<h3><b style="background-color: rgb(255, 255, 255);"><span style="font-size: 18pt; line-height: 107%; font-family: &quot;Times New Roman&quot;; color: windowtext;">1.</span><span style="font-size: 18pt; line-height: 107%; font-family: &quot;Times New Roman&quot;; color: rgb(0, 42, 58); letter-spacing: -0.1pt;"> </span><span style="font-size: 18pt; line-height: 107%; font-family: &quot;Times New Roman&quot;; color: windowtext;">Malware</span><span style="font-size: 11pt; line-height: 107%; font-family: &quot;Times New Roman&quot;, serif; color: rgb(0, 42, 58); letter-spacing: -0.1pt;"><o:p></o:p></span></b></h3><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; font-size: 14px; background-color: rgb(255, 255, 255);">The term
“malware” encompasses various types of attacks including spyware, viruses, and
worms. Malware uses a vulnerability to breach a network when a user clicks a
“planted” dangerous link or email attachment, which is used to install
malicious software inside the system.</span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN"><br></span><span style="font-family: &quot;Times New Roman&quot;, serif;">Malware
and malicious files inside a computer system can:</span></span></p><ul><li style="margin-bottom: 10.5pt; line-height: normal;"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);"><span style="font-size: 14px;">Deny
access to the critical components of the network</span><o:p></o:p></span></li><li style="margin-bottom: 10.5pt; line-height: normal;"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">Obtain
information by retrieving data from the hard drive<o:p></o:p></span></li><li style="margin-bottom: 10.5pt; line-height: normal;"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">Disrupt
the system or even render it inoperable<o:p></o:p></span></li></ul><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">Malware
is so common that there is a large variety of modus operandi. The most common
types are:<o:p></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">Viruses</span></b><span style="font-family:&quot;Times New Roman&quot;,serif;mso-fareast-font-family:&quot;Times New Roman&quot;;
mso-fareast-language:EN-IN">—these infect applications attaching themselves to
the initialization sequence. The virus replicates itself, infecting other codes in the computer system. Viruses can also attach themselves to executable code
or associate themselves with a file by creating a virus file with the same name
but with a .exe extension, thus creating a decoy that carries the virus.<o:p></o:p></span></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">Trojans</span></b><span style="font-family:&quot;Times New Roman&quot;,serif;mso-fareast-font-family:&quot;Times New Roman&quot;;
mso-fareast-language:EN-IN">—a program hiding inside a useful program with
malicious purposes. Unlike viruses, a trojan doesn’t replicate itself and it is
commonly used to establish a backdoor to be exploited by attackers.<o:p></o:p></span></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">Worms</span></b><span style="font-family:&quot;Times New Roman&quot;,serif;mso-fareast-font-family:&quot;Times New Roman&quot;;
mso-fareast-language:EN-IN">—unlike viruses, they don’t attack the host, being
self-contained programs that propagate across networks and computers. Worms are
often installed through email attachments, sending a copy of themselves to
every contact in the infected computer email list. They have commonly used to
overload an email server and achieve a denial-of-service attack.<o:p></o:p></span></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">Ransomware</span></b><span style="font-family:&quot;Times New Roman&quot;,serif;mso-fareast-font-family:&quot;Times New Roman&quot;;
mso-fareast-language:EN-IN">—a type of malware that denies access to the victim's data, threatening to publish or delete it unless a ransom is paid.&nbsp;</span><span style="font-family:&quot;Times New Roman&quot;,serif"><a href="https://www.datto.com/ransomware/" target="_blank"><span style="color: windowtext;">Advanced ransomware</span></a></span><span style="font-family:&quot;Times New Roman&quot;,serif;mso-fareast-font-family:&quot;Times New Roman&quot;;
mso-fareast-language:EN-IN">&nbsp;uses cryptoviral extortion, encrypting the
victim’s data so that it is impossible to decrypt without the decryption key.<o:p></o:p></span></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">Spyware</span></b><span style="font-family:&quot;Times New Roman&quot;,serif;mso-fareast-font-family:&quot;Times New Roman&quot;;
mso-fareast-language:EN-IN">—a type of program installed to collect information
about users, their systems, or browsing habits, sending the data to a remote user.
