πŸ“–

Cybersecurity Glossary

Plain-English definitions for every security term you keep hearing but are afraid to Google. 31+ terms and growing.

Showing all 31 terms

2FA
2FA (Two-Factor Authentication)
A security method requiring two forms of verification to access an account β€” e.g., your password plus a code from your phone.
APT
APT (Advanced Persistent Threat)
A sophisticated, long-term cyberattack, usually by nation-state actors, targeting high-value organizations.
Botnet
A network of compromised computers controlled by an attacker (the "bot herder") to send spam, conduct attacks, or mine cryptocurrency.
Brute Force Attack
An attack method that tries every possible password combination until the correct one is found. Countered by strong, unique passwords and account lockouts.
CISA
CISA
Cybersecurity and Infrastructure Security Agency β€” the U.S. federal agency responsible for national cybersecurity guidance and alerts.
CVE
CVE
Common Vulnerabilities and Exposures β€” a publicly disclosed database of known security flaws in software, each assigned a unique ID like CVE-2024-12345.
Dark Web
A part of the internet not indexed by standard search engines, accessed via special software (like Tor). Used for both anonymous communication and illegal markets.
DDoS
DDoS Attack
Distributed Denial of Service β€” flooding a server with traffic from many sources to make it unavailable to real users.
DNS Hijacking
An attack where DNS queries are intercepted and redirected to malicious websites, even if you type the correct URL.
Encryption
The process of converting readable data into an unreadable format (ciphertext) that can only be decoded with the correct key.
E2EE
End-to-End Encryption
Encryption where only the communicating parties can read messages β€” not the service provider, not the government.
Exploit
A piece of code or technique that takes advantage of a software vulnerability to cause unintended behavior.
Firewall
A network security device (hardware or software) that monitors and filters incoming/outgoing traffic based on security rules.
Honeypot
A decoy system designed to attract and trap attackers, allowing security teams to study attack methods.
HTTPS
HTTPS
HyperText Transfer Protocol Secure β€” an encrypted version of HTTP. Look for the padlock icon in your browser address bar.
IR
Incident Response
The structured process an organization follows to detect, contain, eradicate, and recover from a cyberattack.
Keylogger
Malware that secretly records every keystroke you type, stealing passwords, credit card numbers, and other sensitive data.
Malware
Malicious software including viruses, ransomware, spyware, and trojans β€” designed to damage, disrupt, or gain unauthorized access to systems.
MFA
MFA (Multi-Factor Authentication)
Like 2FA but can use more than two factors β€” something you know, have, or are (biometrics).
Patch
A software update that fixes security vulnerabilities. Keeping software patched is one of the most effective defenses.
Pen Test
Penetration Testing
Authorized simulated cyberattacks against your own systems to find vulnerabilities before real attackers do.
Phishing
A social engineering attack using fake emails, texts, or websites to trick users into revealing passwords or installing malware.
Ransomware
Malware that encrypts your files and demands payment (ransom) to restore access. Backups are your best defense.
RAT
RAT (Remote Access Trojan)
Malware that gives an attacker full remote control of your computer, often installed without your knowledge.
Social Engineering
Manipulating people β€” rather than systems β€” into divulging confidential information or performing actions. Phishing is the most common form.
SQLi
SQL Injection
An attack that inserts malicious SQL code into a web form to manipulate a database β€” a leading cause of data breaches.
TLS
SSL/TLS
Protocols that encrypt data in transit between your browser and a web server. The "S" in HTTPS.
Threat Actor
Any individual or group that conducts cyberattacks β€” ranging from script kiddies and criminals to nation-state hacking teams.
VPN
VPN (Virtual Private Network)
A service that encrypts your internet traffic and hides your IP address, improving privacy on public Wi-Fi and beyond.
0-day
Zero-Day
A software vulnerability unknown to the vendor β€” attacks exploiting it ("zero-day exploits") are especially dangerous since no patch exists yet.
Zero Trust
A security model based on "never trust, always verify" β€” no user or device is trusted by default, even inside the network.

πŸ€” Missing a term?

See a cybersecurity word that confuses you? We'll add it to the glossary.

Suggest a Term β†’