New reports by the agency’s inspector general and a private company, called Security Scorecard, both highlight the space agency’s struggles around management and to control malware on their network.