Common Cyber Threats
Phishing High
Attackers impersonate trusted entities via email, SMS, or fake websites to steal credentials, financial data, or deliver malware payloads. Variants include spear-phishing (targeted), whaling (executives), and smishing (SMS).
Malware Critical
Malicious software designed to damage, disrupt, or gain unauthorized access to systems.
| Type | Description |
|---|---|
| Ransomware | Encrypts files and demands payment for decryption keys. |
| Trojan | Disguised as legitimate software to gain backdoor access. |
| Worm | Self-replicates across networks without user interaction. |
| Spyware | Covertly monitors and exfiltrates user activity/data. |
Social Engineering Medium
Psychological manipulation techniques (pretexting, baiting, tailgating) that exploit human trust rather than technical vulnerabilities.
Zero-Day Exploits Critical
Exploits targeting vulnerabilities unknown to the vendor, leaving no time ("zero days") to patch before attackers strike. Mitigated through defense-in-depth, not just patching.
Example: Suspicious Log Entry
203.0.113.42 - - [25/Aug/2026:04:20:11] "POST /wp-login.php HTTP/1.1" 200 512
203.0.113.42 - - [25/Aug/2026:04:20:12] "POST /wp-login.php HTTP/1.1" 200 512
203.0.113.42 - - [25/Aug/2026:04:20:13] "POST /wp-login.php HTTP/1.1" 200 512
# Repeated login attempts from a single IP -> possible brute-force attack