CISA and EPA are urging critical infrastructure firms to tighten up on security as hackers remain on the prowl.