An election security report has revealed evidence of a possible hacking on a Georgia server that …compromised the state’s voting machines in both 2016 and 2018.

The …attack on a Georgia election server was first discovered by Logan Lamb, an election security expert who suggested that hackers may have been able to significantly interfere with state voting data.

…“We know there was no way to audit” the results of the previous elections, Ms Marks said. “There was no … attempt at accountability by the secretary of state, and the entire programming of elections was outsourced.” 

“What Logan’s findings show us,” she added, “is that vulnerabilities were not just hypothetical as the state had been claiming. Now we know that it was a very real risk.

…The Centre for Election Systems at Kennesaw State University, which was tasked with overseeing the programming of Georgia’s elections, then erased all of the data on the server in question. 

…He reportedly found a vulnerability dubbed “Shellshock” that allowed the server to be compromised in December 2014, as well as a separate, unpatched vulnerability in its Drupal software that could have allowed the hacking to take place prior to the 2016 elections. 

Hackers may have gained ‘almost total control’ of an election server in Georgia, report says | The Independent

Tip ‘o the proverbial iceberg.