-: Common vulnerabilities.
In this lesson we're going to talk about the
common vulnerabilities that you're going to experience
inside of those scam reports,
as you go through and analyze them.
When we talk about these common vulnerabilities,
you have to realize that vulnerability scanners
can detect thousands and thousands
of different vulnerabilities on a system.
Now, we're not going to cover
each of these vulnerabilities individually,
like eternal blue, which is Microsoft 17-010,
but instead we're going to talk about them as categories,
and there's five basic categories
of vulnerabilities that you're going to experience
as you go through these scan reports
that you're gonna to have to deal with,
prioritize, and remediate.
The first one is server and host vulnerabilities,
the second is network vulnerabilities,
the third is virtualization vulnerabilities,
the fourth is web application vulnerabilities,
and the fifth is internet of things vulnerabilities.
Now I'm gonna dedicate a lesson
to each one of these five categories as we move forward.
But before we do, I wanted to go over
a little bit of trend analysis with you
about these common vulnerabilities.
As you can see on this chart, this comes from the
Verizon Data Breach Investigations 2016,
and they did a big study in 2015 looking at
every CVE and vulnerability that existed,
and which ones were used in the exploitations
of those data breaches back in 2015.
Now, notice in 2015, the ones released in 2015,
which is the blue column here was about 70 vulnerabilities,
and there was 70 different successful exploits
against vulnerabilities from 2015.
But, you can notice that in 2013's,
there was still some out there,
and 2011, and 2009, going all the way back to 1999,
there was still 20 vulnerabilities from 1999
that were exploited in 2015.
That's 16 years that those vulnerabilities were not patched.
That's why we're talking about
vulnerability management programs,
because there are 20 companies out there that got hacked
with a vulnerability from 1999.
That's just sad, right?
We need to make sure that we are patching our systems.
And, all these vulnerabilities we're gonna talk about,
these common vulnerabilities fit into this chart somewhere.
And you can see that these are not
new techniques that hackers are using on you,
they're using old techniques.
They're taking these old vulnerabilities,
they're taking things that are known,
things that have patches,
and they're using them against you today,
in the current world.
So, you gotta make sure
you're going through your programs,
you've got to make sure you identify those vulnerabilities,
and you've got to understand that remediation is key here,
especially with these old ones,
because even if you had patched everything from this year,
you would've missed hundreds of vulnerabilities
that were known and could be exploited,
as was shown here by the,
the Version Data Breach Investigative study.
(electronic tone)