Elijah Cummings actually said...
According to GAO, nine security vulnerabilities were identified through covert tests since 2015, and I quote, as of September 2018, none--none--had been formally resolved.
Context
Cummings highlights unresolved security vulnerabilities at TSA identified by GAO.
06/24/2019