Top 10 Most Probable Ways a Company Can Be Hacked

This commentary advocates a data-driven cybersecurity strategy, emphasizing identification of crown-jewel assets and addressing root causes of incidents rather than symptoms; it lists the top ten root causes (social engineering, programming bugs, authentication attacks, malicious scripting, data malformation, human error/misconfiguration, eavesdropping/MiTM, side-channel attacks, brute-force/computational attacks, and insider threats) and urges organizations to prioritize defenses based on their own data.