Workstation software flaw exposes industrial control systems to hacking