Hackers can make use of any vulnerable device in an organization’s infrastructure, officials say.