Attackers attempt to obtain:

• passwords
• API keys
• tokens
• session cookies

Common methods:

• phishing
• malware
• credential reuse
• leaked databases

Third-party libraries or tools may introduce vulnerabilities or malicious behavior.

Examples:

• compromised packages
• malicious updates
• dependency confusion

Attackers manipulate users into bypassing security controls.

Examples:

• fake support requests
• impersonation
• urgency pressure
• fraudulent invoices

Software vulnerabilities may allow attackers to execute arbitrary code.

Typical causes:

• unsafe deserialization
• buffer overflows
• command injection
• insecure plugin systems

Sensitive information may leak through:

• logs
• backups
• debug interfaces
• unsecured storage