Guidance on common threats reported by the National Cyber Threat Notification System

The information below can help organizations understand some of the most common types of threats reported by NCTNS.

Malware infections

Keywords: Command and control (c&c), compromised server, ransomware

Malware infections can infiltrate or damage computer systems and devices. They may cause infected devices to send information to or receive information from a potentially malicious actor. Different names are used to define different types of malware.

Resources

Vulnerable services

Keywords: Common vulnerabilities and exposures (CVE)

Vulnerable services are specific technical vulnerabilities present on a network service. These can vary in severity. An example of a severe vulnerable service is one that allows remote code execution. Vulnerable services are often described using the Common Vulnerability Enumeration, which documents how a service is vulnerable.

Resources

Open services

Keywords: Exposed service, open port, distributed denial of service (DDoS) potential

Open services are network services that are publicly exposed to the Internet. This may be intentional or the result of a misconfiguration. Exposed network services increase the threat surface, provide threat actors with valuable network information, and are often abused by threat actors to conduct distributed denial of service (DDoS) attacks.

Resources

General resources

Didn’t find what you were looking for? Browse the resources below to find expert guidance on many types of cyber security issues.

Date modified: