If IT systems are not sufficiently protected against malware, software vulnerabilities can be exploited by attackers to execute malicious code. Among other situations, this can happen if patches are not applied promptly and the protective mechanisms of application programs (such as browsers) are not configured correctly. In the case of drive-by downloads, it may be enough to visit a website infected with malicious code, for example. A vulnerability in a browser or in an installed plug-in such as Java or Adobe Flash can then be exploited to infect the IT system in question and provide the attacker with comprehensive control, as well as access to the corresponding organisation's network. IT systems that are not updated regularly, such as many smartphones, are at particular risk in this regard.