The SANS Institute has released its top 10-cyber security threats for 2008. 

Topping the list are attacks on Web browsers, particularly plug-ins like QuickTime and Flash. These plug-ins are widely distributed and not automatically updated, even when your browser is updated, leaving a longer window of vulnerability on affected systems.

Cyber criminals have been automating their attacks and disguising them so that each is different from the last. Such polymorphic attacks elude signature-based detection systems.

 Thomas Claburn

SAN’s Top Threats for 2008

1. Attacks via browser vulnerabilities
2. Botnets
3. Cyber espionage
4. Mobile Phone attacks
5. Insider attacks
6. Identity theft from persistent bots
7. Malicious spyware
8. Web app exploits
9. Social Engineering
10. Infected consumer devices

Source: SANS.ORG