Feds never faced a ‘major’ cybersecurity attack in 2018