The nation's 152,000 public water systems often lack defenses against malicious actors, cybersecurity experts said. Here's what to know.