You don't often see vulnerabilities in Putty, which considering the amount of corporate systems it's used with is quite amazing.
There's also the issue that in a corporate environment, having a much smaller attack surface is greatly preferred. Trying to get something like Cygwin past the security dept in a BIG company - quite challenging.
(To be clear, I have nothing against the GPL, but some corporate environments avoid it like the plague.)
PuTTY is also much quicker and easier to set up.