Key threats identified by
Cybersecurity and Infrastructure Security Agency

• Ransomware Attacks: Encrypts data and demands payment for decryption.
• Phishing and Social Engineering: Tricks individuals into disclosing sensitive data.
• Supply Chain Vulnerabilities: Exploits compromised third-party services.
• Exploited Vulnerabilities: Attacks leveraging unpatched software weaknesses.
• Insider Threats: Risks posed by individuals within an organization.
• Critical Infrastructure Attacks: Targets essential sectors for widespread disruption.
• Advanced Persistent Threats (APTs): Continuous, targeted attacks often by nation-states.
• Malware and Botnets: Malicious software and networks used for large-scale attacks.