According to a recent Forescout report, the second wave of 2023 Danish energy sector cyberattacks took advantage of unpatched firewalls.
https://www.securitymagazine.com/articles/100319-cybercriminals-target-critical-infrastructure-in-2023-cyberattack