2.6 Cybersecurity Vulnerabilities

What is a Vulnerability?

A vulnerability is a weakness in a system, network, or device that could be exploited by a threat to cause harm. Vulnerabilities can be physical (unlocked doors), software-based (unpatched code), or human (weak passwords). Identifying vulnerabilities is the first step in risk assessment, helping organizations prioritize what to fix before attackers exploit them.

Common Vulnerability Types

Software vulnerabilities include bugs, outdated code, and unpatched applications. Hardware vulnerabilities involve flaws in physical devices like firmware. Configuration vulnerabilities arise from default passwords or improperly set permissions. Human vulnerabilities stem from lack of training, making people susceptible to social engineering and phishing attacks.

Finding and Reducing Vulnerabilities

Organizations use vulnerability scanning tools and penetration testing to find weaknesses before attackers do. Keeping software updated with patches, enforcing strong authentication, and training employees reduces the attack surface — the total number of points where an unauthorized user could try to enter or extract data.

Key terms

Vulnerability

A weakness in a system, network, or device that could be exploited by a threat to cause harm.

Configuration vulnerability

A weakness caused by improper settings, such as default passwords or overly permissive access.

Human vulnerability

A weakness caused by lack of training or awareness, making people susceptible to social engineering.

Penetration testing

A simulated attack used to find and fix vulnerabilities before real attackers exploit them.

Attack surface

The total number of points where an unauthorized user could try to enter or extract data from a system.

Try an AP-style question

What does a vulnerability scanner do?

1. Exploits every flaw it finds
2. Encrypts vulnerable files
3. Finds known weaknesses in systems
4. Blocks all network traffic