2.1 Identify cyber security vulnerabilities

Network Vulnerabilities

Imagine your computer and all the other computers in your house or school are connected like a big spider web. This web can have weak spots where bad guys can sneak in. Here are some ways they can do that:

Unpatched software: This is like having a lock on your door that has a known flaw. If you don't fix (patch) it, thieves can easily break in.

Misconfiguration: This is like accidentally leaving a window open or setting an easy-to-guess password. Bad guys can easily get in if things aren't set up securely.

Weak passwords: If your password is easy to guess, like "password123," it's like giving a thief the key to your door.

Trust relationships: Sometimes, computers trust each other to share information. If a bad guy pretends to be a trusted computer, they can get into everything.

Missing/poor encryption: When data is sent across the web without special protection (encryption), it's like sending a postcard that anyone can read. If it's not well-protected, bad guys can intercept it.

Zero-day attacks: These are brand new methods of attack that no one knows about yet, so there's no fix available at the moment.

Cross-site scripting and SQL injection: These are ways of sneaking malicious commands into websites to steal data or take control.

Phishing and ransomware: Tricks like sending fake emails to get you to reveal passwords or lock your files until you pay a ransom.

Compromised credentials: If a bad guy gets someone's login info, they can pretend to be them and access everything that person has access to.

Malicious insider: Sometimes, the bad guy is someone within the organization who abuses their access to steal or damage information.

Cloud Vulnerabilities

Using the cloud is like storing your stuff in a big, shared warehouse instead of at your home. Here are some risks:

Account hijacking

Thieves can steal the "key" (your login) to your storage space in the warehouse and take over.

Insecure APIs

These are like the doors and windows of the warehouse. If they're not secure, thieves can sneak in.

Physical attacks

This is when someone actually breaks into the company's buildings to steal or damage stuff directly.

In all these cases, it's important to have good security measures in place, like using strong passwords, keeping software up to date, and monitoring who has access to what information.