US air traffic vulnerabilities exposed by old computers, severed cables and stalled upgrades