Supply chain and trusted access
An adversary abuses a supplier, software dependency, external access path, or trusted relationship to bypass normal controls.
Business Email Compromise and mailbox takeover
An adversary takes over or impersonates a trusted email identity and abuses communications for fraud, payment diversion, data collection, or further phishing.
BOPLA – Broken Object Property Level Authorization
An API exposes or allows modification of sensitive object properties that the user should not access, including excessive data exposure and mass assignment.
SOAR
SOAR in Security Operations: practical explanation, selection criteria, and SecTec portfolio orientation.
Incident Management Tools
Incident Management Tools in Security Operations: practical explanation, selection criteria, and SecTec portfolio orientation.