Operating System Vulnerabilities - CompTIA Security+ SY0-701 - 2.3 — Transcript

Full transcript

1. 0:01one of the things you'll constantly hear
2. 0:03Security Professionals discuss is the
3. 0:05need to keep operating systems patched
4. 0:08to the latest versions that's because
5. 0:10operating systems are foundational
6. 0:12Computing platforms and everybody is
7. 0:14running an operating system from the
8. 0:16perspective of an attacker this makes it
9. 0:19a very attractive place to start looking
10. 0:21for vulnerabilities and by keeping your
11. 0:24operating system up to date you can
12. 0:25close any of these known vulnerabilities
13. 0:28one of the challenges associated with
14. 0:30these operating systems is that they are
15. 0:32remarkably complex Windows 11 is
16. 0:35estimated to have tens of millions of
17. 0:37lines of code and the more code you have
18. 0:40in an operating system the more
19. 0:42opportunity for security vulnerabilities
20. 0:44to appear so if you think about it the
21. 0:46operating system that you're using right
22. 0:48now contains many different security
23. 0:51vulnerabilities but we just don't know
24. 0:53what those vulnerabilities are yet
25. 0:55researchers and attackers will find
26. 0:57these vulnerabilities they'll be
27. 0:58reported to the manufact fact of the
28. 1:00software they'll create a patch and an
29. 1:02update and we'll install that patch on
30. 1:04our systems in the case of Microsoft
31. 1:07Windows we receive updates of that
32. 1:09operating system every month
33. 1:10specifically on what we call Patch
34. 1:12Tuesday this is the second Tuesday of
35. 1:15each month Microsoft will release entire
36. 1:17sets of patches on that single day of
37. 1:20the month and then Security
38. 1:21Professionals will begin testing and
39. 1:23deploying those patches to their systems
40. 1:25let's look at what a normal Patch
41. 1:27Tuesday might look like we'll look at
42. 1:30the Tuesday of May 9th 2023 and in that
43. 1:33update Microsoft released almost 50
44. 1:35separate security patches for Microsoft
45. 1:38Windows operating systems and other
46. 1:40applications this single set of patches
47. 1:42for May resolves a number of different
48. 1:45security vulnerabilities this pack
49. 1:47includes eight elevation of privilege
50. 1:49vulnerabilities four security feature
51. 1:51bypass vulnerabilities 12 remote code
52. 1:54execution vulnerabilities and so on
53. 1:57although this seems like a large number
54. 1:59of vulnerabilities and it is a large
55. 2:01number of vulnerabilities the previous
56. 2:03Patch Tuesday in April of 2023 had
57. 2:06almost 100 different vulnerabilities
58. 2:08that were patched if you'd like to see
59. 2:10the latest set of patches available for
60. 2:12your Windows operating system you can
61. 2:14visit the Microsoft security Response
62. 2:16Center at
63. 2:17msrc
64. 2:19microsoft.com there are a number of best
65. 2:21practices you may want to put in place
66. 2:23when it comes to operating system
67. 2:25updates the first is that you should
68. 2:27always plan on updating when that
69. 2:29monthly update occurs or an OnDemand
70. 2:32update occurs at some other time you
71. 2:34need to be sure to patch that version of
72. 2:36software as quickly as possible once a
73. 2:38previously unknown vulnerability is
74. 2:40suddenly announced to the world the
75. 2:42attackers will start looking for ways to
76. 2:44reverse engineer that particular
77. 2:46vulnerability so they can use it against
78. 2:49other operating systems if you get your
79. 2:51system patched before they're able to
80. 2:53create attack code then your system will
81. 2:55be safe from any subsequent attacks if
82. 2:58you're updating a system at home home
83. 3:00you may just want to make sure you have
84. 3:01a backup and you can perform the patch
85. 3:03but in very large and complex
86. 3:05environments containing hundreds or
87. 3:06thousands of devices you may want to
88. 3:09perform a test before deploying this
89. 3:11patch into a production environment this
90. 3:13ensures that the patch that you're going
91. 3:15to deploy doesn't in some way break
92. 3:17something else with the operating system
93. 3:20sometimes these patches can be
94. 3:21automatically installed behind the
95. 3:23scenes and no other work is required but
96. 3:25there are some patches especially those
97. 3:28that are built into the core parts of
98. 3:29the operating system that may require
99. 3:31you to reboot the system to be fully
100. 3:34patched in that particular case you want
101. 3:35to make sure that you've saved all your
102. 3:37data and then you can reboot the system
103. 3:40and of course even with all of the
104. 3:41precautions and testing that you put in
105. 3:43place you may still find that there are
106. 3:45problems that occur after this patch has
107. 3:47been put into production that's why it's
108. 3:49so important to have a backup so if you
109. 3:51need to go back to the configuration
110. 3:53prior to the patch installation you can
111. 3:55easily do that using your known good
112. 3:58backup