Weak industrial security one explanation for Norsk Hydro's global ransomware attack