Audit details cyberattack on UK, points out system weaknesses