It may surprise some security professionals, but major shifts in critical infrastructure risk often arise not from new ...