US Military buy items that “have been known to contain security vulnerabilities”