EPA officials warn that cyberattacks on U.S. water systems have surged several fold, shifting from ransomware to outright disruption — and many utilities still lack basic protections. Colorado and Minnesota have already been hit.