Businesses are leaving themselves open to attack by allowing counterfeit software programs to run on their corporate networks, security experts have warned.