US making progress on cyber defense, but up against some ‘significant hurdles’: Commission report