Elijah Cummings actually said...
According to GAO, nine security vulnerabilities were identified through covert tests since 2015, and I quote, as of September 2018, none--none--had been formally resolved.
06/25/2019
06/25/2019