Voice Phishing (Vishing)
OAuth Token Theft/Abuse
SaaS and Cloud Misconfiguration Exploitation
Credential Harvesting (Infostealers)
MFA Bypass and Session Hijacking
Third-party Supply Chain Compromise
Zero-day Exploitation (e.g., Oracle PeopleSoft CVE-2026-35273)
Pay-or-Leak Extortion