Why corporate networks are vulnerable