Now there's just a little tiny little thing that I want to close out in on the intro here before we start getting into the rest of the actual skill itself and getting into some examples of stuff.
And that is the purpose of what it is that we really want to hone in on this skill and that is identifying web exploits and the possibility of the patching and how to better secure that web environment.
So that way it doesn't lead into the organization's internal side and cause things like data loss.
Because the biggest things that we want to really prevent here, especially as a security technician at CIO, CISO, is having web exploits, big or small, prevent them from being leveraged because that can lead to a loss of revenue, loss of data, and loss of credibility for the organization.
And while that last one may seem out of nowhere, that loss of credibility, that's a big one.
And I'm going to tie that into something that's a little bit more current as of this recording and that is the CloudFlare incident going on.
CloudFlare effectively used some sort of not AI to generate a security template and implement it based on emerging trends.
See if I can get the pronunciation right.
Heuristically built their rules for their IDS and IPS systems and unfortunately it got too out of control and effectively put in so much security that it lost everything.
And so because they were not, it's on the other end of the spectrum of what we're talking about here, it wasn't exploited, it was just shut off because of the lack of attentiveness is not really the right way to say it.
It's just they went overboard with the security and it leads into a loss of credibility because now when people sign up for services that CloudFlare has for what they do and what they do is good, great, phenomenal.
But you're going to have that lingering thought in the back of your mind now saying are my services are going to, are they going to be attainable that 5-9 realm time than 99.999% of the time under CloudFlare's scope of responsibility if they keep doing stuff like this because it could lead to a loss of service.
And yes, data loss is critical.
But all of these factors of loss and having the exploits leveraged inside of a system that we own, especially on the website of things nowadays, all tie into that loss of credibility.
And loss of credibility will sink an organization faster than actually data loss.
Look at Tarjay for instance, they had a lot of data that was lost during that HVAC thing a few years back, but they're still cranking around.
If they had lost their credibility, you wouldn't see any Tarjays anymore.