Experts see such a cyberattack as realistic probability ahead of November; officials warn that single employee falling for spearphishing attack could compromise systems