Cybersecurity Threats

What Exactly Is a Cyber Threat?

A cyber threat is any potential act, tool, or condition that can exploit a vulnerability to harm data, systems, or users.

Think of threats as the intention behind an attack, not the attack itself.

Types of Threat Actors (Not Just "Hackers")

Understanding "who" is behind the threat is as important as what they do.

The Threat Lifecycle (How Threats Evolve Over Time)

• Reconnaissance – Identify weaknesses (open ports, employees, emails)
• Weaponization – Choose tools/exploits (phishing kit, malware, exploit)
• Delivery – Deploy the attack (email, USB, network)
• Exploitation – Execute code or gain access
• Installation – Drop malware, backdoor, persistence
• Command & Control (C2) – Remote control of victim system
• Actions on Objective – Data theft, encryption, destruction

Knowing this lifecycle is key for threat hunting and defense strategies.

Threat Intelligence ≠ News Headlines

True threat intelligence is:

• Actionable (you can defend against it)
• Relevant (it applies to your assets)
• Timely (it helps before damage is done)

Example: Instead of just knowing “Log4j is dangerous,” a smart defender would ask:

• Am I using Log4j anywhere?
• Can it be reached from the internet?
• Have I seen any unusual outbound requests recently?

Emerging Threat Categories You Should Watch

• Supply Chain Attacks – Tampering with software dependencies (SolarWinds, npm package hijacks)
• Deepfake & AI Threats – Synthetic voices/videos for fraud or misinformation
• QR Code Phishing – “Quishing” is now growing rapidly
• Living off the Land (LotL) – Using built-in tools like PowerShell or PsExec to avoid detection
• Cloud-Specific Threats – Misconfigured buckets, stolen API keys, shadow IT

Threat ≠ Vulnerability ≠ Risk

Example: If your admin portal has no 2FA:

• Threat: Phisher or brute-force attacker
• Vulnerability: No 2FA
• Risk: Unauthorized admin access

Threats Are Not Always Technical

• Social engineering: Convincing someone to click, pay, or reveal info
• Business Email Compromise (BEC): Spoofing the CEO for wire transfers
• Deepfake CEO voice scam: Already used to steal millions

Psychology is often more dangerous than code.