Cybercriminals have become capable of threatening critical national infrastructure, prompting renewed efforts to shore up cybersecurity. But significant gaps remain.