Pretnje
10 direktnih pogodaka-
№ 056
BGP Hijacking … on their own machine. It is a matter of internet infrastructure, providers and proper route validation.pretnja · availability
-
№ 070
SCADA/OT Attack An attack on SCADA and OT systems targets industrial processes, not only data. These are the systems that run manufacturing, energy, water, transport, buildings, sensors, PLC controllers and HMI stations. When such a system stops or starts working wrongly, the consequences can be fatal.pretnja · physical / IoT
-
№ 053
Botnet Attacks … company and an unpatched server can all end up as infrastructure for an attack on somebody else.pretnja · availability
-
№ 051
DNS Amplification This attack shows why badly configured infrastructure endangers more than its owner. An open resolver that answers everybody on the internet can become a weapon …pretnja · availability
-
№ 049
Distributed Denial of Service / DDoS … ses a large number of compromised devices, rented infrastructure and reflected traffic to bury the target in web requests until the server is blocked. The aim i …pretnja · availability
-
№ 012
Infostealer … suppliers or development teams can put an entire infrastructure at risk.pretnja · malware
-
№ 067
IoT Device Compromise … k, and more often as passive but sometimes active infrastructure for the attacker.pretnja · physical / IoT
-
№ 054
Service Abuse … orm, excessive API use, mining on somebody else's infrastructure, or using the password reset system as a spam mechanism. Every single request looks legitimate; …pretnja · availability
-
№ 059
Third-Party Compromise … hard because it does not end at the company's own infrastructure. An organization can have solid internal controls and still depend on somebody else's password, …pretnja · trust
-
№ 044
Zero-Day Exploitation … ins, journalists, activists, financial systems or infrastructure. When they do appear in mass use, the window for reacting is short.pretnja · applications
Tehnike
3 direktna pogotka-
№ 037
Double Extortion Requires infrastructure for storing and publishing stolen data.tehnika · exfiltration / impact
-
№ 041
Fast-Flux DNS Used for botnet infrastructure and phishing campaigns.tehnika · C2
-
№ 030
OSINT Used to identify employees, technologies, and infrastructure.tehnika · discovery
Odbrane
12 direktnih pogodaka-
№ 013
Certificate Management PKI infrastructure control reduces the risk of MitM attacks.odbrana · identity / access
-
№ 028
DDoS Protection … alicious traffic reaches or overwhelms the target infrastructure.odbrana · resilience
-
№ 029
DNS Security … ecurity encompasses technologies that protect DNS infrastructure and use DNS traffic as a control point for blocking access to malicious domains and detecting s …odbrana · resilience
-
№ 040
DevSecOps Integrating security into all phases of the software development lifecycle.odbrana · people
-
№ 017
MDR MDR (Managed Detection and Response) is a service where an external security team provides continuous monitoring, threat detection, and incident response on behalf of an organization. It combines technology with human expertise.odbrana · monitoring / response
-
№ 025
Network Segmentation … segmentation is the practice of dividing network infrastructure into smaller, isolated segments with controlled communication between them. The goal is to limi …odbrana · resilience
-
№ 023
Patch Management Patch management is the process of identifying, testing, and applying software updates that fix known vulnerabilities. The goal is to reduce the time window in which an attacker can exploit a known weakness.odbrana · resilience
-
№ 045
Penetration Testing … ld be conducted at least annually and after major infrastructure changes.odbrana · governance
-
№ 038
Phishing Simulations Regular testing of employees with simulated phishing messages.odbrana · people
-
№ 041
Risk Assessment Regular reassessment is necessary as threats and infrastructure change.odbrana · governance
-
№ 015
SIEM … and events from diverse sources across the entire infrastructure, centralizes them, and applies correlation rules to detect suspicious patterns and security inc …odbrana · monitoring / response
-
№ 004
XDR … tection of complex attacks that traverse multiple infrastructure layers.odbrana · endpoints