Mitigation

Cyber security is not a one-time endeavor, but rather an ongoing process that requires continuous monitoring, adaptation, and improvement of strategies to stay abreast of emerging threats.

A type of malware that locks and encrypts a victim's data, files, devices or systems, rendering them inaccessible and unusable until the attacker receives a ransom payment.

Phishing uses tricks to have users reveal their personal information. Often, in conjunction with phishing, hackers will use social engineering techniques of manipulating, influencing, or deceiving a victim to gain control over a system, or to steal personal and financial information.

A type of cyberattack carried out against an organization's suppliers as a means to gain unauthorized access to that organization's systems or data.

A vulnerability or security hole in a computer system unknown to its owners, developers or anyone capable of mitigating it. Until the vulnerability is remedied, threat actors can exploit it, unbeknownst to the organization. "Zero day" refers to the software or device vendor having zero days to fix the flaw because malicious actors are already using it to access vulnerable systems.

Bad threat actors utilize techniques such as credential stuffing in which the attacker collects stolen credentials, consisting of usernames, emails and corresponding passwords.