Authentication Bypass An authentication bypass means the attacker reaches a protected part of the system without logging in the ordinary way. They need not know a password. Sometimes …

QR phishing - Quishing Quishing is phishing through a QR code. Instead of a visible link, the user is given an image to scan with their phone. The QR code then takes them to a fake page for a login, a payment, a document download or an account confirmation.

SIM Swapping SIM swapping does not attack the phone but the phone number. The attacker persuades, or bribes, a mobile operator to move the number to a new SIM card, citing a lost phone or a damaged card. They usually come armed with personal details from leaked databases and phishing. The moment the number moves to their card, the real phone loses signal and every call and message goes to the attacker.

Account Takeover … r, with the caveat that weaker forms of it can be bypassed, so stronger ones are worth considering: phishing-resistant models and hardware keys. Alongside that, …

Deepfake Attack … ntity. Video is not enough either, if the request bypasses the procedure.

Infostealer … a bigger prize than a password, because using it bypasses MFA.

Insecure Deserialization … ses it can change a user's role, crash a service, bypass the application's logic, or open access to data that was never meant to be reachable.

Path Traversal … characters. Paths can be encoded, normalized and bypassed in several ways if the application has no clearly bounded permissions.

SQL Injection … ly reads data they should not see. Sometimes they bypass the login, change the contents of the database or delete records. And if the account the application us …