Hack against US is 'grave' threat, cybersecurity agency says