Module 1: Cybersecurity Fundamentals 🔒

Cybersecurity is the practice of protecting systems, networks, and programs from digital attacks. These attacks often aim to access, change, or destroy sensitive information, extort money from users, or disrupt normal business operations. In today’s interconnected world, cybersecurity is not just a technical issue — it’s a critical part of personal safety, business continuity, and even national security.

The CIA Triad

• Confidentiality – Ensuring information is accessible only to those authorized to see it.
  Example: Encrypting emails so only the intended recipient can read them.
• Integrity – Protecting data from being altered or tampered with.
  Example: Using checksums or digital signatures to verify that files haven’t been modified.
• Availability – Making sure systems and data are available when needed.
  Example: Redundant servers and disaster recovery plans keep services online during outages.

Common Cyber Threats

• Malware – Viruses, worms, and ransomware that damage or steal data.
  Ransomware can lock your files until you pay attackers.
• Phishing – Fake emails or websites designed to trick users into revealing information.
  Spear phishing targets specific individuals with personalized messages.
• Social Engineering – Manipulating people into giving up confidential data. Attackers may impersonate IT staff or use urgency to pressure victims.
• Network Attacks – Attempts to intercept or disrupt communication between systems. Examples include Man-in-the-Middle (MITM) attacks or Denial-of-Service (DoS) floods.
• Insider Threats – Employees or contractors misusing access for malicious purposes.
• Zero-Day Exploits – Attacks that take advantage of software vulnerabilities before developers release a fix.

Basic Defense Strategies

• Strong Authentication – Use strong, unique passwords and enable multi‑factor authentication (MFA).
• Regular Updates – Keep software and systems updated to patch vulnerabilities.
• Firewalls & Antivirus – Install firewalls and antivirus tools to block malicious activity.
• Data Backups – Back up important data regularly to prepare for emergencies.
• Least Privilege Principle – Give users only the access they need to limit damage if compromised.
• Security Awareness Training – Teach employees and users how to spot phishing attempts and unsafe practices.
• Incident Response Planning – Have a clear plan for detecting, responding to, and recovering from cyber incidents.

Real-World Examples

• In 2017, the WannaCry ransomware attack spread globally, affecting hospitals, businesses, and governments.
• The Equifax breach exposed personal data of 147 million people due to an unpatched vulnerability.
• Everyday phishing emails continue to trick users into clicking malicious links or entering credentials.

Why Cybersecurity Matters

Cybersecurity protects not only organizations but also individuals. Personal data, financial information, and even medical records are valuable targets. By practicing good cyber hygiene, you reduce risks and contribute to a safer digital environment.

Quiz