Hacking, flash-crash drives SEC rule effort