The easiest way for a criminal to break into your website or computer isn't to find an unpatched vulnerability in the software it's running. The easiest way is to choose an existing vulnerability, find (or write) an exploit for it, then attack any computers that are running an outdated version of the vulnerable software.