Welcome back, folks.
This is visiting each and this session is about learning types of one piece.
This is going to be a bit interesting because there are a couple of interesting vulnerabilities we are
going to talk about.
Let's get started.
Types of vulnerabilities first, as was floor of go-slow bucks issues problem.
These are all powerful vulnerabilities just into the which is heavily used in cybersecurity, ethical
hacking, penetration testing.
Of course, the first is always floor.
Your Microsoft, Microsoft, one of the one of the largest one of the organizations who submitted the
largest S.V. vulnerabilities, because this this is a very complex operating system.
So you get to see a lot of vulnerabilities related to Windows, Windows servers exchange on prime exchange
office to many, many, many staff related to do this.
Right.
So you will find many ways floor with it, although of sorry, the exchanges is not really the OS,
windows is the operating system.
So Windows four mixed up Windows Phone.
So these are the operating system where you will find the flaw with the system.
Of course, if there is a flaw with the operating system, this is considered to be severe.
But again, it depends on kind of vulnerabilities, because if it is the remote code execution, this
is considered to be very critical because that means anybody can remotely execute any code on this system,
that it can be controlled remotely.
Right.
And that's why as the time, you know, you might have seen seen the wave of the and the the improvement
happened from Windows XP to Windows seven, Windows 10, the security has been taken as a serious concern.
And that's why you will find a huge difference the way the windows has been secured.
Now, before you install any software on the system, Windows Defender has got if you if you make use
of the license copy of it, that would be a multiple checks that happen as a kind of realtime screening
checks, you know, realtime antivirus engines.
That really works even even some part of it is going to say, but it still works in that case.
So that's something which is part of the flaw.
And second is the software.
But this is what we have discussed in the earlier session.
Software bug is something where there's understand this software developed by humans.
Right.
Software, some nothing but codes and codes are written by humans and human makes mistakes.
That means there could be possibility of software having bug every time.
Right.
And that's why we see vulnerabilities on the software most of the time.
Even if you have a very solid, very concrete operating system, you run software on top of it.
Right.
And that's why even if you have a strong software operating system, you you still end up having weaknesses
on your entire system.
Right.
And that's what I'm talking about.
We always be having a challenge with that.
The more you are going technical, the more digital transmission are happening, the more athletes to
open up more security risks to everyone, to the organization for sure than to a password.
Of course, if we have a poor password mechanism on the system, this could lead to huge vulnerability
as to how this could be a vulnerability.
Because if you have the organization or you personally have a poor password practices, it could happen
that, you know, you nowadays you have hundreds of password to manage for Google, for Yahoo!
Your mail, your you know, your VPN to your next stop, the mobile phone, multiple application, Facebook,
Instagram, LinkedIn, understand?
How could you remember all of them?
So you end up having a password just to just to make sure you remember it.
Right.
And that's why as a friend, you there's a trend saying password.
One, two, three.
One, two, three, four, five has been widely used, maybe more than millions of times by most of
the customers.
That's why it becomes easy for the hackers who compromised those user.
And that's easy to do without even knowing about the technology, but again, you don't have to be a
hacker for sure to hack somebody just by getting their right password.
And that's all part of the social engineering.
And that's what the world is all about.
Right then the user input.
Of course, this is all about user input as a part of how what kind of information has been shared to
the Web application or the system, the way information has been exchanged to the machine as the machine
is sanitizing this information.
If not, then the information can possibly exploit the machine itself.
Right, because you are trusting the user.
So, in fact, whatever the user is sending, you are taking it as it is without applying any kind of
fantasias check that might lead to a vulnerability that might lead to a system failure if that has any
malicious intent.
And that's called user input vulnerability to.
Well, it could be user input output vulnerability as well.
In some cases people.
Why?
Because people are consistent in humans, basically are considered to be the weakest gene in the entire
security system because you can fix the technology problem, you can fix every software problem every
day, and you can have multiple people to work on vulnerabilities, technology, challenges, bugs,
flaw and everything.
Right.
But you can assure about humans, right?
Because a state of human mind changes on every moment of time.
Imagine a situation when when somebody is really in a panic situation and he has to rush to his hometown
for some reason.
And in that period of time, if somebody tried to send a phishing email asking for some credentials
or asking for some sensitive information, he might be he might be knowing all the best practices.
He might be a better, more security awareness and all those stuff.
But he may end up sharing those information because because of lack of state of mind, because he might
be having second thought, he might be concentrating, focusing on something else at that moment.
And he might have missed all of those, you know, all the stuff that has been trained throughout the
on board training, security, best practices and all those employee awareness training programs.
And that's how most of the time the cyber criminals basically went.
Right.
And that's what that's what happened most of the time.
Most of the advanced threats are advanced, persistent threat or advanced.
Had that happen, it's all because the humans are get compromised to phishing emails through social
engineering, to social media and all this stuff.
Right.
So these are some of the widely widely are, in fact, pretty popular vulnerabilities.
Right.
OK, so I hope you got the sense we've got you in the next session then.
Thank you.