Common Attack Vectors

Trevor Chandler said:

Huh??????????

Click to expand...

Trevor Chandler said:

Here are some common types of attack vectors:

- Weak or Compromised Access Credentials
- Phishing
- Malware
- Unpatched Software
- Third-party vendors & service providers
- Insider Threats
- Lack of Encryption
- Misconfigurations
- Trust Relationships
- Brute Force
- DDoS Attacks
- SQL Injections
- Cross-site scripting (XSS)
- Man-in-the-Middle (MITM)
- Session Hijacking


Got anymore to add to my list!!

Click to expand...

Gregory Childers said:

If we could eliminate social engineering threats, we could eliminate the vast majority of cybersecurity incidents and breaches.

Click to expand...

precious said:

Since it comes with vulnerabilities that can never be patched

Click to expand...

Gregory Childers said:

More effective training and awareness programs combined with more stringent compliance audits can definitely help.

Click to expand...

Patrick Asamago said:

Cross site request attack
Social engineering attack
Man in the browser attack
Zero day attack

Click to expand...

Trevor Chandler said:

I'll accept that!

Click to expand...

Trevor Chandler said:

Here are some common types of attack vectors:

- Weak or Compromised Access Credentials
- Phishing
- Malware
- Unpatched Software
- Third-party vendors & service providers
- Insider Threats
- Lack of Encryption
- Misconfigurations
- Trust Relationships
- Brute Force
- DDoS Attacks
- SQL Injections
- Cross-site scripting (XSS)
- Man-in-the-Middle (MITM) -> now: On Path Attack for CompTIA
- Session Hijacking


Got anymore to add to my list!!

Click to expand...

Trevor Chandler said:

Man in the Cloud? Man in the Disk? These haven't arrived to my knowledge base just yet!!!

Click to expand...