Cyber Attack

What is Cyber Attack?

A cyber attack is any deliberate action by threat actors to compromise confidentiality, integrity, or availability of systems. Techniques range from phishing and ransomware to advanced exploitation attempts targeting infrastructure or supply chains. In TPRM, cyber attacks involving third parties represent a major vector because vendor weaknesses often become organizational weaknesses.

FAQs

Why are vendors common targets for cyber attacks?

They often have broad access to systems and may have weaker security postures.

Do cyber attacks always involve malware?

No, many rely on social engineering, misconfigurations, or credential theft.

How does a cyber attack differ from a vulnerability?

A vulnerability is a weakness while an attack is the active exploitation of that weakness.