ICS vulnerabilities are still rampant