U.S. officials and researchers warned that reduced federal counter-influence programs and fewer election-specific briefings have weakened coordination ahead of the midterm elections, even as federal agencies maintain that election-security support continues. Nextgov/FCW reported that the Trump administration dismantled several counter-influence programs, following an earlier cooling of cooperation during the Biden administration amid litigation over government interactions with social media companies. ODNI has assigned election-threat intelligence coordinators, CISA has outlined election-support plans, and Defense Secretary Pete Hegseth has directed military agencies to prioritize foreign election threats.
AI is reducing the cost and expertise needed to generate persuasive political content, identify audiences, test messages, and automate influence-campaign adjustments. Officials anticipate greater use by Russia and China, with pro-Iran groups also using these capabilities. State election offices are countering misleading voting information, referring threats to law enforcement, and preparing contingency plans. Officials cautioned that convincing content and high engagement do not prove changes in voting behavior, but widespread AI-generated political videos could erode trust in both fabricated and authentic footage.

Track how attackers are adapting to this technology.
13 events from the most recent confirmed update back to the earliest known activity.
Defense Secretary Pete Hegseth directed Cyber Command and military intelligence agencies to prioritize foreign election threats and coordinate with the Department of Homeland Security.
CISA outlined its election-support plans in the month preceding the report. The agency said it would activate an Incident Coordination Group before and during Election Day to share information and coordinate incident response.
An election nonprofit used CISA's election operations room to rapidly assess polling-site bomb threats in November 2024. U.S. officials later said the threats may have been tied to Russia.
Russian interference attempts during the 2016 U.S. election exposed information gaps, according to Bret Schafer of the Institute for Strategic Dialogue.
A current U.S. official said pro-Iran groups had used AI more overtly in recent months amid the war described in the report. The source did not identify specific operations or victims.
ODNI assigned officials to coordinate intelligence concerning election threats as the administration maintained that federal election-security support continued.
The report said ODNI's Foreign Malign Influence Center faced a similar fate to other dismantled counter-influence programs under then-director Tulsi Gabbard.
The Trump administration closed the State Department office responsible for countering foreign information threats.
The Trump administration disbanded the FBI's Foreign Influence Task Force as part of its dismantling of federal counter-influence programs.
The Trump administration shuttered CISA's election-disinformation work as part of a rollback of federal counter-influence programs, largely on censorship grounds.
Cooperation began cooling during the Biden administration as GOP litigation over federal interactions with social media companies made participants more cautious.
A former U.S. official recalled that preparations began roughly a year before the 2020 election. Coordination calls sometimes included 80 to 100 participants, including private companies.
Coordination among government, technology companies, and researchers expanded during Trump's first term following the information gaps exposed by Russian election interference attempts.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcenextgov.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.