Power plants, hospitals and other key installations are regularly being hit by hackers, finds a report.