Fraudsters able to get material for a ‘dirty bomb’, finds US watchdog