Which type of security threat is used by attackers to exploit vulnerable applications?

Lateral Movement is the type of security threat used by attackers to exploit vulnerable applications

and move across systems within a network. This technique allows attackers to gain access to multiple

systems by exploiting vulnerabilities in applications, thereby advancing deeper into the network.

Understanding Lateral Movement:

Lateral movement involves exploiting software vulnerabilities to access additional systems and data

resources.

Attackers use this method to spread their influence within a compromised network, often leveraging

application vulnerabilities to pivot to other systems.

Why Other Options Are Incorrect:

Privilege Escalation (Option B) focuses on gaining higher access rights on a single system.

Credential Access (Option C) involves stealing login credentials rather than exploiting applications.

Command and Control (Option D) refers to the communication between compromised devices and

an attacker’s server, not the exploitation of applications.

Reference: Lateral movement leverages application vulnerabilities to expand attacker access within

an organization’s network, making it a common threat vector in targeted attacks​.