Security fixes across controllers, connectivity software, and supervisory tools show how quickly OT risk can spread when the control stack is tightly coupled.