Vulnerabilities in file-sharing software known as MOVEit Transfer allowed hackers to access data at two Department of Energy entities, according to reports.