A ransomware operation that has compromised more than 500 critical infrastructure organizations is highlighting a major challenge for security leaders: attacks are becoming increasingly industrialized, while many organizations remain focused primarily on preventing them.