A new report claims CISA exposed passwords and cloud keys that could unlock access to critical online systems.