Security technician hacks a voting machine to reveal its vulnerabilities

The cost of maintaining aging voting systems

A joint analysis from the Brennan Center and Verified Voting finds that replacing aging voting equipment will cost hundreds of millions of dollars.

The firms running America's voting systems

Three companies make up over 90% of the US market share around voting systems, and like any company, they're priorities aren't always aligned with the public's. Dive into the industry of voting machines in this investigation piece from the Guardian.

In 2003, an electronic voting system in Belgium reported that a political party received more votes than was possible—a result that was attributed to a glitch caused by a cosmic ray.

Watch a cybersecurity expert answers questions about hacking

From firewalls and VPNs to ransomware and viruses, IBM Distinguished Engineer Jeff Crume has seen many changes in cybersecurity during his 40 years of IT experience. In this video, he explores some of the most significant hacking events in history and provides advice on protecting yourself online.

Researchers report that Anthropic's Claude Mythos AI model has identified thousands of high-severity vulnerabilities across various software, including major operating systems and web browsers, and has suggested ways to exploit them.

In 2018, it took about 2.3 years to develop a way to exploit a software bug for malicious purposes, but as of 2026, AI tools have reduced this time to about 20 hours.

Watch how the Enigma machine encrypts messages and learn about its critical design flaw

Using settings selected from a series of rotors and a plugboard that let operators swap letters with any of their choosing, the machine lit up the output letter for each letter typed. While this system could generate messages requiring any of 150 quintillion potential keys, the machine's reflector never encrypted a letter as itself, providing an entry point for exploiting the system.

Smart cities without strong cybersecurity can leave utilities extremely vulnerable

Insecure devices connected to the Internet of Things pose risks to the entire network, which cybercriminals can hijack to compromise infrastructure and private resident data. Poorly secured systems that become inoperable can undermine the promise of smart cities by worsening the quality of life.

Watch an ethical hacker provide a tour of the dark web

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

Voting by mail is safe and secure, and used by voters of both political parties.

As occurred during the 2026 hack of an AI platform by OpenAI, agentic AI may exploit a system vulnerability to access sensitive data if that information enables it to complete its assigned task.

Burglars accessed the DNC once before their failed June 17 attempt

Long before the notorious June 17 intrusion, the burglars successfully accessed and planted listening devices in the DNC offices on May 28—showing how deeply premeditated the operation was and how the scandal's roots stretched back well before the arrests.

Explaining how open source systems like Linux can be secure, despite their public source code

While no computer system is immune to all cyberattacks and malware, the transparency of open-source technology means many thousands of developers can review and oversee the underlying code powering the software on an ongoing basis. This increases the likelihood of catching and patching vulnerabilities more quickly than smaller groups of cybercriminals looking to exploit them.

Explore the components of autonomous vehicles controls

A suite of cutting-edge hardware and computation-intensive software creates the potential for self-driving cars to be safer, more fuel-efficient, and more accessible to a broader range of drivers. However, automation also introduces potential cybersecurity threats.

Explore demonstrations of hundreds of viruses and other malware in action

On their YouTube channel, Malware historian Daniel White has documented what happens when various types of malware—mostly from the 1980s and 90s—run on a computer or Nokia cell phone. The demonstrations were safely conducted within virtual machines—older operating systems run within contained windows of modern software, resembling a picture-in-picture setup.

How Americans have voted throughout history

From shouting candidates’ names, to hanging chads to electronic scanning, the nature of voting has a long, sometimes bumpy history in the United States. See descriptions and images in chronological order with this digestible timeline.

Explore an interactive timeline of the world's biggest data breaches and hacks, led by the 2024 National Public Data breach, which involved almost three billion stolen records, including full names and Social Security numbers.

In 2019, a laptop loaded with six of the worst malware in history and described as 'an exhibit of historical weaponry' sold for $1.3M.

Visualizing the consequence of data breaches

To get a sense of the grim state of data security today, take a look at this infographic from TruthFinder that explains why 2018 was the year of the data breach tsunami.

