US cybersecurity defences fail to thwart mock cyberattack