The Secret Service and the Office of Immigration and Customs Enforcement are failing to take a number of basic cybersecurity precautions, according to an Office of Inspector General report released on Tuesday.

ICE and the Secret Service, which fall under the Department of Homeland Security, have website vulnerabilities that leave employees open to common cyberattacks, according to the report. “Successful exploitation of these vulnerabilities could allow an attacker to mislead a legitimate user to providing sensitive information, conduct privileged functions, or execute clickjacking attacks,” the report states.