The CyberSecureFox cybersecurity glossary explains the terms you meet in our news and analysis – from malware types and attack techniques to network protocols and security technologies. Every entry starts with a short definition, then explains how it works, why it matters for security and how to protect yourself.
Terms are also highlighted in our articles: hover over or tap an underlined word to see its definition. The glossary is maintained by the CyberSecureFox editorial team and is available in English, German, Spanish, Ukrainian and Russian.
Search:
Clear
- 2FA
- 3G
- 4G
- 419 Scam
- Abuse
- Active Directory
- Ad Blocker
- Address Space Layout Randomization (ASLR)
- Ad Fraud
- Administrator
- Advanced Encryption Standard (AES)
- Advanced Persistent Threat
- Adware
- AES
- Air Gap
- Allowlist
- Antivirus
- API
- Application Programming Interface
- ASLR
- Attack Surface
- Attack Vector
- Authentication
- Authorization
- Backdoor
- Banking Trojan
- Behavioral Analysis
- BGP
- Black Hat Hacker
- Blockchain
- Bluetooth
- Bootkit
- Border Gateway Protocol (BGP)
- Botnet
- Bring Your Own Device (BYOD)
- Browser Fingerprinting
- Brute Force
- Buffer Overflow
- Bug Bounty
- Bulletproof Hosting
- Business Email Compromise
- BYOD
- CAPTCHA
- Carding
- Card Skimming
- CDN
- Certificate Authorities
- Cipher
- Clickjacking
- Cloud
- Code Injection
- Command and Control Server
- Common Vulnerability Scoring System
- Content Delivery Network (CDN)
- Content Security Policy (CSP)
- Crack
- Credential Stuffing
- Cross-Site Request Forgery
- Cross-Site Scripting
- Cryptocurrency
- Cryptography
- Cryptojacking
- Crypto Wallet
- CSRF
- CVSS
- Cyberattack Attribution
- Cybercrime
- Cybersquatting
- Dark Web
- Data Backup
- Data Loss Prevention
- DDoS
- DDoS Amplification Attack
- DDoS Attack
- Deepfake
- Deep Web
- Demilitarized Zone (DMZ)
- Deserialization
- DevSecOps
- Dictionary Attack
- Diffie–Hellman Key Exchange
- Digital Certificate
- Digital Footprint
- Digital Signature
- Directory Traversal
- DLL Hijacking
- DLL Sideloading
- DLP
- DMZ
- DNS
- DNS Cache Poisoning
- DNS Hijacking
- DNS over HTTPS (DoH)
- Domain Controller
- Domain Hijacking
- Domain Name System (DNS)
- Downgrade Attack
- Doxing
- Drive-by Download
- Dropper
- E2EE
- EDR
- Email Spoofing
- Encryption
- Encryption Key
- Endpoint Detection and Response
- End-to-End Encryption
- Exploit
- Exploited in the Wild
- Exploit Kit
- Extended Detection and Response
- False Positive
- Fileless Malware
- Firewall
- Firmware
- Formjacking
- Full Disk Encryption
- Fuzzing
- GDPR
- General Data Protection Regulation (GDPR)
- Global Positioning System
- GPS
- Hacker
- Hacktivism
- Hash
- Heuristic Analysis
- Honeypot
- HTTP
- HTTP Cookie
- HTTPS
- HyperText Transfer Protocol
- Hypervisor
- Identity Theft
- IDN Homograph Attack
- Incident Response
- Indicator of Compromise
- Infostealer
- Insider Threat
- Internet of Things (IoT)
- Intrusion Detection System
- Intrusion Prevention System
- IoT
- IP Address
- Jailbreak
- JavaScript
- Kerberos
- Kernel
- Keylogger
- Kill Chain
- Lateral Movement
- LDAP
- Lightweight Directory Access Protocol (LDAP)
- Living off the Land
- LotL
- MaaS
- Macro Malware
- Malvertising
- Malware
- Malware-as-a-Service (MaaS)
- Malware Loader
- Managed Detection and Response (MDR)
- Man-in-the-Middle Attack
- MDM
- MDR
- MitM
- MITRE ATT&CK
- Mobile Device Management (MDM)
- Money Mule
- Near Field Communication (NFC)
- .NET
- NFC
- Notarization
- Obfuscation
- Object Linking and Embedding
- OLE
- One-Time Password
- Open Source Intelligence
- Operational Security (OPSEC)
- OPSEC
- OSINT
- OTP
- Overlay Attack
- Packer
- Pass-the-Hash
- Patch Management
- Payload
- Penetration Testing
- Persistence
- Personally Identifiable Information (PII)
- Phishing
- Pig Butchering Scam
- PII
- PoC
- Polymorphic Malware
- Port Scanning
- Post-Quantum Cryptography
- Potentially Unwanted Program (PUP)
- PQC
- Pretexting
- Principle of Least Privilege
- Privilege Escalation
- Process Injection
- Proof of Concept
- Proxy Server
- PtH
- Public-Key Cryptography
- PUP
- RaaS
- Race Condition
- Rainbow Table
- Ransomware
- Ransomware as a Service
- RAT
- RCE
- RDP
- Remote Access Trojan
- Remote Code Execution
- Remote Desktop Protocol
- Remote Monitoring and Management (RMM) Tools
- Replay Attack
- Reverse Engineering
- Reverse Shell
- RMM
- Rootkit
- RSA Encryption
- Salt
- Samba
- Sandbox
- Sandbox Escape
- Scareware
- Script Kiddie
- Secure Shell (SSH)
- Security Information and Event Management
- Security Operations Center
- Security Orchestration, Automation and Response (SOAR)
- Security Through Obscurity
- SEO Poisoning
- Server-Side Request Forgery
- Session Hijacking
- Side-Channel Attack
- SIEM
- Signature-Based Detection
- SIM Swapping
- Single Sign-On
- Sinkholing
- Smishing
- Social Engineering
- Spam
- Spear Phishing
- Spoofing
- Spyware
- SQLi
- SQL Injection
- SS7 Attack
- SSH
- SSO
- SSRF
- Stalkerware
- Steganography
- Supply Chain Attack
- Symbolic Link
- Symmetric Encryption
- Tech Support Scam
- Telnet
- Threat Hunting
- Threat Intelligence
- TLS
- Tor
- TPM
- Transport Layer Security (TLS)
- Trojan
- Trusted Platform Module (TPM)
- Two-Factor Authentication
- Typosquatting
- UAC
- UAF
- UEBA
- UEFI
- Unified Extensible Firmware Interface (UEFI)
- Use-After-Free
- User Account Control (UAC)
- User and Entity Behavior Analytics (UEBA)
- VBScript
- Virtual Machine
- Virtual Private Network
- Virus
- Vishing
- VPN
- Vulnerability
- Watering Hole Attack
- Web Scraping
- Web Shell
- Website Defacement
- White Hat Hacker
- Wi-Fi
- Wi-Fi Protected Access (WPA)
- Windows Registry
- Wiper
- Worm
- WPA
- XDR
- XML External Entity (XXE) Injection
- XSS
- XXE
- YARA
- YARA Rules
- Zero-Day Exploit
- Zero Trust
- Zombie
