Cloud IAM misconfiguration Cloud IAM misconfiguration means a user, a service account, an application or a role holds more rights than it needs. In the cloud an identity is not merely a l …

Accidental Data Leak … able to the wrong people through human error, bad configuration, wrong sharing, a public repository, open cloud storage, or mail sent to the wrong address.

Authentication Bypass An authentication bypass means the attacker reaches a protected part of the system without logging in the ordinary way. They need not know a password. Sometimes a flaw in the logic is enough, or an unprotected endpoint, a predictable token, a misconfigured proxy, or a gap between two steps of the login.

Cloud storage exposure … private becomes publicly reachable through a bad configuration of a cloud service. That can be S3 buckets, blob storage, backups, logs, documents, images, data …

Shadow IT Shadow IT is the use of applications, cloud services, accounts and tools without the knowledge or approval of the IT team. Employees usually do not bring them in to cause a problem but to get the work done faster: a file needs sharing, a team needs a chat, marketing needs a tool, sales needs a PDF now.

Shared Account Abuse Shared account abuse begins wherever several people use the same username and password. The system then no longer knows who actually did something. It knows only that a particular account was used, which for accountability is the same as knowing nothing.

DNS Amplification … hole internet with no need to is not merely a bad configuration but part of somebody else's problem.

Denial of Service / DoS … ific flaw in the application, the protocol or the configuration. A small number of specially shaped requests can consume a great deal of memory, hold connection …

Model theft / extraction … be direct theft of the files, the weights and the configuration, but also controlled extraction through an API, where the model is queried enough times to build …

Path Traversal … ly into a file path, the attacker can try to read configurations, passwords, source code and system files.

Privilege Escalation … ies in the operating system or in software, wrong configurations, overly broad file permissions, and services running with more rights than they need. Leftover …

Remote Code Execution It is reached through configuration mistakes, vulnerable libraries, insecure deserialization, file upload, document parsers, memory handling or wrongly exposed …

SCADA/OT Attack … ches an engineering workstation and changes a PLC configuration.