EU lawmakers have agreed to toughen criminal penalties for cyber attacks, especially those that include harming critical national infrastructure and hijacking computers to steal sensitive data.