Certified - CompTIA CYSA+ Audio Course

When encryption fails, the consequences can be catastrophic. In this episode, we explore cryptographic failures—formerly called "Sensitive Data Exposure" in the OWASP Top Ten—and why they continue to affect even high-profile organizations. You’ll learn how weak encryption algorithms, improper key management, and poor implementation practices expose data at rest and in transit. We’ll also walk thro...

Access control determines who can do what—and when it breaks, attackers often find a clear path in. In this episode, we take a deep dive into broken access control vulnerabilities, one of the most serious and widespread categories in application security. You’ll learn how horizontal and vertical privilege escalation works, what insecure direct object references (IDORs) are, and how misconfigured r...

When attackers manipulate training data or trusted inputs, they can corrupt the very systems meant to defend against them. In this episode, we explore data poisoning—a type of vulnerability where attackers inject malicious or misleading data into machine learning models, behavioral analytics engines, or input streams used for automation. You’ll learn how this manipulation affects detection systems...

When a program doesn’t control how much data it processes, memory can be overwritten—and attackers can take control. In this episode, we explore the mechanics and consequences of overflow vulnerabilities: buffer, heap, stack, and integer overflows. You’ll learn how these vulnerabilities are introduced, why low-level programming languages like C are more susceptible, and how attackers exploit them...

Cross-site scripting, or XSS, is one of the most common and dangerous web application vulnerabilities. In this episode, we break down the three primary types—reflected, persistent, and DOM-based XSS—and explain how each one works, what it targets, and how attackers use it to steal session cookies, impersonate users, or inject malicious content into trusted pages. We also walk through how these att...

Every vulnerability exists in the context of what it could damage—and that’s where asset valuation comes in. In this episode, we explore how security analysts assess the value of an asset and how that valuation affects how quickly a vulnerability must be addressed. You'll learn how asset types—like domain controllers, public-facing servers, or databases containing sensitive data—are categorized ba...

A vulnerability doesn’t become a threat until someone weaponizes it—and that’s when it becomes truly urgent. In this episode, we explore the concepts of exploitability and weaponization in depth. You’ll learn how analysts determine whether a vulnerability is likely to be exploited in the wild, what tools and threat intel feeds help assess real-world usage, and how exploit maturity affects prioriti...

Sometimes the same vulnerability poses very different risks depending on the environment. This episode teaches you how to analyze vulnerabilities in context—a crucial CySA+ concept and a daily responsibility in the SOC. You’ll learn how factors like asset criticality, network location, user roles, data exposure, and isolation strategies shape whether a vulnerability should be escalated, accepted,...

Automated scanners are powerful—but they’re not perfect. In this episode, we explore the analyst’s role in validating scan results, filtering out false positives, and identifying dangerous false negatives. You’ll learn what kinds of vulnerabilities are frequently misidentified, why context matters when interpreting findings, and how to verify scanner output using logs, manual checks, and behaviora...

Not all vulnerabilities are created equal—and CVSS helps quantify just how severe they are. In this episode, we provide an in-depth breakdown of the Common Vulnerability Scoring System (CVSS), which is one of the most widely used methods for prioritizing remediation efforts based on impact and exploitability. You’ll learn how CVSS scores are calculated using factors like attack vector, complexity,...

The move to the cloud has redefined how organizations think about security—and how analysts perform assessments. In this episode, we explore cloud-native vulnerability assessment tools like Scout Suite and Prowler, which are purpose-built for auditing cloud infrastructure and identifying misconfigurations, permission risks, and exposed services in platforms like AWS, Azure, and GCP. You’ll learn w...

Some tools do it all—and analysts rely on them for everything from scanning to exploitation to open-source intelligence gathering. In this episode, we examine three powerful multipurpose tools: Nmap for port scanning and host discovery, the Metasploit Framework (MSF) for exploit testing and validation, and Recon-ng for structured OSINT gathering. We’ll show how these tools are used by both red tea...

