The seemingly local cyberattack that cut power to part of Ukraine’s capital, Kiev, last December could have been a test run. And security researchers now say the malware believed to have caused the blackout is actually modular, mostly automated, and highly adaptable. That means it doesn’t just...