Types of security threats

Protecting against ransomware
To defend against ransomware, prevention is certainly better than a cure. Indeed, once files are encrypted, there’s often nothing firms can do to get them back without paying a ransom, or waiting and hoping a key is released publicly. Therefore, as well as normal antimalware procedures, an essential defense is to ensure all key files are safely backed up away from the primary network.
Machine learning can also be leveraged by IT professionals to protect against ransomware attacks. This technology has the power to infer and predict attacks, and allows for the constant monitoring of malicious activity allowing them to detect and prevent malware from spreading through the file system.
5. Data loss
Data is frequently described as the new oil, and for many hackers, the ultimate aim of their efforts will be to steal it in order to sell it on the dark web for use in identity fraud, blackmail or as part of corporate espionage.
With data the lifeblood of all business operations today, it’s no wonder that 26% of companies consider data loss to be the biggest cybersecurity threat they’re facing this year. Whether it's social engineering or hacking into a database using known vulnerabilities, getting data out of an organization is often the final step of any attack.
Protecting against data loss
It may be the case that hackers can sit inside a network for months looking for the most valuable information and waiting for the right time to act, so even if a firm's perimeter has been breached, there are still measures businesses can take to protect themselves from the most serious consequences - but to do this, they'll need good data loss prevention tools.
This usually refers to a series of measures designed to look for suspicious activities and block the access and exfiltration of data by unauthorized users. It may monitor endpoints and send out alerts if data is copied or transferred outside of normal, approved processes.
6. Password attacks
Password attacks refer to the different methods used by hackers to maliciously authenticate, enter and steal data from password protected accounts. We all know about the importance of choosing a secure password, but more is required to prevent cybercriminals cracking them. Typically, these attacks are carried out by exploiting vulnerabilities in the system and using software to speed up the password-cracking process.
The most common types of password security attacks include:

• 
  Brute forcing
  
• 
  Dictionary attacks
  
• 
  Keylogging
  
• 
  Password spraying
  

One recent example of a password breach was a supply chain attack that involved software from SolarWinds. The attack compromised U.S. government agencies as hackers exploited an unnoticed vulnerability in their cybersecurity provider’s network monitoring software. This allowed them to infiltrate companies reliant on SolarWinds software and access their confidential email communications.