-
Security+ 801 Countdown, T-20: SSE Replaces SASE as Secure Access Is Rebuilt
801 3.2 drops SASE and SD-WAN for Security Service Edge and adds end-to-end encrypted messaging, out-of-band management, and file transfer.
-
Security+ 801 Countdown, T-21: Zero Trust Drops the NIST Plane Vocabulary
Policy engine, policy administrator, and enforcement point are gone. 801 keeps Zero Trust principles in 1.1 and tests user, device, and app access in 3.2.
-
Security+ 801 Countdown, T-22: OT Replaces ICS and SCADA as Cloud Gets Deployment Models
801 3.1 folds ICS/SCADA, RTOS, and embedded into OT, demotes IoT to a vector, adds community cloud, and splits its considerations list in two.
-
Security+ 801 Countdown, T-23: New Objective 2.6 Covers the Risks of Using AI
Part 2 of 801’s AI objective: data loss, privacy, hallucinations, bias, explainability, ethics, and what session hijacking and code execution mean for agents.
-
Security+ 801 Countdown, T-24: New Objective 2.6 Covers Attacks on AI Models
801 adds an AI threats objective. Part 1 covers attacks on models: prompt injection, jailbreaking, poisoning, model manipulation, and evasion.
-
Security+ 801 Countdown, T-25: Indicators of Compromise Now Name Hashes, Timestamps, and Log Tampering
801 renames Indicators to Indicators of compromise and adds hashes, IPs, domains, processes, file artifacts, timestamps, and plaintext strings.
-
Security+ 801 Countdown, T-26: Network and Physical Attacks, With Sniffing In and Bollards Out
801 2.5 adds sniffing, spoofing, rogue, and cache poisoning, drops collision and birthday attacks, and swaps Domain 1’s bollards for tailgating and skimming.
-
Security+ 801 Countdown, T-27: Social Engineering Gets Whaling, Quishing, and Deepfakes
Phishing, vishing, and smishing move into 801’s scenario objective with whaling, spear phishing, quishing, and deepfakes. Pretexting and typosquatting are gone.
-
Security+ 801 Countdown, T-28: Sessions, Identity Providers, and MFA Bypass Join the Attack Surface
801 names cookies, session tokens, identity providers, and stale credentials as targets and adds user enumeration, replay, and MFA bypass to credential attacks.
-
Security+ 801 Countdown, T-29: Objective 2.4 Rebuilt Around Attack Surfaces, Secrets, and Public Buckets
801 2.4 drops SQLi, XSS, and VM escape for exposures: unpatched, obsolete, and rogue systems, hardcoded secrets, public repositories, and open buckets.