No software is perfect. Developers regularly identify bugs in their programs and release patches to fix them. When you delay updating your plug-ins or applications, adversaries can easily exploit those known vulnerabilities.
$500 million. That's the estimated annual profits of the ransomware industry. As cyber criminals learn just how effective this method of extortion is, the attacks will become increasingly targeted at the organizations most likely to pay.