Topic: Attacks, Threats, and Vulnerabilities (Part 2 — Advanced)

🧬 Advanced Threat Types

APT (Advanced Persistent Threat)

Highly skilled attackers (often nation-states) who stay inside a system for months.

Zero-Day

A vulnerability that no one knows about yet — no patch exists.

Supply Chain Attack

Attackers compromise software or hardware before it reaches the customer.

Example: SolarWinds.

Insider Threat

A threat from someone who already has access:

• Negligent
• Accidental
• Malicious

🧰 Vulnerabilities

Misconfigurations

#1 cause of breaches outside social engineering.

Examples: