Phishing
Fake emails/sites to steal credentials — targeted version = spear phishing
Brute force
Tries every possible password combination systematically
Dictionary attack
Tries common words/passwords from a pre-compiled list — faster than brute force
DDoS
Floods server with traffic from many compromised machines (botnet)
Malware
Virus, worm, ransomware, spyware, Trojan, keylogger
SQL injection
Malicious SQL inserted into input fields — use parameterised queries to prevent
Man-in-middle
Secretly intercepts and possibly alters communications between two parties
Zero-day
Exploits an unknown or unpatched vulnerability before a fix exists