This article outlines democracy's four main weak points against cyber operations. The first weak point is the cybersecurity debate itself. Adversaries are able to exploit fissures among the information security community to increase the effectiveness of their operations. Institutions, including political organizations, campaigns, civil society groups, etc. are the main target of cyber operations against democracy. Targeting institutions allows adversaries to undermine the population's trust in its political system. The third weak point is technical infrastructure, which includes voting information databases, voting machines and vote-counting machines. Operations targeting technical infrastructure can change the result of an election or undermine public confidence in the results. Democracies' intelligence agencies are the fourth major target. Cyber operations against their intelligence agencies weaken democracies' ability to defend themselves from further operations.