Cybersecurity expert says U.S. was caught unprepared for SolarWinds hack