The CyberSecureFox cybersecurity glossary explains the terms you meet in our news and analysis – from malware types and attack techniques to network protocols and security technologies. Every entry starts with a short definition, then explains how it works, why it matters for security and how to protect yourself.
Terms are also highlighted in our articles: hover over or tap an underlined word to see its definition. The glossary is maintained by the CyberSecureFox editorial team and is available in English, German, Spanish, Ukrainian and Russian.
Search:
Clear
- 2FA
- 3G
- 4G
- 419 Scam
- Abuse
- Active Directory
- Ad Blocker
- Administrator
- Advanced Encryption Standard (AES)
- Advanced Persistent Threat
- AES
- Antivirus
- API
- Application Programming Interface
- Attack Surface
- Attack Vector
- Authentication
- Backdoor
- Banking Trojan
- Blockchain
- Bluetooth
- Botnet
- Brute Force
- Buffer Overflow
- Bug Bounty
- Business Email Compromise
- Certificate Authorities
- Cloud
- Code Injection
- Command and Control Server
- Common Vulnerability Scoring System
- Crack
- Credential Stuffing
- Cross-Site Request Forgery
- Cross-Site Scripting
- Cryptocurrency
- Cryptography
- Cryptojacking
- Crypto Wallet
- CSRF, XSRF
- CVSS
- Cyberattack Attribution
- Cybercrime
- Dark Web
- Data Backup
- Data Loss Prevention
- DDoS
- DDoS Attack
- Deepfake
- Deserialization
- Diffie–Hellman Key Exchange
- Digital Certificate
- Digital Signature
- Directory Traversal
- DLL Sideloading
- DLP
- DNS
- Domain Name System (DNS)
- Dropper
- E2EE
- EDR
- Encryption
- Endpoint Detection and Response
- End-to-End Encryption
- Exploit
- Exploited in the Wild
- Extended Detection and Response
- Fileless Malware
- Firewall
- Firmware
- GDPR
- General Data Protection Regulation (GDPR)
- Global Positioning System
- GPS
- Hacker
- Hash
- Honeypot
- HTTP
- HTTP Cookie
- HTTPS
- HyperText Transfer Protocol
- Identity Theft
- Incident Response
- Indicator of Compromise
- Infostealer
- Insider Threat
- Internet of Things (IoT)
- Intrusion Detection System
- Intrusion Prevention System
- IoT
- IP Address
- JavaScript
- Kerberos
- Kernel
- Keylogger
- Kill Chain
- Lateral Movement
- Living off the Land
- LotL
- Malvertising
- Malware
- Malware Loader
- Man-in-the-Middle Attack
- MDM
- MitM, AiTM
- MITRE ATT&CK
- Mobile Device Management (MDM)
- .NET
- Notarization
- Obfuscation
- Object Linking and Embedding
- OLE
- One-Time Password
- Open Source Intelligence
- Operational Security (OPSEC)
- OPSEC
- OSINT
- OTP
- Packer
- Patch Management
- Payload
- Penetration Testing
- Persistence
- Personally Identifiable Information (PII)
- Phishing
- PII
- PoC
- Principle of Least Privilege
- Privilege Escalation
- Proof of Concept
- Proxy Server
- Public-Key Cryptography
- RaaS
- Race Condition
- Ransomware
- Ransomware as a Service
- RAT
- RCE
- RDP
- Remote Access Trojan
- Remote Code Execution
- Remote Desktop Protocol
- Reverse Engineering
- Rootkit
- Salt
- Samba
- Sandbox
- Secure Shell (SSH)
- Security Information and Event Management
- Security Operations Center
- Server-Side Request Forgery
- Session Hijacking
- Side-Channel Attack
- SIEM
- Signature-Based Detection
- Single Sign-On
- Smishing
- Social Engineering
- Spam
- Spear Phishing
- Spoofing
- Spyware
- SQLi
- SQL Injection
- SSH
- SSO
- SSRF
- Supply Chain Attack
- Threat Hunting
- Threat Intelligence
- TLS, SSL
- TPM
- Transport Layer Security (TLS)
- Trojan
- Trusted Platform Module (TPM)
- Two-Factor Authentication
- Typosquatting
- UAF
- Use-After-Free
- Virtual Private Network
- Virus
- Vishing
- VPN
- Vulnerability
- Web Shell
- Wi-Fi
- Wiper
- Worm
- XDR
- XSS
- Zero-Day Exploit
- Zero Trust
- Zombie
