Three-quarters of attacks on the UK’s critical infrastructure over the last year could be linked to hostile states.