Top 10 ways that cybercriminals might use to gain unauthorized access to a company's systems

1. Phishing attacks - a social engineering tactic used to trick employees into revealing their credentials or downloading malware.

2. Password attacks - using software tools to guess or crack passwords.

3. Malware - malicious software that can be installed on systems through phishing emails or vulnerable software.

4. SQL injection attacks - exploiting vulnerabilities in a company's web applications that use databases to gain unauthorized access.

5. Cross-site scripting (XSS) attacks - using code injection techniques to steal information or execute unauthorized actions on a website.

6. DDoS attacks - Distributed Denial of Service attacks that flood a website or server with traffic to overwhelm and disrupt its normal operation.

7. Zero-day exploits - exploiting unknown vulnerabilities in software or systems before the vendors have had time to release a patch.

8. Rogue employees - insiders who have access to sensitive data and systems and use their credentials to gain unauthorized access.

9. Misconfigured or unpatched systems - exploiting vulnerabilities in systems that have not been properly configured or updated with security patches.

10. Physical access - gaining physical access to a company's systems, such as servers or network devices, to install malware or steal data.