And for the second year in a row, he cited cyber-attacks by Russia, China, Iran and North Korea on U.S. defense contractors, financial institutions, water utilities and electrical grids as the number one threat.