Week 3

For week 3, I looked at the CISA Known Exploited Vulnerabilities Catalog. I thought this website was interesting because it shows security vulnerabilities that are actually being used in real attacks. Instead of only talking about possible threats, it focuses on the ones that are causing problems right now.
What stood out to me is that this site helps organizations know what they should fix first. In cybersecurity, there are a lot of vulnerabilities, so it can be hard to decide what is most important. This catalog makes that easier by pointing out the weaknesses that attackers are already exploiting.
I think this is a valuable resource because it connects what we learn in class to real-world cybersecurity issues. It also shows why updating and patching systems is so important. Overall, I found this website useful, practical, and easy to understand, and I think it is a good resource for anyone interested in computer security.

Comments

Post a Comment

Popular posts from this blog

Week 2

This week I spent time learning about cloud security, and it stood out to me because so many businesses now rely on cloud services for storage, communication, and daily operations. In IT, the cloud makes things more flexible and accessible, but it also creates new security concerns that cannot be ignored. The more I learn, the more I see that convenience always has to be balanced with protection. What really caught my attention is that cloud security is not just about storing files online. It also involves managing permissions, protecting data, securing accounts, and making sure systems are configured correctly. A simple mistake, like giving too much access or leaving data exposed, can turn into a serious problem. That made me realize how important it is for IT professionals to understand not only how cloud systems work, but also how to secure them properly. This topic felt important to me because cloud technology is now a normal part of IT. It is something I will probably deal with ...
Read more
 Week #6 For this week I looked at an article on Dark Reading about how artificial intelligence is changing cybersecurity. AI is becoming a huge part of how companies protect their systems, but it is also being used by attackers in more advanced ways. One thing that stood out to me is how AI helps security teams detect threats much faster than humans can on their own. AI tools can scan massive amounts of data, look for unusual behavior, and alert teams in real time. This is especially important because cyberattacks are happening constantly, and it is impossible for people to manually monitor everything. At the same time, cybercriminals are using AI to improve their attacks. Phishing emails are becoming more convincing because AI can generate realistic messages that look professional and personalized. Deepfake technology is also being used for scams and impersonation. This makes it harder to tell what is real and what is fake online. Overall, I think AI is both helpful and danger...
Read more

week #4

This week, I looked more at identity and access management, and it made me think about how important user accounts really are in IT. At first, managing logins and permissions seems like a simple task, but it actually plays a big role in cybersecurity. Giving people the wrong level of access can create serious problems, even if the rest of the system is secure. What I found most interesting is how something as common as a password or login policy can have such a big impact. In IT, setting up accounts is part of everyday work, but from a security point of view, it becomes much more important. It showed me that security is not always about advanced attacks. A lot of it comes down to managing the basics the right way. Overall, this topic felt very real to me because it connects directly to the kind of work people do in IT all the time. It reminded me that strong security often starts with simple decisions, like who should have access and how that access is controlled.
Read more