change the sentance of Weak Authentication, default or weak passwords for administrative accounts can be exploited by attackers. Unnecessary Services Running, unnecessary services and applications increases the attack surface and potential points of entry for attackers. Lack of Encryption Failure to encrypt data in transit and at rest can expose sensitive information to interception or theft. Inadequate Logging and Monitoring Without proper logging and monitoring, suspicious activities may go unnoticed.