua Rudd, confirmed that the ESG has not yet been established but stated they are prepared to act if necessary. Experts warn that neglecting the ESG leaves the US partially blind to foreign influence, especially following recent conspiracy theories stemming from an attempted assassination of the president. While Cyber Command and the NSA continue to monitor threats, the absence of the ESG raises concerns about the effectiveness of their efforts. The situation is compounded by the potential for misinformation among the American public regarding foreign meddling.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Continue Reading
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…
Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…