Weak industrial security one explanation for Hydro's global ransomware attack