Introduction to Cybersecurity

• Cybersecurity protects networks, devices, and data from unauthorized access, attacks, and damage.
• It ensures information remains confidential, accurate, and accessible to authorized users.
• Cybersecurity is built on the CIA Triad, focusing on confidentiality, integrity, and availability.

CIA Triad

• Confidentiality: Ensures only authorized users can access sensitive data.
• Integrity: Ensures data is not altered or tampered with by unauthorized users.
• Availability: Keeping data and systems functional and accessible at all times.

Importance of Cybersecurity

• Cybercrime is a growing global threat
• Cybercrime affects businesses, governments, and individuals
• In 2023 alone, cybercrime cost the world over $8 trillion
• Common attacks include data breaches, ransomware, and fraud, leading to financial losses and reputational damage.
• A cyberattack occurs every 39 seconds worldwide.
• Over 80% of hacking attacks exploit weak passwords or outdated software
• Small businesses are frequent targets, with 60% going bankrupt within six months of a major cyberattack.
• In 2021, the Colonial Pipeline was subject to a ransomware attack

Common Cyber Threats

• There are various types of cyber threats that individuals and organizations face:
• Malware: Malicious software infects systems (viruses, trojans, worms).
• Phishing: Deceptive emails trick users into providing sensitive information.
• Ransomware: Hackers encrypt data and demand payment for decryption.
• Man-in-the-Middle (MITM) Attacks: Cybercriminals intercept communication between two parties to steal data.

Phishing Attacks - The Silent Threat

• Phishing emails impersonate trusted sources
• Phishing emails contain suspicious links leading to credential theft
• Poor grammar, urgent requests, and unknown senders are warning signs of phishing
• Example of a phishing attack: “Your account is locked! Click to verify”

Practical Activity - Phishing Email Analysis

• Visit Google's Phishing Quiz to analyze sample emails
• Identify red flags like fake domains, urgency, and typos
• Website link: https://phishingquiz.withgoogle.com

Attack Vectors

• Attack vectors are entry points that hackers use to exploit vulnerabilities
• Social Engineering: Manipulating people into revealing passwords or installing malware.
• Network-Based Attacks: Exploiting weak Wi-Fi security and unpatched systems.
• Insider Threats: Employees or contractors intentionally or accidentally leaking data.
• A hacker pretending to be IT support can call an employee, claiming they need to reset their password, tricking the employee into sharing credentials, the attacker gains access.

Cybersecurity Best Practices

• Use Strong, Unique Passwords: A mix of uppercase, numbers, and special characters.
• Enable Multi-Factor Authentication (MFA): Extra security beyond passwords.
• Avoid Clicking Suspicious Links: Always hover over links before clicking.
• Keep Software Updated: Security patches prevent attacks.
• 81% of hacking-related breaches are due to weak or stolen credentials.

Key Takeaways

• Cybersecurity is a global concern affecting businesses & individuals
• Phishing, malware, and ransomware are major security threats
• Attack vectors include social engineering, network vulnerabilities, and insider threats
• Awareness, strong passwords, and multi-factor authentication are key to online safety.
• Cybersecurity isn't just an IT issue-it's a life skill in today's digital world.

Preview

• Firewalls & Intrusion Detection Systems (IDS/IPS) are ways of blocking cyber threats
• Secure Communication Protocols (HTTPS, SSL/TLS) are used to keep data safe online
• Encryption & Hashing Basics are used for protecting sensitive data.