Maimun- Cybersecurity blog

This week I spent time learning about cloud security, and it stood out to me because so many businesses now rely on cloud services for storage, communication, and daily operations. In IT, the cloud makes things more flexible and accessible, but it also creates new security concerns that cannot be ignored. The more I learn, the more I see that convenience always has to be balanced with protection. What really caught my attention is that cloud security is not just about storing files online. It also involves managing permissions, protecting data, securing accounts, and making sure systems are configured correctly. A simple mistake, like giving too much access or leaving data exposed, can turn into a serious problem. That made me realize how important it is for IT professionals to understand not only how cloud systems work, but also how to secure them properly. This topic felt important to me because cloud technology is now a normal part of IT. It is something I will probably deal with ...

This week, I looked more at identity and access management, and it made me think about how important user accounts really are in IT. At first, managing logins and permissions seems like a simple task, but it actually plays a big role in cybersecurity. Giving people the wrong level of access can create serious problems, even if the rest of the system is secure. What I found most interesting is how something as common as a password or login policy can have such a big impact. In IT, setting up accounts is part of everyday work, but from a security point of view, it becomes much more important. It showed me that security is not always about advanced attacks. A lot of it comes down to managing the basics the right way. Overall, this topic felt very real to me because it connects directly to the kind of work people do in IT all the time. It reminded me that strong security often starts with simple decisions, like who should have access and how that access is controlled.

This week, I spent time learning about patch management, and it honestly made me look at routine IT work a little differently. Updates can seem small or easy to put off, but they are actually one of the most important parts of keeping systems secure. Since I am working on my Security+ certificate, this topic stood out to me because it connects directly to both IT support and cybersecurity. What I found most interesting is that patching is one of those basic tasks that can make a huge difference. If systems are not updated, attackers can take advantage of known vulnerabilities that already have fixes available. That means something that looks like normal maintenance in IT can actually be a major part of security. It reminded me that strong security does not always start with advanced tools. Sometimes it starts with doing the simple things consistently. This topic felt personal to me because it shows how closely IT and cybersecurity are connected. A lot of people think security is only...

For week 3, I looked at the CISA Known Exploited Vulnerabilities Catalog. I thought this website was interesting because it shows security vulnerabilities that are actually being used in real attacks. Instead of only talking about possible threats, it focuses on the ones that are causing problems right now. What stood out to me is that this site helps organizations know what they should fix first. In cybersecurity, there are a lot of vulnerabilities, so it can be hard to decide what is most important. This catalog makes that easier by pointing out the weaknesses that attackers are already exploiting. I think this is a valuable resource because it connects what we learn in class to real-world cybersecurity issues. It also shows why updating and patching systems is so important. Overall, I found this website useful, practical, and easy to understand, and I think it is a good resource for anyone interested in computer security.