ASSIGNMENT SECURITY
(touat anis)
LO1:
Internal Cyber Threats in the organisations
These are the top internal cyber threats
Unauthorized data sharing: Sharing sensitive data with an external entity that does not have
need-to-know privileges.
Shadow IT: Using unauthorized third-party software.
Unauthorized devices: Using an unsanctioned, unsecure device at work. USB sticks are a
common example of this threat, but it can also include adding personal devices to the
business network, or bringing an unsanctioned device into a secure area.
Theft of property: When sanctioned devices that may contain sensitive information, such as
company laptops or phones, are not returned to the office.
•External Cyber Threats in the organisations
•These are the top five external cyber threats.
•Internet of Things (IoT): Weak passwords, lack of patching, and IoT skill gaps make
this technology extremely vulnerable to an outside attack, according to Thales.
•Phishing : When cybercriminals pose as a trustworthy source and contact a user via
email, phone, or text. The goal of phishing is either to directly obtain sensitive
information via social engineering, or to infect the network with malware via
malicious links.
•Distributed Denial of Service (DDoS): Attempts to make a computer or network
unavailable by overloading it with fake requests from multiple sources.
•Brute-force attacks: When a hacker uses brute-force tools (e.g., Hashcat, L0phtCrack,
or Aircrack-ng) to guess a user’s password. Weak passwords are especially vulnerable
to a brute-force attack.
•Advanced Persistent Threat (APT): A sophisticated attack in which a hacker infiltrates
the network for an extended period of time, conducting multiple small attacks or
data thefts over the course of months or years. APTs are often not detected using
conventional cyber security measures.
•Malware
•What is a malware ?
•Malware is the collective name for a number of malicious software variants,
including viruses, ransomware and spyware. Shorthand for malicious software,
