The security is definitely better than in the 90s, for what I've heard. The impact of an attack is however greater. You can literally shut down an entire country today, something you could not do back then.
Zetter's Countdown to Zero Day points to that with skepticism and also talks about Kosovo as one of earliest cases, as does Sandworm.
Do you think this is roughly correct?
[1] https://nunatsiaq.com/stories/article/government-of-nunavut-...
[2] https://en.wikipedia.org/wiki/Stuxnet#Iran_as_a_target
[3] https://www.forbes.com/sites/leemathews/2017/08/16/notpetya-...
[4] https://en.wikipedia.org/wiki/Northeast_blackout_of_2003