The American Israel Public Affairs Committee — better known by its short name, AIPAC — bills itself as a bipartisan advocate “for policies that strengthen the US-Israel partnership.” In 2026, it’s become something else: a major — and seemingly, losing — issue in Democratic politics. 

Progressive Democratic candidates in primaries across the country are explicitly calling out their opponents’ relationship with AIPAC, often using the connection as a rallying point to persuade voters about the problem of “dark money” in politics. Most recently, in Michigan, AIPAC spent about $30 million boosting Rep. Haley Stevens in her bid for the state’s Democratic Senate nomination. Her opponent, Abdul El-Sayed, drew attention to it again and again. She lost. 

As one of the biggest spenders in US elections, the group has gone well beyond its origins lobbying members of Congress to support its agenda. According to David Dayen, executive editor of the American Prospect, AIPAC is spending millions of dollars against candidates who speak out against Israel’s actions in Palestine — sometimes using advertisements that have nothing to do with Israel, and may appear unrelated to AIPAC.

Dayen spoke with Today, Explained co-host Noel King about the backlash surrounding AIPAC’s spending, the group’s complicated web of shell PACs,  and what it all means for the Democratic Party’s quickly evolving stance on Israel.

Below is an excerpt of their conversation, edited for length and clarity. There’s much more in the full podcast, so listen to Today, Explained wherever you get podcasts, including Apple Podcasts, Pandora, and Spotify. 

What is AIPAC?

AIPAC started out as a lobbying organization. It was inaugurated in the 1950s. It has historically been seen as one of the more powerful lobbying organizations in Washington. And its goal is to strengthen and maintain the relationship between the US and Israel.

They have annual conventions where pretty much everybody across the political spectrum attends and gives speeches. But something changed about five years ago. AIPAC was not content to just lobby members of Congress. They wanted to influence who actually got to Washington. And they began to engage in the use of super PACs to run advertising and other forms of political engagement in campaigns, and particularly in primary campaigns that determine who actually gets to a general election.  

Why did they want to influence who got to Washington? Maybe that sounds like an obvious question, but it wasn’t happening before, so why did it start happening?

One thing that happened is in 2018, we saw the rise of what is known as “The Squad,” and that included Alexandria Ocasio-Cortez, Ilhan Omar, and Rashida Tlaib — people who had very strident views, particularly about the US-Israel relationship. Those progressive Democrats were very successful in winning safe seat races. And I’m not in their head, but it could be that AIPAC wanted to try to provide a counterweight, and stop that from happening, and use their resources — very prodigious resources — to spend money in these campaigns and to make sure that doesn’t happen again.

Once upon a time, an endorsement from AIPAC was a powerful thing. It could be a huge benefit to a candidate. What exactly did it get you when AIPAC said, “This is our guy, this is our gal?”

I mean, in practical terms, it probably got you $5,000 because that’s the limit on a corporate PAC. But because AIPAC was powerful and also a bipartisan organization, getting your name on the list of AIPAC endorsees was something that you could tout in your election. It was something that showed that you had a commitment to what has historically been an important bond between the US and Israel. 

It certainly wasn’t as controversial in the years before 2023 as it is today. After October 7, we saw what a lot of people have termed a genocide against the Palestinian people. The changing attitudes around the US-Israel relationship more broadly, where large numbers of Americans now view that relationship negatively, have changed what the meaning of an AIPAC endorsement really is.

I know that you’ve dug into the numbers. What do we know about how much money AIPAC is specifically spending this midterm cycle?

It’s a hard question to answer. If you go by the Federal Election Commission disclosures, AIPAC has raised about a hundred million dollars this election cycle, and has spent in independent expenditures — that’s TV ads and mailers and these kinds of things — about $28 million. 

But that is an undercount for a couple different reasons. When I say those numbers, I am going by the specific super PAC that AIPAC has created. It’s called United Democracy Project. United Democracy Project has sent money to other PACs — about $9 million worth.

Is this a lot of money?

I think the real innovation here is the transfer of money from, in this case, pro-Israel PACs, to these pop-up PACs, these shell PACs that are created specifically for a particular election and then funded through AIPAC and, in some cases, other other pro-Israel PACs. 

They are sort of laundering this money through to other PACs, so those other PACs run the ads and it doesn’t look like it’s coming from AIPAC. A perfect example was the first real major primary state of the cycle, which was Illinois.

There were four open seats in the Chicago area that are pretty strongly blue. A Democrat is going to win the general election. And so these primaries were highly contested. AIPAC set up two PACs, one called Elect Chicago Women and the other called Affordable Chicago Now. And millions of dollars went from AIPAC’s super PAC, which is called United Democracy Project, into these two pop-up PACs. 

And those two PACs then funded ads for four candidates in those four open seat races. Now, if you were watching that on television, you would say, “Hey, elect Chicago women. That sounds like a good idea. I’m gonna watch this ad” or “Affordable Chicago now. I like affordability.” The truth is that this money was coming from AIPAC into these ads and supporting candidates that were generally supportive of the US-Israel relationship. 

