Report: Election vendors are ‘prime targets,’ need oversight