Common Cyber Threats

The most common ways systems and people get attacked.

Phishing

Attackers send fake emails or messages pretending to be trustworthy sources to trick people into revealing passwords, card details, or clicking malicious links.

Malware

Malicious software — viruses, worms, ransomware, trojans — designed to damage systems, steal data, or hold data hostage for payment. Keeping systems updated and using trusted software reduces risk.

SQL Injection

An attacker inserts malicious SQL code into an input field to manipulate a database — e.g. bypassing login checks. Using parameterized queries instead of directly concatenating user input into SQL prevents this.

🌍 Real-World Use

Major real-world data breaches (banks, e-commerce sites) have repeatedly happened due to unpatched SQL Injection vulnerabilities in login forms — this is why parameterized queries are considered a basic, non-negotiable coding practice today.

💡 Pro Tip

As a developer, the single most useful defensive habit is: NEVER directly insert user input into a SQL query string — always use parameterized queries/prepared statements, in every language and framework.

🧪 Quick Self-Test

Check what you just learned — no pressure, just practice.

1. What is phishing designed to do?

2. What prevents SQL Injection attacks?

← Back to all Notes