Every Sector. Its Own Threats And Rules.

→ Financial Services Phishing pages, stolen customer logins, card data for sale and supplier exposure, and the rules that apply to banks, payment firms and insurers.

• Phishing and fake banking pages
• Stolen customer credentials and account takeover
• Payment card data for sale
• Third-party and supplier exposure

PCI DSSDORAGDPR → Retail And E-Commerce Fake stores, account takeover, checkout skimming and fake ads, and the rules that apply to retailers who sell online.

• Fake stores and look-alike domains
• Account takeover and loyalty fraud
• Card skimming on checkout pages
• Fake ads and social media impersonation

PCI DSSGDPR → Telecommunications State-sponsored intrusions, subscriber data theft, SIM swapping and account takeover at telecom providers, and the rules that apply.

• State-sponsored intrusions into networks
• A subscriber data theft
• SIM swapping
• Account takeover

NIS2 DirectiveGDPR → Government And Public Sector State-backed espionage, supplier breaches, attacks on exposed servers and targeted phishing against public bodies, and the rules that apply.

• Espionage
• A breach linked to remote support software
• Attacks on internet-facing servers
• Targeted phishing

NIS2 DirectiveGDPR → Energy And Utilities Exposed network devices, destructive attacks, ransomware and state-backed groups that target energy and utility operators, and the rules that apply.

• Exposed network devices
• Destructive attacks on energy sites
• Ransomware
• Remote access that stays open

NIS2 Directive → Healthcare And Pharma Ransomware, stolen staff logins, patient data on leak sites and supplier exposure at hospitals and drug makers, and the rules that apply.

• Ransomware
• Stolen logins
• Patient data on leak sites
• Supplier exposure

NIS2 DirectiveGDPR → Aviation And Travel Fake booking and loyalty pages, account takeover, phishing of travelers and supplier outages, plus the rules that apply to airlines and travel brands.

• Fake booking and loyalty pages
• Account takeover
• A supplier outage
• Phishing aimed at travelers

NIS2 DirectivePCI DSSEASA Part-IS → Technology And SaaS Hijacked build tools, poisoned packages, stolen developer logins and leaked keys at software companies, and the rules that apply.

• A hijacked build step
• A self-copying package worm
• A poisoned library release
• Stolen developer logins

NIS2 DirectiveGDPR → Manufacturing Ransomware, open remote access and supply chain attacks that can stop plants and suppliers, and the rules that apply to manufacturers.

• Ransomware
• A production stop
• Open remote access
• Supply chain attacks

NIS2 Directive → Insurance Fake insurer sites, voice phishing, fraudulent payment requests and supplier exposure aimed at insurers and policyholders, and the rules that apply.

• Brand impersonation
• Voice phishing
• Fraudulent payment requests
• Supplier exposure

DORAGDPRNAIC #668 → Gaming And Betting Player account takeover, fake sites, credential guessing and denial of service against gaming and betting brands, and the rules that apply.

• Account takeover
• Fake sites and brand copies
• Credential guessing at scale
• Denial of service

PCI DSSGDPRUK Gambling Commission → Education Stolen staff and student logins, vendor breaches, phishing and forgotten systems at schools and universities, and the rules that apply.

• Stolen staff and student logins
• A vendor login that reaches many schools
• Phishing of staff and parents
• Forgotten systems

FERPAGDPR