« The revelations illustrate the lack of security rigor found inside many critical infrastructure environments »