Key Takeaways Macro: Embedded into a file and executed when the file is opened. Boot Sector: Stored in the first sector of a hard drive and loaded into memory upon boot up. Program: Infects an executable or app Multipartite: Combines boot & program: Attaches to boot sector and system files before attacking…

Key Takeaways Malware types include viruses, worms, trojan horses, spyware, adware, ransomware, rootkits, bots, and keyloggers. Malware Malware is a persistent, daily threat. It’s present at all times and comes in many forms. This topic is an important piece of the cybersecurity puzzle that cybersecurity pros need to know well. The most common…

Key Takeaways Physical Controls are things, like locks, cameras, ID cards, guards, etc. Technical Controls are things, like encryption, ACLs, authentication, etc. Administrative Controls are things like policies, procedures, training, etc. They are procedural or legal/regulatory. Mitigating Threats Now that we’ve learned a bit about the types of threat actors and security threats out…

Key Takeaways Malware is malicious software designed to infiltrate computers systems. Unauthorized Access is access to resources & data without consent. System Failure is when computer systems or applications crash. Social Engineering is manipulating users into performing detrimental actions, like revealing confidential information, etc. Security Threats In the previous issue, we learned about threat…

Key Takeaways Hobbyists are called script kiddies, have little to no skill, and rely on existing tools and exploits. Hacktivists hack for a cause, such as social, political, or terror agendas. Organized Crime hackers are part of a sophisticated, well-funded criminal group. Advanced Persistent Threats are the most well-trained and well-funded, often…

Key Takeaways White Hat means hired, non-malicious, ethical and has consent. Black Hat means malicious, unethical, and doesn’t have consent. Gray Hat means neutral, but doesn’t have consent. Blue Hat means non-malicious, bounty participant, and has consent. Elite means best, 1 in 10k, creates tools, and finds exploits first. The Five Hacker Types Hackers aren’t all…

Key Takeaways AAA stands for Authentication, Authorization, & Accounting. Authentication means confirming ID with proof. ID proofs can be things you know, are, have, do, or somewhere you are. Accounting means tracking data, usage, & network resources. Non-repudiation is having proof someone has taken an action. What Is InfoSec AAA? Security+ is about securing information and…

Key Takeaways The CIA Triad is comprised of confidentiality, integrity, and availability. Confidentiality means information has not been disclosed to unauthorized people. Integrity means information has not been modified or altered without proper authorization. Availability means information can be stored, accessed, and protected at all times. The InfoSec CIA Triad Security professionals create multi-layered protections and…

What Is Security+? Security+ is an internationally-recognized certification from the non-profit organization CompTia. Passing the exam signifies someone has attained a professional, working knowledge in the field of Information Security. This series of articles will share notes and resources about this topic in a concise, focused manner. 🤓 Key Takeaways Information Security protects information and…