Foreign influence operators and hackers are shifting tactics ahead of the 2026 midterm elections, prioritizing misinformation campaigns to confuse voters over direct tampering with voting machines or ballots, according to a report published Monday by cybersecurity firm Check Point Software.
The report identifies phishing, impersonation, and misinformation activity as the primary vectors of attack, suggesting a strategic pivot away from efforts to alter vote counts. This approach, experts say, is harder to detect and can erode trust in the electoral process without triggering physical security alarms.
The findings add fuel to an ongoing partisan debate. Democrats have long warned about disinformation threats from foreign actors, while Republicans have focused on voter ID laws and ballot security. The report's emphasis on psychological manipulation rather than technical breaches may complicate calls for stricter voting machine regulations.
Public confidence in election integrity remains fractured. A recent poll cited in the report indicated that more than half of voters are concerned about foreign interference, though few believe their own ballot is at risk. The subtlety of misinformation campaigns, experts caution, may lead to widespread confusion without obvious signs of foul play.
While the Check Point report is based on observed threat patterns, some analysts argue that the risk of direct cyberattacks on voting infrastructure remains underappreciated. The report itself does not claim tampering is impossible, only that current observed behavior favors influence operations.