Are carried out through known software vulnerabilities for which there are publicly available patches, according to a study by IT Research firm Gartner.