New rule aims to end key vulnerability in communications infrastructure after attack on American telecoms