Now, those four races — AIPAC won two of them and they lost two of them. And it was really interesting, I think, where they were successful, and where they weren’t. In one race up in the Evanston area, it became a big issue that AIPAC actually was behind these ads from Elect Chicago Women and Affordable Chicago Now. 

The [AIPAC] candidate, a state senator named Laura Fine, actually was harmed, I think, in the election by this fact that this got out, and that this became a major issue in the campaign. And she ended up finishing third in that primary, despite having millions of dollars supporting her. There were other races where this wasn’t sort of as explicit a factor in the election itself, and those candidates were able to win. 

This all sounds quite shady and yet I wonder — how unusual is it for an interest group in politics to be doing something like this?

I think it’s pretty unusual. It’s not something I’ve seen a whole lot of. We saw it to a smaller degree in some other election cycles — two years ago, four years ago — but it has become a concerted strategy this time. 

And so there are these pop-up PACS that are specific to a campaign, but also some established PACs that have been around for a while are receiving money from AIPAC and affiliated groups and using that in campaigns. 

Emily’s List is a very well-known political organization that supports pro-choice women. They took [hundreds of thousands of dollars] from an organization called Democratic Majority for Israel that is not affiliated with AIPAC per se, but aligns on similar candidates. 

There are other examples of this, more obscure examples. Like there’s a PAC called Crush MAGA PAC. And it’s affiliated with a different, I’m gonna sound crazy when I say this, but Crush MAGA PAC is affiliated with a different pack called Save Democracy, and Save Democracy has received $100,000 from United Democracy Project, which is AIPAC Super PAC. So sometimes the layers here are two or three or even four PACs deep. 

And it can be really hard to untangle all this and figure out where the money has come from, because AIPAC certainly isn’t saying, “We’re funding that campaign.” They’re releasing disclosures as required by the Federal Election Commission, but they’re not saying where the money is earmarked for, if it’s for a specific race, if it’s for a specific candidate.

AIPAC at times has responded to criticism of it by appearing to conflate it with criticism of Israel or criticism of Jews. Last year, Sen. Bernie Sanders comes out with a statement. He denounces Benjamin Netanyahu’s government for what he says is the “extermination of Gaza.” He calls for an end to military aid to Israel. He says people are starving to death.

AIPAC attacks Sanders’s statement, calling it a hate-filled rant and blood libel, and pointing out that in his statement, he didn’t mention Hamas’s attack on Israel. So AIPAC is now public in a way that historically it has not been. And it is tying criticism of Israel to antisemitic sentiment. Does this help or hurt AIPAC’s cause, do you think?

It depends on the messenger, but the issue is that there’s a very straight line between how this money is being used, transferred, spent, concealed, and a broader critique that I think a lot of Democrats have about money in politics. And so when AIPAC decides, “Okay, we’re going respond to criticism that is rooted in what AIPAC believes, and the conditions in Israel and Gaza and the West Bank, et cetera,” to saying, you know, “Any criticism of what we’re doing is antisemitic — I think people who see this as a broader problem about money in politics see that as an extremely cynical take.”

I don’t think that really connects to one of the big reasons why people are really objecting to this, which is that they don’t want to see their politicians essentially bought.

But it’s additionally fraught because there are antisemitic tropes where, you know, a cabal of Jews is secretly controlling the government and finance, right? It feels triply complicated.

Look, I’m Jewish, and in having to cover this, I have to try to follow money from Jewish groups from one place to another, and that can certainly be uncomfortable. And it does add some weight to this issue. 

But I feel like we are talking here not about somebody’s religion, but about a policy. And it’s a twofold policy. One is the policy of the US government funding, to the tune of billions of dollars, the destruction of an entire region, and also the policy of allowing super PACs to dictate who ends up making decisions in Washington.

The internet may no longer be solely the domain of humans. Last week, OpenAI disclosed an “unprecedented cyberincident”: An experimental AI agent successfully hacked its way into the open internet.

Specifically, the agent was assigned a task; in order to complete it, the agent broke out of an isolated research environment and hacked into a third-party platform called Hugging Face. It’s a move that many experts deemed inevitable, given the speed and scale of advances in AI technology — and it raises serious questions about AI safety.

But for Konstantinos Komaitis, a senior fellow with the Democracy and Tech Initiative at the Atlantic Council, it wasn’t the unexpected behavior of the AI that was significant. It was what that behavior could mean for the internet’s fundamental, decentralized infrastructure and whether it would spur calls to build new barriers against autonomous AI agents. 

Komaitis argues that such barriers are not the solution, however. He spoke with Today, Explained co-host Sean Rameswaram about why an open internet is actually key to combating AI cybersecurity threats.

Below is an excerpt of the conversation, edited for length and clarity. There’s much more in the full podcast, so listen to Today, Explained wherever you get podcasts, including Apple Podcasts, Pandora, and Spotify.

