liveBook · Manning

Vulnerability

As explained in Azure Security

A vulnerability is a weakness or gap in a system or its security controls that can be exploited by a bad actor.

A vulnerability is a weakness or gap in a system’s security controls that a bad actor can exploit. Vulnerabilities help enable attacks against organizations of any size and form part of the wider threat landscape alongside malware and bad actors. section 1.4

Assess vulnerabilities as part of a broader security effort:

  • Consider both external cyber criminals and malicious insiders as potential sources of exploitation. section 1.4
  • Study how bad actors pursue goals through tactics, techniques, and procedures. section 1.4
  • Use awareness of evolving threats to prevent common vulnerabilities and reduce the likelihood of compromise. section 1.4

How Azure Security covers it

How deep it goes
Defines vulnerabilities and places them in threat analysis, but stops short of implementation guidance or specific vulnerability examples.
Examples
Uses a gym-training analogy to illustrate learning from others and adapting defensive practice to evolving threats.
What you can do after
Evaluate how bad actors might compromise an environment and consider steps to reduce that likelihood.
How it connects
Connects vulnerabilities with security controls, malware, bad actors, tactics, techniques, procedures, and the threat landscape.

Also explained in

Compare how 16 books explain vulnerability →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.