Hackers have targeted water systems in 12 US states, exploiting vulnerabilities in small communities with outdated technology. Federal authorities are investigating potential links to Iran.