What Is a Cyber Threat? What Risk Leaders Need to Know

This document provides a concise overview of cyber threats, describing categories such as malware (viruses, trojans, fileless), ransomware, phishing and social engineering, insider threats, APTs, and supply-chain attacks; it outlines attacker motivations and common vectors, highlights emerging 2025 trends (AI-driven attacks, QR-code phishing, deepfakes, nth‑party supply‑chain risks), and recommends CTI practices and mitigations like TTP/IOC tracking, zero trust, patching, segmentation, and employee training while noting SecurityScorecard’s supply-chain detection capabilities.