Contractor Abuse … utside the same regime of training, oversight, HR process and discipline. When the contract ends, the account sometimes stays open.

Crypto-wallet drainer … that move crypto assets. Draining a wallet is the process in which the user, believing they are doing something legitimate, signs a transaction or an approval t …

Cryptominer … nd our electricity. In the background it uses our processors and graphics cards to mine cryptocurrency for the attacker while we pay the bill. It has no interes …

Denial of Service / DoS … n, so a small number of requests consumes all the processing capacity.

Dependency Confusion Dependency confusion is an attack on the process by which software build platforms find and deliver software dependencies. An attacker can publish a package on …

Fileless malware A scheduled task starts a process in memory every morning, through which the attacker connects and widens their presence.

Pretexting … department, a supplier, a project or an internal process, the conversation no longer sounds like an attack. It sounds like work. The victim does not give thing …

Prompt injection … ng an instruction apart from the content they are processing. When a model reads an email, a document, a page, a ticket or a message, the attacker can put text …

Remote Code Execution A vulnerable image-processing library on the server lets an attacker run remote commands through a specially prepared file.

Resource Exhaustion … ustion targets what a system cannot work without: processor, memory, disk, network connections, threads, the database or processing queues. The aim is not neces …

Rootkit … cker privileged access while concealing malicious processes, files and connections from security tools. The deeper it sits, the harder it is to remove: a rootki …

SCADA/OT Attack … attack on SCADA and OT systems targets industrial processes, not only data. These are the systems that run manufacturing, energy, water, transport, buildings, s …

Service Abuse … s used for automated cryptocurrency mining or for processing somebody else's workloads.

Shadow IT … nce stays the same: data, identities and business processes move into a space with no control, no contract, no records and no recovery plan.

Spear Phishing … e weight therefore falls on the person and on the process: checking unusual requests through another channel (a call, in person), two-factor authentication, and …

Spyware … — the only trace is how the device behaves, which processes are running, and what traffic leaves it.

Supply Chain Attack … mpromises software, hardware, a supplier, a build process or an update mechanism before the product or service reaches the user. The victim then carries the pro …

Virus … file, and often attaches itself to other running processes and applications. That is what separates it from a worm: a virus needs a host and a user, while a wo …