Cyber Threats

Cyber threats are malicious actions or events that attempt to steal data, disrupt systems, or gain unauthorized access to computers and networks.

What Is a Cyber Threat?

A cyber threat is any attempt to:

  • Steal information
  • Damage systems
  • Disrupt services
  • Spy on users or organizations

Threats can target:

  • Individuals
  • Businesses
  • Governments
  • Critical Infrastructure

Common Cyber Threats

1. Phishing Attacks

Phishing is when attackers pretend to be someone you trust.

Examples:

  • Fake emails from banks
  • “Password reset” messages
  • Urgent alerts claiming your account is compromised

Red Flags:

  • Urgent language
  • Suspicious sender addresses
  • Unexpected attachments or links

2. Social Engineering

Social engineering manipulates people, not systems.

Attackers may:

  • Impersonate coworkers or tech support
  • Use fear (“Your account will be deleted!”)
  • Use authority (“This is IT, send credentials now!”)

If it pressures you emotionally, pause and verify first.

See Social Engineering for more information.

3. Weak Passwords

Using simple or reused passwords makes accounts easy to break.

Bad examples:

  • password123
  • qwerty
  • Same password everywhere

Good practices:

  • Long passwords (12+ characters)
  • Unique password per site
  • Use a password manager

See Password Management for more information.

4. Malware

Malware is malicious software designed to:

  • Steal data
  • Spy on you
  • Lock your files (ransomware)

Common sources:

  • Fake downloads
  • Cracked software
  • Malicious email attachments

If you didn’t expect it — don’t open it.

5. Unsafe Browsing Habits

Everyday actions can expose you to risk.

Examples:

  • Clicking random ads
  • Downloading unknown files
  • Using public Wi-Fi without protection

Always:

  • Use HTTPS websites
  • Avoid suspicious pop-ups
  • Keep your system updated

Basic Cyber Hygiene (Beginner Essentials)

Think of cyber hygiene like personal hygiene — small habits, big protection.

Do This:

  • Enable Multi-Factor Authentication (MFA)
  • Keep software and devices updated
  • Lock your devices
  • Backup important data

Avoid This:

  • Sharing passwords
  • Clicking unknown links
  • Ignoring security warnings
  • Oversharing on social media

Real-World Awareness Example

You receive an email:

“Your account has been suspended. Click here to verify.”

Awareness response:

  • Don’t click the link
  • Check the sender’s email carefully
  • Visit the site manually (not via link)
  • Report or delete the message

Awareness turns panic into control.

Cybersecurity Awareness Is a Skill

You don’t need to be technical to be secure.

Awareness means:

  • Thinking before clicking
  • Verifying before trusting
  • Questioning urgency
  • Understanding attacker behavior

Attackers evolve — your awareness must too.

Advanced Cyber Threats

Ransomware

Ransomware locks files or systems and demands payment to restore access.

How It Spreads:

  • Phishing emails
  • Malicious downloads
  • Unpatched systems

Impact:

  • Loss of access to data
  • Production downtime
  • Financial loss

Basic Defense:

  • Regular backups
  • Patch systems
  • Be cautious with email attachments

Credential Theft

Attackers steal usernames and passwords to access accounts.

Methods:

  • Phishing
  • Data breaches
  • Keylogging malware

Impact:

  • Account takeover
  • Identity theft
  • Financial fraud

Basic Defense:

  • Use unique passwords
  • Enable MFA
  • Use a password manager

Man-in-the-Middle (MITM) Attacks

Attackers intercept communication between two parties.

Common Locations:

  • Public wi-fi
  • Unsecured networks

Impact:

  • Stolen credentials
  • Session hijacking

Basic Defense:

  • Use HTTPS websites
  • Avoid public Wi-Fi for sensitive tasks
  • Use a VPN

Insider Threats

Not all threats come from outsiders.

Insider threats involve people within an organization:

  • Negligent employees
  • Disgruntled staff
  • Contractors with too much access

Basic Defense:

  • Least privilege access
  • Security awareness training
  • Monitoring and logging

Denial-of-Service (DoS / DDoS)

These attacks overwhelm systems so users cannot access services.

Impact:

  • Website downtime
  • Service outages
  • Lost revenue

Basic Defense:

  • Traffic filtering
  • Rate limiting
  • DDoS protection services

How Cyber Threats Impact the CIA Triad

Threat Confidentiality Integrity Availability
Phishing ✔ ✔ ❌
Malware ✔ ✔ ✔
Ransomware ❌ ✔ ✔
DDoS ❌ ❌ ✔
Insider Threats ✔ ✔ ✔