State Auditor raises red flag on cybersecurity vulnerabilities