Security Glossary
Learn key cybersecurity terms — from phishing techniques to defense strategies. Each term includes examples, prevention tips, and related resources.
B
Brute Force Attack
A trial-and-error method where attackers systematically attempt every possible password or key combination until finding the correct one.
Beacon Technology
Invisible tracking pixels embedded in web content that detect unauthorized use by reporting when and where the content is loaded.
C
Clone Phishing
An attack where a legitimate previously delivered email is duplicated with malicious links or attachments and resent to the victim.
Credential Stuffing
An automated attack that uses stolen username-password pairs from data breaches to gain unauthorized access to other accounts.
Cross-Site Scripting (XSS)
A web vulnerability where attackers inject malicious scripts into trusted websites, which then execute in other users' browsers.
Cross-Site Request Forgery (CSRF)
An attack that tricks authenticated users into unknowingly submitting malicious requests to a web application they are logged into.
Clickjacking
A UI redress attack that tricks users into clicking hidden interface elements by overlaying invisible frames on top of legitimate content.
D
DNS Spoofing
An attack that corrupts DNS records to redirect domain name lookups to malicious IP addresses, sending users to fraudulent websites.
Domain Spoofing
A deception technique where attackers create fake websites or emails using domains that closely mimic legitimate organizations.
DDoS Attack
A distributed denial-of-service attack that floods a target with massive traffic from multiple sources to overwhelm and disrupt services.
Drive-By Download
A malware delivery method where malicious software is automatically downloaded to a device simply by visiting a compromised website.
M
Man-in-the-Middle Attack
An attack where a threat actor secretly intercepts and potentially alters communication between two parties who believe they are communicating directly.
Malware
Any malicious software intentionally designed to damage, disrupt, or gain unauthorized access to computer systems and networks.
P
S
Spear Phishing
A targeted phishing attack directed at specific individuals or organizations using personalized information to increase credibility.
Smishing
Phishing attacks delivered via SMS text messages, tricking recipients into clicking malicious links or sharing personal information.
Social Engineering
Psychological manipulation techniques used to trick people into divulging confidential information or performing security-compromising actions.
SQL Injection
A code injection attack that exploits vulnerabilities in web applications to execute malicious SQL queries against backend databases.
SSL Stripping
A man-in-the-middle technique that downgrades secure HTTPS connections to unencrypted HTTP, exposing sensitive data in transit.
Session Hijacking
An attack where a threat actor takes over an active user session by stealing or predicting a valid session token or cookie.
Supply Chain Attack
An attack targeting the less-secure elements of a supply chain to compromise the final product or service delivered to end users.