[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEmnVAC5nFtWPzDM7XTrZ_fCYUT8nVhjCqBGciCVtck8":3},{"article":4,"iocs":44,"watch_terms":45,"solutions":46,"lesson":132},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":22,"category":23,"article_tags":26},"63b236f4-1923-440f-98a3-eb472120cc27","Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials","cyber-threat-actors-use-a-variety-of-techniques-to-target-election-and-campaign--4e525e","CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. Malicious cyber actors may use phishing and smishing techniques to steal login credentials and other sensitive information or install malware on targeted devices. Election officials, candidates, and political organizations may be attractive targets because of their access to voter registration data, current government officials, and sensitive campaign information. Cyber actors are increasingly using sophisticated phishing and smishing campaigns that closely resemble legitimate communications. These efforts may include convincing emails, text messages, audio, and video content designed to manipulate recipients into disclosing sensitive information or interacting with malicious links and attachments. CISA and the FBI urge election officials, campaign personnel, and the public to review the PSA, follow recommended cybersecurity practices, and remain vigilant for suspicious emails and mobile messages.","CISA and the FBI have issued a warning about cyber threats targeting election and campaign officials for the 2026 U.S. midterm elections. Threat actors are employing advanced phishing and smishing tactics, including convincing emails, texts, audio, and video, to steal credentials and install malware. These actors are drawn to election personnel due to their access to sensitive voter data and campaign information.","US election officials warned of sophisticated phishing and smishing attacks targeting 2026 midterms.","https:\u002F\u002Fwww.cisa.gov\u002Fresources-tools\u002Fresources\u002Fcyber-threat-actors-use-variety-techniques-target-election-and-campaign-officials",null,"2026-10-16T12:00:00+00:00","2026-10-16T16:00:15.359606+00:00",7,[17,20],{"name":18,"type":19},"CISA","vendor",{"name":21,"type":19},"FBI","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":22,"icon":12,"name":24,"slug":25},"Nation-state","nation-state",[27,29,34,39],{"category":28},{"id":22,"icon":12,"name":24,"slug":25},{"category":30},{"id":31,"icon":12,"name":32,"slug":33},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":35},{"id":36,"icon":12,"name":37,"slug":38},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":40},{"id":41,"icon":12,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21],{"controls":47,"vendors":131},[48,77,106],{"slug":49,"name":50,"problem":51,"products":52},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[53,61,69],{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":78,"name":79,"problem":80,"products":81},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[82,90,98],{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png","harmony-email","Harmony Email & Collaboration","https:\u002F\u002Fwww.checkpoint.com\u002Fharmony\u002Femail-security\u002F","Email and collaboration security for Microsoft 365 and Google Workspace.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",{"slug":107,"name":108,"problem":109,"products":110},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[111,118,124],{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":112,"product_name":115,"url":116,"description":117},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":119,"product_name":120,"url":122,"description":123},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":107,"product_name":128,"url":129,"description":130},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",[],{"slug":133,"title":134,"body":135,"framework_refs":136,"framework_notes":148},"phishing-smishing-attacks-target-election-officials-ahead-of-2026-midterms","Phishing & Smishing Attacks Target Election Officials Ahead of 2026 Midterms","Cyber threat actors are leveraging sophisticated phishing, smishing, and AI-generated audio\u002Fvideo content to steal credentials from election and campaign officials who hold access to sensitive voter data. The root cause is a combination of insufficient security awareness training and inadequate access controls that make high-value targets easy to compromise through social engineering alone. Election personnel are particularly attractive targets because a single compromised account can expose large volumes of personally identifiable voter information. As AI-generated deepfake content becomes more convincing, traditional defenses like spotting 'suspicious-looking' emails are no longer sufficient without layered technical and procedural controls.",[137,138,139,140,141,142,143,144,145,146,147],"CIS Control 14 – Security Awareness and Skills Training","CIS Control 6 – Access Control Management","CIS Control 9 – Email and Web Browser Protections","NIST SP 800-53 AT-2 – Literacy Training and Awareness","NIST SP 800-53 IA-5 – Authenticator Management","NIST SP 800-53 AC-6 – Least Privilege","NIST SP 800-63B – Digital Identity Guidelines (Phishing-Resistant MFA)","NIST Cybersecurity Framework (CSF) PR.AT-1 – Awareness and Training","CISA #StopRansomware & Election Security Guidance","FBI PIN – Advanced Persistent Threat Targeting Election Infrastructure","GDPR Article 32 – Security of Processing (for voter PII handling)",{}]