From the course: CompTIA Cybersecurity Analyst (CySA+) (CS0-003) Cert Prep

Unlock the full course today

Join today to access over 24,200 courses taught by industry experts.

Zero-days and the APT

Zero-days and the APT

From the course: CompTIA Cybersecurity Analyst (CySA+) (CS0-003) Cert Prep

Start my 1-month free trial Buy for my team

Zero-days and the APT

“

- [Presenter] Many attacks take place when an organization fails to apply security patches leaving themselves vulnerable to an attacker who knows how to exploit the missing patch. The fix for that situation is simple. Organizations should apply security updates as soon as they're available from operating system and application vendors to fortify their systems against attack. Unfortunately, it's not always possible to protect yourself from every possible vulnerability because not all of them are known. Consider, for example, that modern operating systems contain literally millions of lines of code. There's no doubt that lurking somewhere in that massive amount of code are new security vulnerabilities that the security community simply hasn't discovered yet. Those vulnerabilities can expose an organization to risk. When a security researcher discovers a new vulnerability, they typically handle it in an ethical and responsible fashion. This normally means notifying the vendor responsible…

Contents