The attacker can then use the information for blackmailing purposes or download
and install other malicious programs from the web.</span></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><h3><span style="font-size: 11pt; line-height: 107%; font-family: &quot;Times New Roman&quot;, serif; color: windowtext; background-color: rgb(255, 255, 255);"><span style="font-size: 18px;"><b>2. Phishing</b></span><o:p></o:p></span></h3><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">Phishing
attacks are extremely common and involve sending mass amounts of fraudulent
emails to unsuspecting users, disguised as coming from a reliable source. The
fraudulent emails often have the appearance of being legitimate, but link the
recipient to a malicious file or script designed to grant attackers access to
your device to control it or gather recon, install malicious scripts/files, or extract data such as user information, financial info, and more.<o:p></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">Phishing
attacks can also take place via social networks and other online communities,
via direct messages from other users with hidden intent. Phishers often
leverage social engineering and other public information sources to collect
info about your work, interests, and activities—giving attackers an edge in
convincing you they’re not who they say.<o:p></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">There are
several different types of phishing attacks, including:<o:p></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">Spear
Phishing</span></b><span style="font-family:&quot;Times New Roman&quot;,serif;mso-fareast-font-family:
&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">—targeted attacks directed at
specific companies and/or individuals.<o:p></o:p></span></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">Whaling</span></b><span style="font-family:&quot;Times New Roman&quot;,serif;mso-fareast-font-family:&quot;Times New Roman&quot;;
mso-fareast-language:EN-IN">—attacks targeting senior executives and
stakeholders within an organization.<o:p></o:p></span></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">Pharming</span></b><span style="font-family:&quot;Times New Roman&quot;,serif;mso-fareast-font-family:&quot;Times New Roman&quot;;
mso-fareast-language:EN-IN">—leverages DNS cache poisoning to capture user
credentials through a fake login landing page.<o:p></o:p></span></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">Phishing
attacks can also take place via phone calls (voice phishing) and text
messages (SMS phishing).&nbsp;</span><span style="font-family:&quot;Times New Roman&quot;,serif"><a href="https://www.consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams" target="_blank"><span style="color: windowtext;">This post</span></a></span><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">&nbsp;highlights
additional details about phishing attacks—how to spot them and how to prevent
them.</span></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><h3><span style="font-size: 11pt; line-height: 107%; font-family: &quot;Times New Roman&quot;, serif; color: windowtext; background-color: rgb(255, 255, 255);"><span style="font-size: 18px;"><b>3. Man-in-the-Middle (MitM) Attacks</b></span><o:p></o:p></span></h3><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">Occurs
when an attacker intercepts a two-party transaction, inserting themselves in
the middle. From there, cyber attackers can steal and manipulate data by
interrupting traffic.</span></p><p class="MsoNormal" style="text-align: center; margin-bottom: 10.5pt; line-height: normal;"><span style="background-color: rgb(255, 255, 255);"><img src="/media/django-summernote/2022-10-06/b5a091f7-2008-4666-adb2-c6fc146ec0b3.webp" style="width: 503px;"><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN"><br></span></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">This type
of attack usually exploits security vulnerabilities in a network, such as an
unsecured public WiFi, to insert itself between a visitor’s device and the
network. The problem with this kind of attack is that it is very difficult to
detect, as the victim thinks the information is going to a legitimate
destination. Phishing or malware attacks are often leveraged to carry out a
MitM attack.</span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN"><br></span><span style="font-family:&quot;Times New Roman&quot;,serif;color:#4E6973"><o:p></o:p></span></span></p><h3 style="margin-top:0cm;margin-right:0cm;margin-bottom:7.5pt;margin-left:
