How Was the Flaw Found? — TechKnowSurge

About this interactive

The Discovering Vulnerabilities lesson lists the ways an organization finds flaws in its own systems. Vulnerability scan: software sweeps the network for devices and checks each one against a list of known flaws. Code review or analysis: for software you write, another developer reviews the code, a tool analyzes it without running it (static), or the code is run and watched (dynamic). Threat feed: news feeds, information-sharing organizations, open-source intelligence, paid third-party feeds and even the dark web report flaws that are hot right now, and you check whether you have them. Penetration test: people try to get into the network by whatever route they can find, to show where the holes are. Adversary emulation: it looks like a penetration test, but the testers adopt a technique or playbook that real attackers are using now and see whether it works on you. System or process audit: the team works through a checklist for a device or a process, often yearly, and finds what does not meet it. The lesson also covers disclosure programs and bug bounties. They are practised in the Security Functions module's vulnerability source sorter, so they are left out here. A quick test for each card: was it found by a tool sweeping the network, by reading or running code, by an outside report, by people breaking in their own way, by people copying a known attacker, or by a checklist?

What you'll learn

Name the identification method that turned up a vulnerability: vulnerability scan, code review or analysis, threat feed, penetration test, adversary emulation, or system or process audit
Tell a penetration test, which looks for a way in by whatever route works, from adversary emulation, which copies the techniques a known attacker uses now

Aligned to

CompTIA Security+

4.3 Explain various activities associated with vulnerability management.

5.5 Explain types and purposes of audits and assessments.

CompTIA CySA+

2.1 Given a scenario, implement vulnerability scanning methods and concepts.

NIST 800-53

RA-5 Vulnerability Monitoring and Scanning

CA-8 Penetration Testing

Key terms

Vulnerability Assessment: The process of identifying, quantifying, and prioritizing vulnerabilities in a system.
Penetration Testing: An authorized simulated attack on a system to identify and evaluate security vulnerabilities.
Adversary Emulation: A testing approach that mimics the specific techniques and behaviors of known threat actors to assess whether a network is vulnerable to those methods.
Threat Intelligence: Information about existing or emerging threats that helps organizations make informed security decisions.
Static Analysis: A method of identifying vulnerabilities by examining application source code without executing it.
Audit: A formal and systematic examination of an organization's systems, policies, and procedures to verify that security controls are in place, functioning as intended, and meeting applicable compliance requirements.

Topics

Vulnerability Management Vulnerability Identification Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →