This week, attackers turned trusted infrastructure into leverage—from industrial controllers and cloud authentication to build systems, management platforms, and signed security tools.