0cm;line-height:14.4pt"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-size: 18pt; font-family: &quot;Times New Roman&quot;, serif; color: rgb(0, 42, 58); letter-spacing: -0.1pt;">4. Denial-of-Service (DOS) Attack</span></b><span style="font-size:11.0pt;font-family:&quot;Times New Roman&quot;,serif;color:#002A3A;
letter-spacing:-.1pt"><o:p></o:p></span></span></h3><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">DoS
attacks work by flooding systems, servers, and/or networks with traffic to
overload resources and bandwidth. The result is rendering the system unable to
process and fulfill legitimate requests. In addition to denial-of-service (DoS)
attacks, there are also distributed denial-of-service (DDoS) attacks.<o:p></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">DoS
attacks saturate a system’s resources to impede response to
service requests. On the other hand, a DDoS attack is launched from several
infected host machines with the goal of achieving service denial and taking a system
offline, thus paving the way for another attack to enter the
network/environment.<o:p></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">The most
common types of DoS and DDoS attacks are the TCP SYN flood attack, teardrop
attack, Smurf attack, ping-of-death attack, and botnets.</span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><h3 style="margin-top:0cm;margin-right:0cm;margin-bottom:7.5pt;margin-left:
0cm;line-height:14.4pt"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-size: 18pt; font-family: &quot;Times New Roman&quot;, serif; color: rgb(0, 42, 58); letter-spacing: -0.1pt;">5. SQL Injections</span></b><span style="font-size:11.0pt;font-family:&quot;Times New Roman&quot;,serif;color:#002A3A;
letter-spacing:-.1pt"><o:p></o:p></span></span></h3><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">This occurs
when an attacker inserts malicious code into a server using a server query
language (SQL) forcing the server to deliver protected information. This type
of attack usually involves submitting malicious code into an unprotected
website comment or search box. Secure coding practices such as using prepared
statements with parameterized queries are an effective way to prevent SQL
injections.<o:p></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">When a
SQL command uses a parameter instead of inserting the values directly, it can
allow the backend to run malicious queries. Moreover, the SQL interpreter uses
the parameter only as data, without executing it as a code. Learn more about
how secure coding practices can prevent SQL injection&nbsp;</span><span style="font-family:&quot;Times New Roman&quot;,serif"><a href="https://www.datto.com/blog/developing-an-effective-regime-to-backup-your-sql-server" target="_blank"><span style="color: windowtext;">here</span></a></span><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN">.</span></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><h3 style="margin-top:0cm;margin-right:0cm;margin-bottom:7.5pt;margin-left:
0cm;line-height:14.4pt"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-size: 18pt; font-family: &quot;Times New Roman&quot;, serif; color: rgb(0, 42, 58); letter-spacing: -0.1pt;">6. Zero-day Exploit</span></b><span style="font-size:11.0pt;font-family:&quot;Times New Roman&quot;,serif;color:#002A3A;
letter-spacing:-.1pt"><o:p></o:p></span></span></h3><p style="margin: 0cm 0cm 0.0001pt; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial;"><span style="font-size: 11pt; color: black; background-color: rgb(255, 255, 255);">A&nbsp;<a href="https://www.datto.com/blog/dattos-response-to-log4shell" target="_blank"><span style="color: black;">Zero-day Exploit</span></a>&nbsp;refers
to exploiting a network vulnerability when it is new and recently announced —
before a patch is released and/or implemented. Zero-day attackers jump at the
disclosed vulnerability in the small window of time where no
solution/preventative measures exist. Thus, preventing zero-day attacks
requires constant monitoring, proactive detection, and agile threat management
practices.</span></p><p style="margin: 0cm 0cm 0.0001pt; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial;"><span style="font-size: 11pt; color: black; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><p style="margin: 0cm 0cm 0.0001pt; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial;"><span style="font-size: 11pt; color: black; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><h3 style="margin-top:0cm;margin-right:0cm;margin-bottom:7.5pt;margin-left:
