“Small companies in the defense industrial base, such as those making critical components for the HIMARS system, are a major supply chain vulnerability because they cannot afford expensive cybersecurity measures.”