CISA said the hackers have compromised operational technology connected to water systems, dams, energy networks, and the food and agriculture sector.