0cm;line-height:14.4pt"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-size: 18pt; font-family: &quot;Times New Roman&quot;, serif; color: rgb(0, 42, 58); letter-spacing: -0.1pt;">7. Password Attack</span></b><span style="font-size:11.0pt;font-family:&quot;Times New Roman&quot;,serif;color:#002A3A;
letter-spacing:-.1pt"><o:p></o:p></span></span></h3><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">Passwords
are the most widespread method of authenticating access to a secure information
system, making them an attractive target for cyber attackers. By accessing a
person’s password, an attacker can gain entry to confidential or critical data
and systems, including the ability to manipulate and control said data/systems.<o:p></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">Password
attackers use a myriad of methods to identify an individual password, including
using social engineering, gaining access to a password database, testing the
network connection to obtain unencrypted passwords, or simply guessing.</span></p><p class="MsoNormal" style="text-align: center; margin-bottom: 10.5pt; line-height: normal;"><span style="background-color: rgb(255, 255, 255);"><img src="/media/django-summernote/2022-10-06/98ed271e-9a91-4894-b663-ac0fa1cdb819.webp" style="width: 566px;"><br></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">The last
method mentioned is executed in a systematic manner known as a “brute-force
attack.” A brute-force attack employs a program to try all the possible
variants and combinations of information to guess the password.<o:p></o:p></span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">Another
common method is the dictionary attack when the attacker uses a list of common
passwords to attempt to gain access to a user’s computer and network. Account
lockout best practices and two-factor authentication are very useful in preventing a password attack. Account lockout features can freeze the account after several invalid password attempts and two-factor authentication
adds a layer of security, requiring the user logging in to enter a
secondary code only available on their 2FA device(s).</span></p><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="background-color: rgb(255, 255, 255);"><span style="font-family:&quot;Times New Roman&quot;,serif;
mso-fareast-font-family:&quot;Times New Roman&quot;;mso-fareast-language:EN-IN"><br></span><span style="font-family:&quot;Times New Roman&quot;,serif;color:#4E6973"><o:p></o:p></span></span></p><h3 style="margin-top:0cm;margin-right:0cm;margin-bottom:7.5pt;margin-left:
0cm;line-height:14.4pt"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-size: 18pt; font-family: &quot;Times New Roman&quot;, serif; color: rgb(0, 42, 58); letter-spacing: -0.1pt;">8. Cross-site Scripting</span></b><span style="font-size:11.0pt;font-family:&quot;Times New Roman&quot;,serif;color:#002A3A;
letter-spacing:-.1pt"><o:p></o:p></span></span></h3><p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:10.5pt;
line-height:normal"><span style="font-family: &quot;Times New Roman&quot;, serif; background-color: rgb(255, 255, 255);">A
cross-site scripting attack sends malicious scripts into content from reliable
websites. The malicious code joins the dynamic content that is sent to the
victim’s browser. Usually, this malicious code consists of JavaScript code
executed by the victim’s browser but can include Flash, HTML, and XSS.<o:p></o:p></span></p><p class="MsoNormal"><span style="background-color: rgb(255, 255, 255);"><span style="font-family:&quot;Times New Roman&quot;,serif;mso-fareast-language:
EN-IN;mso-no-proof:yes"><!--[if gte vml 1]><v:shape id="Picture_x0020_26"
 o:spid="_x0000_i1025" type="#_x0000_t75" alt="Cybersecurity 101: Intro to the Top 10 Common Types of Cybersecurity Attacks"
 style='width:547.5pt;height:252pt;visibility:visible;mso-wrap-style:square'>
 <v:imagedata src="file:///C:/Users/Jarvis/AppData/Local/Temp/msohtmlclip1/01/clip_image002.jpg"
  o:title=" Intro to the Top 10 Common Types of Cybersecurity Attacks"></v:imagedata>
</v:shape><![endif]--><!--[if !vml]--><!--[endif]--></span><span style="font-family:&quot;Times New Roman&quot;,serif"><o:p></o:p></span></span></p><p style="margin-top:7.5pt;margin-right:0cm;margin-bottom:22.5pt;margin-left:
