Last Friday, researchers from the Chaos Computer Club (CCC) of Germany identified several vulnerabilities on voting machines used for vote aggregation and tallying in the German elections.
The white hat hacking group said the vulnerabilities were present because elementary principles of IT security were not followed, and that the severity of the flaws were far worse than expected. They cited an example where attackers could easily send a malicious update to machines due to a “broken software update mechanism”. This way, passwords can be recovered from PC-Wahl config files, alter basic settings, but it is also entirely possible to swap votes from one party to another.
CCC had already contacted authorities with their findings, and some officials have already taken action.
Source: Bleeping Computer