U.S. Homeland Security found SEC had ‘critical’ cyber weaknesses in January