View a list of simple ways you can avoid catching a computer virus

Because this type of malware requires human intervention, such as plugging an infected flash drive into a computer or downloading and running an infected file, the chance of infection can be greatly reduced by being cautious about unfamiliar emails, attachments, and links. Keeping systems up to date with the latest security fixes is also crucial.

Anthropic's Frontier Red Team assesses the dangers of its AI tools through 'evals'—safety tests that probe models to disclose sensitive information.

OSINT: How hackers find their marks

What is OSINT? How do hackers gather intel about targets? Just how much can they learn about you? Learn more as we dig in to the world of OSINT.

Hacking the body for a future that didn't happen

Journalist Adi Robertson experimented with one of the most accessible biohacks: magnets. Having a tiny magnet in their right ring finger meant they could sense magnetic fields, attract small metal objects, and more. But magnets weaken over time, eroding this new sense. Such implants do more than offer a new way of interacting with the world, they also pose new complications, such as the inability to get an MRI.

Listen to a podcast episode that goes inside the 2017 Equifax credit bureau hack

This podcast episode details a 2017 credit bureau hack in which Equifax data about millions of Americans was compromised. It dives into the history of credit bureaus, specifically how they became legally allowed to access Americans' financial information without Americans actually volunteering it themselves.

The worst cyberattacks of the last 10 years

It’s been a rough 10 years in cybersecurity—and it’s only getting worse. From the Stuxnet to the Sony Hack, learn about the worst cyberattacks over the last decade.

Malware has transitioned from notoriety-driven to profit- and data-driven

Many of the first researchers and hobbyists who created viruses and worms showed a natural curiosity in experimenting with and designing such software to make a name for themselves and advance the field of computer science. In the future, AI-augmented malware may adapt in real-time or design enhanced cryptojackers, infostealers, and ransomware for cybercriminals.

Read an oral history of the Y2K panic

This oral history brings together programmers, engineers, and officials who first identified the date flaw and then spent years alerting the public to the danger and racing to repair millions of lines of code.

The benefits and risks of smart grids, from improved efficiency to cybersecurity risks

By using a network of devices, including digital meters, sensors, and controllers, smart grids can quickly detect mechanical issues and fluctuations in supply and demand, automatically adjusting electricity flow to prevent cascading failures. While this is important for variable solar and wind power generation, many of these computer systems are designed to be controlled remotely, which increases the risk of malicious access.

Creating malware requires more than knowledge of programming languages

Because computer viruses, worms, and other malicious software reside within a computer's operating system, which manages computer hardware and software, cybercriminals writing effective malicious code must understand how the OS manages input and output, permissions, memory, etc. Knowledge of credentials and network access also helps create malware that easily spreads.

How to prepare for cyberattacks

An easy-to-digest checklist on the many ways you want protect yourself from a cyberattack before it happens, if it happens, and after it happens.

The wildest cases of election fraud in US history

The USA has seen some crazy elections. Election fraud is vanishingly rare now, but here are the craziest cases of election fraud in U.S. history.

Through prompt injection attacks, bad actors provide deceptive prompts to generative AI systems in order to manipulate their outputs and acquire sensitive data.

The mathematics of quantum-based cryptography, and why existing data is already at risk

Seeing the potential of this technology, some governments and malicious actors are thought to have already started storing encrypted data, in the hopes that quantum computers within the next 10 to 20 years will be able to decrypt it. As of 2022, the National Institute of Standards and Technology had selected four algorithms for inclusion in a quantum-resistant encryption standard.

Indirect prompt injection is a major security flaw of generative AI systems

These attacks can manipulate AI behavior by hiding instructions in websites and PDFs that become part of training data. The more companies connect sites, services, and sensitive datasets to AI tools, the greater the chances of exposure to malicious code.

