Which systems are commonly targeted in cyberattacks?

• A. Social media, cloud services, web applications, and critical infrastructure.
• B. Desktop publishing software, spreadsheets, word processors, and email clients.
• C. Social media, cloud services, web applications, and consumer electronics.
• D. Industrial control systems only.

Answer: (A)

Targets in cyberattacks tend to be the platforms and systems with broad reach and high impact. Social media and cloud services sit at the center of modern digital life, offering attackers huge user bases and a wealth of data, as well as opportunities to exploit weak access controls or misconfigurations. Web applications are frequently exposed to the internet and often contain vulnerabilities that attackers can exploit to steal information, disrupt services, or pivot into other parts of a network. Critical infrastructure—things like power, water, transportation, and communications—are especially attractive targets because disrupting these systems can cause widespread harm and attract attention from defenders and policymakers.

The other options don’t capture the same broad, high-value targets. Desktop publishing, spreadsheets, word processors, and email clients are important endpoints, but they don’t represent the wide-reaching platforms and services that attackers commonly target for large-scale impact. Consumer electronics are part of the ecosystem but aren’t the primary category of widely targeted systems in most cyberattack campaigns. Industrial control systems are significant in some contexts, but focusing on them alone misses the range of other critical targets that attackers regularly pursue.