What an attack surface is
Evaluating the sum total of all potential entry vectors that an unauthorized adversary could exploit to compromise a system.
Section 2
Topic 5: Threat Landscape and Attack Surfaces
How attackers choose targets and goals
Investigating passive scanning, open-source intelligence gathering (OSINT), financial extortion motivations, and intellectual property theft.
Common vulnerabilities and weak settings
Remediation of default vendor configurations, missing multi-factor configurations, unpatched software layers, and open listener ports.
Why people, devices, and habits are risks
Analyzing the human component as a preferred entry path due to manipulation, cognitive fatigue, and out-of-date device behaviors.
How small mistakes lead to big incidents
Tracking chain-link exploitation events, where a single weak credential or exposed dev endpoint leads to enterprise compromise.
Multi-Modal AI Threat Vectors
Analyzing deepfake voice cloning (vishing), synthesized video impersonation in online meetings, and how adversaries exploit hyper-realistic synthetic media to bypass human defenses. Discover key countermeasures via the Guardey Employee Deepfake Awareness Guide.
Knowledge Check
How does reducing an entity's privilege level affect its attack surface?
It shrinks the attack surface by reducing the number of administrative avenues and access points that an attacker can exploit.
« Previous: Operating System Security — Next: Malware and Common Attacks »