US agencies warn hackers are using AI to target vulnerable water systems, exploiting outdated industrial controllers and weak security.