Recently cybercriminals started embracing more tactics that used to be reserved for nation/state actors but are now being used by many malicious actors. From Access as a Service to the use of zero-day exploits, these actors can infiltrate most organizations' networks and do damage. In this session, we'll reveal who these actors are, their motivations, how they target a business, and how they stay persistent within their networks. We will also cover how to develop a modern cybersecurity strategy, which includes data protection, to defend against these attacks which can cause privacy challenges for victims whose employee and customer data is often compromised.