CISA says exploitation of verified credentials in the SolarWinds breach should be cause for alarm and give rise to tighter identity controls in the federal government.