Phishing
A fake email, text, or website designed to trick someone into handing over credentials, money, or sensitive data.
For small firms
The entry point for the large majority of breaches at small firms — this is where security awareness training earns its keep.