Some of the agency’s websites and web services do not use proper security protocols, leaving them vulnerable to cyberattacks.