Attack types

Stories are classified by the kind of development they report:

• Vulnerability exploitation — a flaw being or likely to be exploited. Look for affected versions and exposure conditions.
• Malware campaign — malicious software in the wild; look for delivery mechanism and indicators.
• Phishing and fraud — social engineering and scam infrastructure.
• Data breach — unauthorized access to stored data.
• Law enforcement action — takedowns, arrests and sanctions.
• Advisory and research — significant new analysis without a new incident.

Attack type tells you what kind of thing happened; it is separate from the Cyber Report Score, which tells you how much it matters, and from alert criticality which you control.