Just a few years back, wind turbine software was hacked. This is serious.
Serious governments should (and hopefully will) scramble to use AI to discover and patch as many software vulnerabilities in infrastructure. They can do it with the agents red teaming and using ultimatums to companies to fix each vulnerability they find. Not doing so is equivalent to exposing your flank to disruptions in peace time and to attacks in war time.
There were some other special spinny devices hacked, despite an air gap, a few years back too.