Not every vulnerability is easy to spot—some require stepping into the execution environment itself. This episode introduces you to common debugging tools like Immunity Debugger and GNU Debugger (GDB), which are used to examine running applications, monitor memory usage, and identify how software behaves when it encounters unexpected input. While these tools are more commonly associated with rever...

At the heart of vulnerability management lies automated vulnerability scanners—and few are more widely used than Nessus and OpenVAS. In this episode, we break down how these scanners work, what they look for, and how analysts interpret their output. You’ll learn about plugin libraries, scan templates, result severity rankings, and how these tools differentiate between configuration issues and expl...

Web applications are among the most targeted assets in modern enterprises—and automated scanning tools are the first line of defense. In this episode, we take a close look at Burp Suite, ZAP (Zed Attack Proxy), Arachni, and Nikto—each of which plays a distinct role in discovering vulnerabilities like injection flaws, insecure cookies, misconfigured headers, and more. We explain how to use these to...

Understanding your network begins with visibility—and that visibility is powered by scanning and mapping tools. In this episode, we introduce key network discovery tools such as Angry IP Scanner and Maltego. You’ll learn how these tools help identify live hosts, open ports, DNS records, and relationships between systems, giving analysts a clear picture of what’s exposed and where risks may reside....

Many vulnerability scanning strategies are guided by established frameworks. In this episode, we break down the most widely recognized standards referenced throughout the CySA+ exam and in real-world practice. You’ll learn how PCI DSS, the CIS Benchmarks, OWASP Top Ten, and ISO 27000 inform scanning scope, reporting practices, and remediation priorities. We explain what each framework contributes...

Before you can identify deviations, you need a baseline. This episode focuses on how security baseline scans compare systems and configurations against established security policies and industry benchmarks. You'll learn how organizations define “secure” settings for operating systems, network devices, and applications—and how to use scanning tools to enforce those standards. We discuss the role of...

Operational technology (OT) environments—such as industrial control systems (ICS) and SCADA platforms—pose unique challenges for vulnerability management. In this episode, we explore the risks of scanning sensitive industrial networks, where uptime is critical and legacy systems are common. You'll learn why traditional scanning tools may not be safe or effective in these environments, and what alt...

Some vulnerabilities are embedded in code—others appear only at runtime. In this episode, we unpack the distinction between static and dynamic vulnerability analysis. You’ll learn how static analysis tools examine source code or binaries without executing them, identifying risky functions, insecure libraries, and violations of secure coding practices. Dynamic analysis, by contrast, observes applic...

Not all scanning involves direct interaction. In this episode, we explore the differences between passive and active vulnerability detection techniques. You'll learn how active scanning probes devices directly for open ports, known vulnerabilities, and misconfigurations—while passive methods quietly monitor network traffic to uncover risks without making a sound. We discuss the benefits and limita...

Credentials can change everything. In this episode, we explore the differences between credentialed and non-credentialed scans—and why access matters when identifying vulnerabilities accurately. You’ll learn how non-credentialed scans test from the outside, simulating an attacker’s view, while credentialed scans offer deeper access to system internals, configuration issues, and patch status. We’ll...

Should you deploy agents on every device, or scan remotely without them? In this episode, we compare agent-based and agentless vulnerability scanning approaches and explore their respective strengths, limitations, and use cases. You’ll learn how agents provide deep telemetry and offline scanning, while agentless approaches are easier to deploy at scale but may miss key system-level insights. We al...

Where you scan from is just as important as what you’re scanning. This episode breaks down the difference between internal and external vulnerability scans—what each one reveals, why both are necessary, and how attackers exploit gaps between them. You’ll learn how external scans simulate a threat actor’s perspective, while internal scans evaluate risks from compromised users, insiders, or lateral...

Not all scans are created equal. In this episode, we explore the many considerations that go into planning and executing a vulnerability scan without disrupting business operations. You’ll learn about scan scheduling, network segmentation, regulatory constraints, performance impact, and how sensitivity settings can affect both coverage and safety. We also explain how to coordinate scanning activit...