Example presentation · School
Cyber security
What the presentation covers
Slide 1 CYBER SECURITY
SEC // OPS-DECK 01 SESSION SECURE · SECOPS // BRIEFING v2.0 · Understanding the modern threat landscape — and how to defend against it
Slide 2 The scale of the problem
01 // Threat Landscape SEC-OPS / GLOBAL TELEMETRY · Aggregate indicators from global incident reporting, fiscal year 2025. · $10.5T · Estimated annual global cost of cybercrime by 2025 — Cybersecurity Ventures · $4.44M · Global average cost of a single data breach — IBM, 2025 report · $10.22M · Average breach cost in the United States — an all-time high
Slide 3 How Attacks Get In
02 // ATTACK VECTORS · vectors.log · 01PHISHING · 91% of successful breaches start with a spear-phishing email. · 02STOLEN CREDENTIALS · The leading initial access vector; credential harvesting kits power most thefts. · 03SOFTWARE VULNERABILITIES · Unpatched systems remain the easiest door in.
Slide 4 Ransomware: extortion as a business model
03 // Ransomware · 57× · more destructive in recent years than in 2015 · Double extortion · Encrypt systems and steal data — then threaten to leak it. · RaaS · Ransomware-as-a-Service: affiliates rent ready-made tooling for a cut of the ransom. · Cost
Slide 5 The weakest link wears a lanyard
04 // Social Engineering · AI-Crafted Phishing · Grammatically perfect, hyper-personalized · Machine-written lures no longer betray themselves with bad spelling or awkward tone. · CLICK RATE UP TO 54% · MFA Fatigue · Push-notification flooding · Attackers spam approval prompts until a tired user taps Approve — MFA defeated without breaking it.
Slide 6 Anatomy of an attack
STAGE 01 · Recon · Attacker scans for exposed systems and scrapes employee data. · STAGE 02 · Access · A phished credential or unpatched flaw opens the door. · STAGE 03 · Escalate
Slide 7 Defense in depth, zero trust by default
06 // Defense · Never trust, always verify — every request authenticated and authorized. · ZERO TRUST · Every request is authenticated and authorized — trust is never assumed by network location. · MFA · Multi-factor authentication blocks the vast majority of credential-based attacks. · LEAST PRIVILEGE · People and systems get only the access they need — nothing more, nothing standing.
Slide 8 Your daily security checklist
07 // Hygiene · session: daily-defense.sh run: every day · [✓] 01 Turn on MFA everywhere — it takes minutes and stops most account takeovers · [✓] 02 Use a password manager; unique passwords per account · [✓] 03 Think before you click: hover over links, verify senders, distrust urgency · [✓] 04 Update devices and software promptly — restart counts · [✓] 05 Back up critical data offline and test the restore · [✓] 06 Report suspicious emails immediately — speed beats embarrassment
Slide 9 When it happens: respond, don't panic
Detect · Unusual logins, locked files, strange traffic — report it at once. · Contain · Disconnect affected machines; do not power them off. · Escalate · Notify IT security and follow the response plan. · Preserve · Keep logs and evidence; do not delete anything.
Slide 10 Security is everyone’s job
The threat is industrial-scale: $10.5T a year — but most attacks still start with one click · Humans are the target: verify urgency, out-of-band · Basics win: MFA, patches, backups, least privilege · Speed matters: report in minutes, not days · You are the firewall. · // END OF BRIEFING