Unveiling the Dark Side: Third-Party ICS Cyber Security Attacks and Their Lurking Vulnerabilities