Cyber Security: Threats, Vulnerabilities & Mitigations

Examine malware categories such as viruses, worms, Trojan horses, PUPs, spyware, keyloggers, ransomware, logic bombs, and rootkits, and learn to identify attack indicators.

Explore how web applications face threats from injection, buffer overflow, replay, privilege escalation, forgery, and directory traversal, and learn how these vulnerabilities enable unauthorized access.

Explore forgery application attacks that impersonate trusted sources through cross-site request forgery and email spoofing, enabling unauthorized actions and data breaches by exploiting authenticated sessions.

Explore how password attacks target stored hashes, derived from sha 256, by brute forcing or password spraying to uncover plaintext passwords through hash comparisons.

Explore physical attacks like brute force, RFID cloning, and environmental manipulation. Mitigate with reinforced barriers, surveillance, biometric or smart locks, encrypted RFID, and environmental monitoring.

Explore downgrade, collision, and birthday cryptographic attacks that threaten encryption, hashing, and digital signatures, and learn mitigations such as disabling deprecated protocols and using strong hash functions with salt.

Explore password cracking techniques using John the Ripper and Hashcat, including dictionary and brute-force attacks, single-crack mode, and SHA-1 hashes, with hands-on labs and real-world scenarios.

Examine how attackers exploit network vectors—such as DDoS via botnets, DNS manipulation, on-path attacks, wireless methods, credential replays, and malware—to compromise traffic and user data.

Identify indicators of malicious activity to detect and respond to security incidents, including concurrent session usage, blocked content, impossible travel, resource inaccessibility, and out-of-cycle logging, with recommended mitigations.

Explore network analysis with Wireshark and Tshark to analyze traffic, apply capture and display filters, identify protocols, and study IP traffic patterns for cybersecurity investigations.

Explore how rogue dhcp servers provide illegitimate ip information, including the default gateway, enabling a man-in-the-middle attack while practicing with ethercap in the lab.

Identify and mitigate software vulnerabilities through timely patching and removal of unsupported systems, using agent and agentless scanners to centralize discovery.

Identify operating system vulnerabilities in Windows, Linux, and macOS that enable privilege escalation or arbitrary code execution, and examine SQL injection and cross-site scripting attacks.

Explore hardware vulnerabilities, including end of life and legacy systems, and understand how firmware and Bios updates mitigate risks.

Explore cloud concepts and security vulnerabilities across SaaS, IaaS, and PaaS models, and learn why customers own security while providers protect the cloud. Assess supply chain risks from third-party access.

Mobile devices create threat vectors through BYOD, where compromised devices can become entry points to the company network, while sideloading, rooting, and jailbreaking are mitigated by an acceptable use policy.

Examine virtualization in cybersecurity, including hypervisor and VM concepts, VM escape, and resource reuse. Apply mitigation techniques like patching, hypervisor hardening, isolation, and memory scrubbing.

Zero day vulnerabilities are unknown flaws exploited before patches, creating a high-risk window for breaches. Mitigate with advanced threat detection using behavioral analysis and machine learning, IDS, and micro segmentation.

Identify misconfiguration vulnerabilities, including default credentials and insecure settings, and learn how they enable attacks. Mitigate risk through regular security audits and best practices.

Learn nmap port scanning to map networks and identify live hosts and open ports, using stealth and aggressive scans, with lab practice on nmap.org.

Apply mitigation techniques to harden systems: encryption at rest and in transit, host-based firewall and IPS, access control lists, network segmentation, and the least privilege.

Explore mitigation techniques like patching, monitoring, configuration enforcement, and decommissioning to reduce vulnerabilities and detect threats. Learn how patching, baseline configuration, and data sanitization support secure it environments.

Analyze threat landscape and attacker psychology with tools like Wireshark and password crackers to identify risks before breaches, and explore security architecture, governance, and risk management for CompTIA Security+ certification.