Watch the engineering challenges overcome in turning a 3D printer into a tattoo machine

The DIY project required reprogramming the printer to operate on a curved, 2D surface rather than making flat layers in 3D, editing replacement firmware to bypass temperature safety checks, and developing a rapid system to stop the tattoo in case of an emergency. The final product printed "LEG" on a volunteer's leg.

How political campaigns use your data

What do campaigns know about US voters, and how do they use that information to shape their strategies during elections? US political campaigns base their strategies and tactics on data collected from more than 200 million voting-age Americans. This visualization by Reuters breaks down how data firms create national databases of voter files, collecting information from a variety of sources to create detailed voter profiles and how political campaigns use that data.

A comic book-style review of attending a biohacking conference

When Andrew Greenstone attended a biohacking conference in Austin, Texas, he didn't expect to walk away a newly implanted member of the techy cadre. Partway through the event, he paid $150 to have an NFC chip inserted into his right hand.

The story of Susy Thunder, the female hacker who disappeared

Here's the story of Susan Thunder, a woman who entered the hacker underground scene in the late 1970s and one day disappeared completely. She had a troubled past, facing abuse and hardship, and found solace in manipulating phone systems and later computer systems. She became involved with prominent hackers and her ability to control systems mirrored her quest for personal control. Her story highlights the role of social engineering in hacking.

Test your gerrymandering skills with this interactive game

This simulation demonstrates how packing and cracking alter election outcomes. See how shifting district lines can change representation—regardless of the overall makeup of the electorate.

Listen to a deepfake robocall of President Joe Biden

Bad actors are not solely using deepfake technology to manipulate images. They can also manipulate audio for political purposes. In this example, eligible voters are asked to skip the 2024 New Hampshire Democratic primary.

Your device can become infected with malware by simply browsing the internet

During a drive-by download attack, security flaws in a program or operating system (e.g., Windows) used to access online content are exploited, and malicious code is downloaded—for example, when loading a hacked webpage—onto a user's device without their knowledge. Restricting internet browsing to safe sites and installing security updates helps prevent these attacks.

Safely explore historic viruses and other malicious software in the Malware Museum.

Trick a large language model into revealing secret passwords over multiple rounds, each with increasing safeguards.

Average citizens may be the greatest liability to smart cities

Smart cities utilize massive datasets to enhance mobility, resource utilization, and public safety. However, this data can also be compromised if mishandled by residents, making citizen awareness of risks a key component of cybersecurity efforts.

Many early computer viruses were not created for malicious purposes

Besides those authored in research labs as proofs of concept for self-replicating software, hobbyists would create malware that played music or displayed text and animations that intentionally revealed the infection as a means of showing off, rather than hiding their spread.

Election 101 podcast

What’s actually at stake when someone casts their vote in a US election? CNN’s “Election 101” podcast series provides ten episodes summarizing some of the basics of democratic elections. The ins and outs of voting are highlighted in 15-minute episodes on voter registration and voting by mail. Additional segments highlight how the electoral system works, how ballots are counted, the Electoral College, why it takes so long to get election results, and more.

The history and operation of SIGABA, the US counterpart of the Nazi Enigma machine

Developed by the US Army and US Navy, over 10,000 of these machines were deployed by the end of World War II to encrypt messages for the armed forces using three series of rotors. The device would continue to be used until the 1950s, while personal computers were shown to possess enough computing power to crack it by 2021.

Hackers once used 'Fortnite' to clean money from stolen credit cards

Hackers using stolen credit cards would create "Fortnite" accounts and purchase V-bucks, the in-game currency. The hackers would then sell the entire "Fortnite" account on sites like eBay. For instance, an account with $100 worth of stolen V-bucks might sell $25 on eBay.

Are smart cities a dumb idea?

Smart cities require vast troves of data to run, making their systems attractive to hackers. Listen to this one hour podcast to learn about the risks and what is being done to mitigate them.

Microchips in payment cards improve security by generating unique transaction codes

Magnetic strips store unchanging data that is easily cloned, but microchips act as miniature computers that encrypt sensitive data. They also resist fraud by creating data unique to each transaction, preventing duplication.