The U.S. Securities and Exchange Commission slapped the parent company of the New York Stock Exchange with a $10 million penalty Wednesday, saying it failed to comply with a rule requiring securities exchanges to immediately notify the agency of cyber intrusions.