EPA flags security vulnerabilities in more than 300 drinking water systems that serve roughly 110 million individuals.