Some are poorly secured. Yet enough nuclear material to fill a small bag of sugar is all it takes to construct a device with the potential to kill hundreds of thousands of people and inflict billions of dollars in damage.