1.6 Explain the security concerns associated with various types of vulnerabilities.

Question 1

Data exfiltration

Answer 1

Data exfiltration is an unauthorized copying or retrieval of data from a system. Data exfiltration attacks are one of the primary means for attackers to retrieve valuable data, such as Personally Identifiable Information (PII) or payment information, often destined for later sale on the black market.

Question 1

What are some common Vulnerabilities

Answer 1

Zero-day - Never before seen Vulnerability, so no patch yet.
Open permissions -
Unsecured root accounts
Errors- may show too much info.
Weak encryption
Insecure protocol
Improper Patch management