CISA warned about exposed programmable logic controllers weeks before hackers targeted dozens of Minnesota water utilities in a coordinated strike.