A new report from cybersecurity firm Black Kite says a significant number of U.S. energy companies are still highly vulnerable to ransomware attacks.