So most people see that this happens and they think, “Oh no, AI went rogue. How long before it kills me?” You see that this happens and you start thinking about infrastructure. Tell us more about why you were thinking about infrastructure in light of this AI agent breaking containment.

The internet was never designed with full security in mind, right? 

When you’re creating a decentralized system, you cannot possibly foresee every security or vulnerability that might come up. But because you have a system that is based on building blocks, you have the extraordinary capability of actually addressing security issues as they come up through those building blocks without breaking the whole system down. 

And of course, the other thing that this does is that it pushes you towards collaboration, because when you have so many building blocks, you cannot possibly possess all the knowledge for each building block. So you’re bringing literally everyone to try to address these problems. 

Take the internet, for instance: We have spent decades addressing those vulnerabilities and developing mechanisms to authenticate users and devices, encrypt communications, mitigate distributed attacks, coordinate incident response, and of course share threat intelligence. 

Now, what is new with agentic AI is not that simply the malware is better or the phishing attacks are more sophisticated. It’s the emergence of systems that can actually discover vulnerabilities across thousands of systems. They can reason about alternative paths to an objective. They can adapt when they’re blocked. They can chain together legitimate internet services in unexpected ways. Then they do that while they’re operating continuously at machine speed. And this is really at a scale that the internet is not ready to necessarily cope with. 

Effectively, the internet’s openness becomes both a strength and a vulnerability. So the internet was optimized for interoperability, and AI now is optimized for exploiting that interoperability.

And what scares you the most about that? What do you think is most vulnerable to threats?

The fact that we do not have the appropriate mechanisms and institutions to be able to deal with that. I come from the internet world. I’ve spent 20 years of my career defending the open internet and discussing it in international fora. And one of the things that a lot of people underestimate about the internet is how valuable trust is as a property within the system. 

We are talking about networks that exchange data literally based on trust. So what really concerns me right now is that in many ways, we are asking 21st-century AI systems to operate on 20th-century assumptions about trust. And unless we figure that out and we realize it, we will continue having these problems. And of course, the knee-jerk reactions that are coming with this, which are, “Let’s fragment the internet, let’s restrict it, let’s restrict access, let’s take control over it.” That is never the solution.

What do you see as the solution?

Effectively, we need to build institutions that are trusted and are able to cope with those incidents as they happen. Because right now you have OpenAI and you have Hugging Face telling everyone, “Don’t worry, we’ve got this.” And we don’t know; they might have this. But at the same time, I cannot help but wonder. And many, many other people have wondered whether, actually, this is very good PR for these companies and especially for OpenAI.

OpenAI just went to the world saying, “We have developed one of the most powerful LLMs, and we realized that it behaved the way it behaved, but don’t worry, we are going to fix this.” And in this current climate and in this current timing, I am not sure that this is enough. You need institutions that are much more transparent, much more accountable, and much more collaborative across the board.

You want institutions to step up and essentially serve as a watchdog. Help us understand which institutions, because in the United States, famously, our government has done very little to regulate tech.

First of all, we need to stop thinking of institutions as necessarily government-affiliated, right? Or that they are the outcomes of government initiatives. There can be in collaboration with governments, but one of the things that the internet has taught us is that institutions that are built through a bottom-up coordinated process have the tendency of actually being more agile and able to deliver some of those things that we’re talking about. 

So take, for instance, again, open standards. The internet’s open standards are not created by any agency, government or private. It’s created by institutions where engineers from all across the board and all over the world gather together and create those standards.

That’s reminding me of the original design of OpenAI to be this not-for-profit company that had everyone’s best intentions in mind, that could do something idealistic and moral and ethical because all of the profit-minded companies weren’t going to. And now look at OpenAI. Their not-for-profit arm is an afterthought, and they’re chasing profits. 

Do you think it’s practical to leave this to institutions? Because what we’ve seen so far is that institutions bend toward capitalism.

It really depends on how you build the institution, right? It really depends on what sort of guardrails and checks and balances you have around it. In order to build an institution, you need to really know what you want to achieve. You need to have a north star. 

One of the reasons the internet worked was because everybody disagreed, but they agreed on the common shared goal, which was to connect people across the world. For AI, we still do not have that northern star. And once we get it, that’s when you start the building of those institutions in order to facilitate this and bring everyone together.

For me, it is very important for everyone to understand that keeping an open internet is really more important than ever, especially as AI agents become increasingly capable. Because it is tempting to think that the answer to new AI risk is literally ‘build more barriers.’ But the internet’s greatest strength has always been its openness. So the challenge today is not that the internet is too open; it’s that its trust architecture was designed for a world in which humans or software directly controlled by humans were the primary actors. 

Now, it’s being challenged by this agentic AI that introduces a new type of participant — systems that can reason and plan and act with limited human oversight. So we need to evolve our understanding of trust and what it means online. And that will require a lot of work because, as you know very well, Sean, it’s very difficult to build trust, but you can break it within seconds.