Famous Cyber Attacks
PPSM
Linux
Ivanti
Baby Fun!
100

This 2017 attack spread rapidly across the globe, locking users out of their systems and demanding Bitcoin payments.

What is WannaCry ransomware attack?

100

This encrypted remote management protocol on port 22 is used instead of Telnet.

What is SSH?

100

This command is used to change file permissions in Linux, including read, write, and execute access.

What is chmod?

100

This security goal of device control is primarily aimed at preventing unauthorized data transfer from endpoints.

What is data loss prevention (DLP)?

100

This is what parents used to do before having kids and now can only dream about.

What is sleeping through the night?

200

This highly sophisticated worm, discovered in 2010, is widely believed to have been the first cyberweapon used to physically damage industrial equipment.

What is Stuxnet?

(Security researchers concluded that the worm was engineered to target uranium-enrichment centrifuges at Iran's Natanz nuclear facility. By subtly changing centrifuge speeds, Stuxnet reportedly damaged or destroyed a significant number of machines while delaying aspects of Iran's nuclear program.)

200

This directory service protocol uses port 389 and is frequently integrated with enterprise authentication systems.

What is LDAP?

200

This Linux permission setting gives full read, write, and execute access to everyone.

What is 777?

200

This feature allows administrators to approve specific trusted devices while blocking all others.

What is a whitelist?

200

This diaper situation involves an outfit change, a bath, and questioning all life decisions.

What is a blowout?

300

This 2015 cyberattack on a major U.S. government agency exposed sensitive background check data for over 20 million people.

What is the Office of Personnel Management data breach? (OPM)

300

This protocol uses port 3389 and allows users to remotely access and control Windows systems.

What is RDP (Remote Desktop Protocol)?

300

This command shows the current user’s identity and group memberships, useful for privilege escalation checks.

What is id?

300

In Ivanti Device Control, this option enables recording of file transfers and device activity without blocking the device itself.

What is the Shadow option?

300

This is the parenting technique of pretending you didn’t hear crying for 0.3 seconds of peace.

What is denial?

400

This 2020 supply chain attack compromised a widely used IT management platform, giving attackers access to thousands of organizations, including U.S. government agencies.

What is the SolarWinds cyber attack?

400

PPSM compliance directly supports this NIST control by ensuring that only approved and mission-essential ports, protocols, and services are enabled on a system.

What is CM-7 (Least Functionality)?

400

This file is used to configure persistent scheduled tasks for individual users.

What is a crontab?

400

The highest account permission in Ivanti Device Control.

What is Enterprise Administrator?

400

This is the only phase of life where you lose sleep, money, privacy, dignity, and personal space—and still voluntarily renew your subscription.

What is parenting?

500

Between 2013 and 2014, attackers gained access to one of the world’s largest email service providers, but the full scale of the breach wasn’t disclosed until years later—eventually revealing that every user account had been affected.

What is the Yahoo data breach?

500

This protocol, commonly used for time synchronization, operates on UDP port 123 and is critical for Kerberos authentication to function properly.

What is NTP (Network Time Protocol)?

500

This command retrieves DNS information and is often used during reconnaissance to map domains and subdomains.

What is dig?

500

The latest version of Ivanti Device Control approved for use by GSS Cyber.

What is version 2025.4?

500

This is the first sense babies develop in the womb.

What is hearing?