Until now this has all been bullshit accusations. The "false positives" are very common in these security reports, because they want a warning when there might be an attack.
They do not list the numerous internal attacks that were reported too. These actually modified the votes. These votes can only be changed via physical access. But this is probably not politically interesting, and it involves corrupt staff members and such.
I have been following a lot of this kind of security news. But let's follow the money. Homeland security has already prepared a plan to take over the election system in all states (from before 2016). It seems to me that these accusations are used to push to take over the voting system.
Such a change would theoretically be good, but who watches the watchers? And why does DHS not report on the internal problems that actually changed votes?