Cyberattacks on water systems across 12 states expose US infrastructure vulnerabilities. Investigation targets suspected foreign adversaries like Iran.