Attacks

Everyday scams and deeper technical threats — understand the tactics and protect what matters.

Systems, networks, applications, and adversary techniques.

Audience and technical depth — not severity.37 attacks

Malware & System Compromise

Malware

Harmful software that sneaks onto your device.

Ransomware

Malware that locks your files until you pay.

Infostealers

Malware collects credentials, session cookies, and other valuable data from a device.

Remote-Access Trojans (RATs)

Malware gives an attacker covert remote control of a device.

Rootkits

Stealthy malicious components hide activity by altering low-level system behavior.

Botnets

Networks of compromised devices carry out coordinated attacker commands.

Cryptojacking

Unauthorized software uses your computing resources to mine cryptocurrency.

Fileless Malware

Malicious activity abuses memory or legitimate tools instead of relying only on a standalone executable.

Authentication & Session Attacks

Brute-Force Attacks

Attackers repeatedly guess credentials or secrets until one works.

Password Spraying

An attacker tries a few common passwords across many accounts.

Credential Stuffing

Leaked username-password pairs are reused against other services.

Session Hijacking & Token Theft

Attackers steal or misuse session identifiers to act as an authenticated user.

OAuth Consent Phishing

A malicious app tricks users into granting access through a real authorization screen.

Network & Infrastructure Attacks

Man-in-the-Middle Attacks

An attacker intercepts or alters communication between two parties.

DNS Spoofing & Hijacking

Manipulated name resolution sends users to an attacker-chosen destination.

Distributed Denial-of-Service (DDoS)

Coordinated traffic overwhelms a service and prevents legitimate access.

Network Sniffing

Capturing network traffic can expose information sent without adequate encryption.

ARP Spoofing

Forged local-network address announcements redirect traffic through an attacker.

Web Application Attacks

SQL Injection

Untrusted input changes the meaning of a database query.

Cross-Site Scripting (XSS)

An application renders attacker-controlled content as executable browser code.

Server-Side Request Forgery (SSRF)

An attacker causes a server to make unintended outbound requests.

Remote Code Execution

A vulnerability lets an attacker run code on another system.

API Exploitation

Attackers abuse weaknesses in application interfaces to access data or perform unauthorized actions.

Vulnerabilities & Zero-Days

Zero-Day Exploitation

Attackers exploit a flaw before a effective fix is available or broadly deployed.

Privilege Escalation

An attacker gains permissions beyond the access they initially obtained.

Vulnerability Chaining

Several weaknesses are combined to achieve an impact none would provide alone.

Cloud & Supply-Chain Attacks

Software Supply-Chain Attacks

Attackers compromise software through dependencies, build systems, or trusted distribution channels.

Cloud Misconfigurations

Incorrect cloud settings expose data, services, or excessive permissions.

CI/CD Pipeline Attacks

Attackers abuse automated build and deployment workflows.

AI & Emerging Technical Threats

AI Prompt Injection

Untrusted content tries to redirect an AI system away from its intended instructions.

AI-Agent Security Attacks

Attackers exploit an AI agent’s tools, permissions, memory, or inputs to cause unintended actions.

Adversarial Machine Learning

Manipulated training data or inputs cause machine-learning systems to behave incorrectly.

Advanced Adversary Techniques

Lateral Movement

An attacker moves from an initial foothold to other systems or accounts.

Persistence Techniques

Attackers establish ways to retain access after restarts or partial cleanup.

Command-and-Control

Compromised systems communicate with infrastructure controlled by an attacker.

Defense Evasion

Attackers conceal activity or weaken controls to avoid detection.

Insider Threats

People with legitimate access cause harm through malicious, careless, or compromised actions.

Learn how to Stay Safe