The Department of Veterans Affairs' top cybersecurity official told Congress Thursday that audits by VA, DHS and an outside firm have shown no indications the Solarwinds vulnerability was ever used for malicious activity on the department's networks.