Why critical infrastructure is vulnerable to cyberattacks