Supply chain compromise at critical SCADA vendor coincides with Iran-linked infrastructure targeting and imminent NERC compliance deadline.