Cybersecurity: Vulnerability, Threat, and Risk Assessment

Untested Updates

• Untested updates can lead to unexpected system behavior
• Ineffective updates can cause degraded performance or instability
• They could introduce new vulnerabilities or worsen existing ones

Common Vulnerability

• A common vulnerability is a flaw in software or communication protocols that can be exploited by attackers
• This could lead to data breaches, system failures, or denial-of-service attacks

Threat in Cybersecurity

• A threat refers to any potential danger or harm that could affect a computer system or data
• Threats can be intentional or unintentional, and they can come from various sources
• Examples of threats include malware, hackers, natural disasters, and human error

Intentional Threats

• Intentional threats in cybersecurity are actions deliberately taken by individuals or groups to harm computer systems or data
• Examples include:
  • Hacking
  • Malware distribution
  • Data theft
  • Sabotage

Threat Actors

• Threat actors are individuals or organizations that pose a threat to computer systems or data
• They can range from individual hackers to nation-state-sponsored groups
• They possess diverse motives, including financial gain, espionage, political activism, or personal vendetta

Attack Vector

• An attack vector is a method or path that attackers use to exploit vulnerabilities in a system
• This can include various techniques like phishing emails, malicious websites, or exploiting unpatched software
• Attack vectors can be categorized as network-based, software-based, physical, or social engineering

Vulnerability in Cybersecurity

• A vulnerability is a weakness or flaw in a system or software that can be exploited by attackers
• It can be a design flaw, a coding error, or a misconfiguration
• It allows attackers to gain unauthorized access, manipulate data, or disrupt system operations

Example of Vulnerability

• An example of a vulnerability is a missing security patch for a known software flaw
• This flaw could be used by attackers to compromise the system

Uninstalled Patches

• Leaving systems vulnerable to known vulnerabilities that have been patched
• Failing to install updates leaves systems vulnerable to exploits for which security patches have been released

Threats vs. Vulnerabilities

• Threats represent the potential danger or harm to a system, while vulnerabilities are weaknesses that allow attackers to exploit those threats
• It's like having a door open (a vulnerability) that allows a thief to access something valuable inside (a threat)
• You need to both minimize threats and fix vulnerabilities to secure a system