Update: reporting by the non-profit inveestigative journalism shop Pro-Publica suggests that the NormShield report on cybersecurity was shoddy and part of a marketing campaign by the vendor.

Many states are still failing at basic election security measures, according to a report by cybersecurity company NormShield. Vulnerabilities include unprotected websites and leaked passwords.