0cm;line-height:21.6pt"><span style="font-size: 11pt; background-color: rgb(255, 255, 255);"><span style="font-family: &quot;Times New Roman&quot;;">Additional information
about cross-site scripting attacks can be found&nbsp;</span><a href="https://www.datto.com/blog/strong-supply-chain-security-starts-with-secure-software" target="_blank"><span style="color: windowtext; font-family: &quot;Times New Roman&quot;;">here</span></a><span style="color:#4E6973"><span style="font-family: &quot;Times New Roman&quot;;">.</span><o:p></o:p></span></span></p><h3 style="margin-top:0cm;margin-right:0cm;margin-bottom:7.5pt;margin-left:
0cm;line-height:14.4pt"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-size: 18pt; font-family: &quot;Times New Roman&quot;, serif; color: rgb(0, 42, 58); letter-spacing: -0.1pt;">9. Rootkits</span></b><span style="font-size:11.0pt;font-family:&quot;Times New Roman&quot;,serif;color:#002A3A;
letter-spacing:-.1pt"><o:p></o:p></span></span></h3><p style="margin: 0cm 0cm 0.0001pt; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial;"><span style="font-size: 11pt; color: black; background-color: rgb(255, 255, 255);">Rootkits are installed inside legitimate
software, where they can gain remote control and administration-level access
over a system. The attacker then uses the rootkit to steal passwords, keys, and credentials, and retrieve critical data.<o:p></o:p></span></p><p style="margin: 0cm 0cm 0.0001pt; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial;"><span style="font-size: 11pt; color: black; background-color: rgb(255, 255, 255);">Since rootkits hide in legitimate
software, once you allow the program to make changes in your OS, the rootkit
installs itself in the system (host, computer, server, etc.) and remains
dormant until the attacker activates it or it’s triggered through a persistence
mechanism. Rootkits are commonly spread through email attachments and downloads
from insecure websites.</span></p><p style="margin: 0cm 0cm 0.0001pt; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial;"><span style="font-size: 11pt; color: black; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><p style="margin: 0cm 0cm 0.0001pt; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial;"><span style="font-size: 11pt; color: black; background-color: rgb(255, 255, 255);"><o:p><br></o:p></span></p><h3 style="margin-top:0cm;margin-right:0cm;margin-bottom:7.5pt;margin-left:
0cm;line-height:14.4pt"><span style="background-color: rgb(255, 255, 255);"><b><span style="font-size: 18pt; font-family: &quot;Times New Roman&quot;, serif; color: rgb(0, 42, 58); letter-spacing: -0.1pt;">10. Internet of Things (IoT) Attacks</span></b><span style="font-size:11.0pt;font-family:&quot;Times New Roman&quot;,serif;color:#002A3A;
letter-spacing:-.1pt"><o:p></o:p></span></span></h3><p style="margin: 0cm 0cm 0.0001pt; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial;"><span style="font-size: 11pt; color: black; background-color: rgb(255, 255, 255);">While internet connectivity across almost
every imaginable device creates convenience and ease for individuals, it also
presents a growing—almost unlimited—number of access points for attackers to
exploit and wreak havoc. The interconnectedness of things makes it possible for
attackers to breach an entry point and use it as a gate to exploit other
devices in the network.<o:p></o:p></span></p><p style="margin-top:7.5pt;margin-right:0cm;margin-bottom:22.5pt;margin-left:
0cm;line-height:21.6pt"><span style="font-size: 11pt; background-color: rgb(255, 255, 255);"><span style="font-family: &quot;Times New Roman&quot;;">IoT attacks are becoming
more popular due to the rapid growth of IoT devices and (in general) low
priority given to embedded security in these devices and their operating
systems. In one IoT attack case, a Vegas casino was attacked and the hacker
gained entry via an internet-connected thermometer inside one of the casino’s
fish tanks.</span><o:p></o:p></span></p><p>

































































































</p><p style="margin-top:7.5pt;margin-right:0cm;margin-bottom:22.5pt;margin-left:
0cm;line-height:21.6pt"><span style="font-size:11.0pt"><span style="background-color: rgb(255, 255, 255); font-family: &quot;Times New Roman&quot;;">Best practices to help
prevent an IoT attack include updating the OS and keeping a strong password for
every IoT device on your network, and changing passwords often.</span><o:p></o:p></span></p>