The Silent Threat
Today, the most dangerous attack on an election may never even touch a ballot. It would not need to breach a voting machine or be in its vicinity. Instead, it functions by targeting the everyday systems a city depends on, creating mass confusion and fear until citizens decide that staying home is safer than voting. Such an attack aims at disrupting the public confidence rather than the vote count itself, which makes it hard to anticipate.
Operation Blackout
This scenario was put to the test in July 2019 during Operation Blackout, a cyber drill held at the security firm Cybereason in Boston. In 90 minutes a Red Team of hackers attacked a fictional swing-state city on Election Day, while a Black Team of federal, state and local law enforcement officers worked to stop them. The attackers gridlocked traffic, proposed doctored camera footage and hijacked emergency alerts to broadcast false warnings of shootings and floods. They also took the 911 center offline. Even so, the defenders prevailed. Sam Curry, who conducted the drill, credited the agencies for using their resources quickly.
The Gap
The drill’s outcome is encouraging to an extent. It was a scenario where defenders could anticipate a hurdle, however, real-world adversaries rarely offer that courtesy. The gap between what was rehearsed and what might come is now being tested on a far larger scale. More than 40 countries are holding elections in the remaining months of 2026. Each of these contests will unfold in a technological landscape which has evolved rapidly. Generative AI can now produce convincing videos, cloned voices and personalised messages at a cheap rate.
Fragile and Slow
The deeper issue exposed here is speed. A false alert can spread within minutes, while verifying and correcting it takes far longer, which erodes trust in the process. Defence structures also vary widely between nations. So a weakness exposed in one can become a template for attacks elsewhere.
Unknown and Untested
Operation Blackout proved that practice works, but only against anticipated threats. The elections ahead will test whether democracies have built the calibre to catch pace with attacks that aren’t a part of a manual yet.
