How cyber threats make their way into the corporate setting