Department of Energy officials say vulnerable software and data supply chains expose the U.S. power grid to attack.