Vulnerability Water holing Whaling system, whether authorised to, or not. Vulnerability is the state of being vulnerable, exposed, or susceptible to attack. Water holing attacks are attacks in which attackers seek to compromise specific groups of users by infecting websites that members of the groups are known to visit with the goal is to infect the targeted users‟ computers to gain access to the network A whaling attack is a targeted attempt to steal sensitive information from a company such as financial information or personal details about employees, typically for malicious reasons. A whaling attack specifically targets senior management that hold power in companies, such as the CEO, CFO, or other executives who have complete access to sensitive data. Called “whaling” because of the size of the targets relative to those of typical phishing attacks, “whales” are carefully chosen because of their authority and access within the company. The goal of a whaling attack is to trick an executive into revealing personal or corporate data, often through email and website spoofing. National Cyber Security Strategy 2018-2023 .‫ش ٓشخض‬٤‫ ؿ‬ٝ‫حء ًخٕ رشٌَ ٓشخض أ‬ٞ‫ع‬ .ّٞ‫ـ‬ُِٜ ‫ش ُِظؼشع‬٤ِ‫ ��ُوخر‬ٝ‫كخُش حالٌٗشخف أ‬ ‫اٌثغشاد‬ ‫ش‬٤‫ حُظؤػ‬٠ُ‫ٕ ا‬ٞٔ‫خؿ‬ُٜٔ‫خ ح‬ٜ٤‫ ك‬٠‫غؼ‬٣ ‫ـٔخص‬ٛ ٖٓ ٖ٤ٓ‫ػخص خخطش ٖٓ حُٔغظخذ‬ٞٔ‫ ٓـ‬٠ِ‫ػ‬ ٢‫ش حُظ‬٤ٗٝ‫حهغ حإلٌُظش‬ُٞٔ‫ ح‬٠ِ‫ش ػ‬٤‫خالٍ حُظؤػ‬ ٕٝ‫ٌشس‬٣ ‫ػخص‬ٞٔ‫ُؼشف إٔ أػؼخء طِي حُٔـ‬٣ ‫ذ‬٤‫حع‬ٞ‫ذف حإلػشحس رل‬ٜ‫خ ر‬ٜ‫خسط‬٣‫ص‬ ٌٖٔ‫رُي روظذ حُظ‬ٝ ،‫ذكش‬ٜ‫ٖ حُٔغظ‬٤ٓ‫حُٔغظخذ‬ .‫ حُشزٌش‬٠ُ‫ٍ ا‬ٞ‫ٖٓ حُذخ‬ ‫هجّبد اٌثمىة‬ ‫ٓخص‬ِٞ‫ذف عشهش ٓؼ‬ٜ‫ش طغظ‬ٜ‫ؿ‬ٞٓ ‫ُش‬ٝ‫ٓلخ‬ ‫ٓخص‬ِٞ‫ ٓؼَ حُٔؼ‬،‫كغخعش ٖٓ ٓئعغش ٓخ‬ ٖ‫ش ػ‬٤‫ٖ حُشخظ‬٤‫ظل‬ُٞٔ‫َ ح‬٤‫ طلخط‬ٝ‫ش أ‬٤ُ‫حُٔخ‬ ‫ذ‬٤‫خٍ ط‬٤‫ذف حكظ‬ٜ‫غظ‬٣ٝ ،‫ؼش ػخدس‬٤‫خص خز‬٣‫ُـخ‬ ‫خ‬٤ِ‫ش حُؼ‬٣‫ز‬٤‫ظخٕ رشٌَ خخص حإلدحسس حُظ٘ل‬٤‫حُل‬ ١‫ز‬٤‫ظ حُظ٘ل‬٤‫ حُٔئعغخص ٓؼَ حُشث‬٢‫ك‬ ٖ٤ُٝ‫ْ ٖٓ حُٔغئ‬ٛ‫ش‬٤‫ ؿ‬ٝ‫ أ‬٢ُ‫ٍ حُٔخ‬ٝ‫حُٔغئ‬ٝ ‫خٗخص‬٤‫ حُز‬٠ُ‫ٍ ا‬ٞ‫ط‬ُٞ‫ْ ح‬ٌٜ٘ٔ٣ ٖ٣‫ٖ حُز‬٤٣‫ز‬٤‫حُظ٘ل‬ ٠ُ‫زح حالعْ ٗغزش ا‬ٛ ‫خ‬ٜ٤ِ‫هذ أؽِن ػ‬ٝ .‫ًخِٓش‬ ‫ّذ‬٤‫ـٔخص حُظظ‬ٛ ٖٓ ‫حع‬ٞٗ‫ذحف طِي حأل‬ٛ‫كـْ أ‬ ٠ُ‫ظخٕ" رخُ٘ظش ا‬٤‫غ طْ حعظخذحّ ًِٔش "حُل‬٤‫ك‬ ٖ٤‫ذك‬ٜ‫خص حألشخخص حُٔغظ‬٤‫كـْ طالك‬ َ‫خ دحخ‬ٜ‫ٕ ر‬ٞ‫ظٔظؼ‬٣ ٢‫ٍ حُظ‬ٞ‫ط‬ُٞ‫خص ح‬٤ٗ‫آٌخ‬ٝ ‫ذ‬٤‫ّ ط‬ٞ‫ـ‬ٛ ٖٓ ‫ذف‬ُٜ‫ٕ ح‬ٌٞ٣ٝ ،‫حُٔئعغش‬ ٖ٤٣‫ز‬٤‫ٖ حُظ٘ل‬٤ُٝ‫ خذحع حُٔغئ‬ٞٛ ٕ‫ظخ‬٤‫حُل‬ ‫خٗخص‬٤‫ ر‬ٝ‫ش أ‬٤‫خٗخص حُشخظ‬٤‫ٌُِشق ػٖ حُز‬ ٍ‫ّ ػخدس ٖٓ خال‬ٞ‫ـ‬ُٜ‫ظْ ح‬٣ٝ ،‫حُٔئعغخص‬ ‫هغ‬ُٞٔ‫ ح‬ٝ‫ أ‬٢ٗٝ‫ذ حإلٌُظش‬٣‫حُخذحع ػزش حُزش‬ ٢ٗٝ‫حإلٌُظش‬ ْ‫ادزُبي صُذ اٌذُزب‬ Page 29 of 29 2023 – 2018 ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫حالعظشحط‬