Security words, explained
Short, plain-English definitions of the terms that keep showing up in website, email and AI security.
AI agent
A tool that helps you manage tasks using artificial intelligence.
GLOSSARYAI-generated deepfake
A realistic fake video or audio made by artificial intelligence that can deceive people.
GLOSSARYBackdoor
A hidden way for attackers to access your system without normal authentication.
GLOSSARYBotnet
A network of infected computers controlled by a hacker to carry out attacks.
GLOSSARYBrute force attack
A brute force attack tries many passwords until it finds the right one.
GLOSSARYBusiness email compromise
A scam targeting businesses through fake emails requesting money or data.
GLOSSARYContent Security Policy
A simple way to stop bad code from running on your website and protect your users.
GLOSSARYCredential stuffing
Credential stuffing is when hackers use stolen login details to access accounts.
GLOSSARYCross-site scripting
A type of web attack that lets hackers inject malicious code into websites.
GLOSSARYData breach
A data breach is when sensitive information is exposed or stolen.
GLOSSARYData exfiltration
Data exfiltration is when attackers steal data from your network secretly.
GLOSSARYData leakage risk
A risk of sensitive information being exposed to unauthorized parties.
GLOSSARYDDoS attack
A flood of traffic that crashes a website or service, often used to disrupt operations.
GLOSSARYDeepfake audio spoofing
Deepfake audio spoofing is when scammers use AI to mimic a person's voice in calls to trick people into sharing sensitive information.
GLOSSARYDKIM
A way to verify emails are genuine and not altered in transit.
GLOSSARYDMARC
A simple way to stop fake emails from your domain and protect your customers.
GLOSSARYDNS
DNS translates website names into IP addresses. Understand how it works and how to protect it.
GLOSSARYEmail encryption
Email encryption protects your messages by making them unreadable to anyone except the intended recipient.
GLOSSARYEmail header forgery
Email header forgery is when attackers alter email headers to trick recipients into thinking a message came from a trusted source.
GLOSSARYEmail header spoofing
Spoofing an email header to make it look like it came from someone else.
GLOSSARYEncryption
A method to protect data by making it unreadable without a key.
GLOSSARYFirewall
A firewall is a tool that stops unwanted traffic from reaching your computer or website.
GLOSSARYHTTP security headers
HTTP security headers help protect your website from common web attacks.
GLOSSARYLeast privilege
A simple way to protect your data by limiting access to only what's needed.
GLOSSARYMalicious botnet
A network of infected devices used to carry out cyber attacks.
GLOSSARYMalware
Malware is harmful software that can damage your computer or steal your data.
GLOSSARYMan-in-the-middle attack
A type of cyber attack where an attacker intercepts and possibly alters communication between two parties.
GLOSSARYMulti-factor fatigue
Multi-factor fatigue is when users get tired of constantly verifying their identity with multiple security steps.
GLOSSARYPassword manager
A tool that helps you store and manage passwords securely, reducing the risk of account breaches.
GLOSSARYPassword reuse risk
The danger of using the same password across multiple accounts.
GLOSSARYPasswordless authentication
A way to log in without using a password, making it safer and easier.
GLOSSARYPasswordless login
A way to log in without using a password, making accounts more secure.
GLOSSARYPatch
A fix for a security flaw in software or systems, helping keep your data safe.
GLOSSARYPenetration test
A test to find security weaknesses in your systems and help protect them.
GLOSSARYPhishing
Phishing is when attackers trick people into giving away sensitive information through fake emails or websites.
GLOSSARYPhishing payload
A harmful file or link sent in a phishing attack to steal data or infect devices.
GLOSSARYPhishing simulation
Practice detecting fake emails to protect your business and improve team awareness.
GLOSSARYPrompt injection
How scammers can trick AI models into producing harmful content.
GLOSSARYRansomware
Ransomware is a type of malware that locks your data and demands payment to unlock it.
GLOSSARYScam detection threshold
A simple guide to understanding how systems spot scams and set their alert levels.
GLOSSARYSecond-factor authentication fatigue
A common term in web security describing user exhaustion from too many login prompts that weakens overall account protection.
GLOSSARYSecure API endpoint
A protected interface that allows safe data exchange between software systems while preventing unauthorized access and attacks.
GLOSSARYSecure coding practice
A way to write code that protects your website and data from hackers.
GLOSSARYSecure multi-party computation
A way to process data without revealing sensitive information.
GLOSSARYSingle sign-on
A method that lets you log in once and access multiple services securely.
GLOSSARYSocial engineering
Understanding how scammers trick people into giving away sensitive information.
GLOSSARYSpear phishing
A targeted scam that uses personal info to trick someone into giving away sensitive data.
GLOSSARYSPF record
A simple way to stop fake emails from your domain by verifying sending servers.
GLOSSARYSpyware
Spyware is software that secretly monitors your activity without your consent.
GLOSSARYSQL injection
A dangerous attack that lets hackers steal data from your website's database.
GLOSSARYSSL certificate
A digital certificate that encrypts data between a website and its visitors.
GLOSSARYSupply chain attack
A supply chain attack is when hackers target a trusted third-party service to access your data or systems.
GLOSSARYTLS
TLS is the secure protocol that protects data sent between your browser and a website.
GLOSSARYTwo-factor authentication
A simple way to make your accounts safer with two steps of verification.
GLOSSARYTyposquatting
Typosquatting is when attackers register domains that are similar to real ones to trick users.
GLOSSARYVPN
A virtual private network keeps your internet traffic private and secure.
GLOSSARYVulnerability scan
A tool to find security weaknesses in your website or app, helping you fix them before hackers do.
GLOSSARYWeb application firewall
A tool that blocks harmful traffic to your website and helps prevent data breaches.
GLOSSARYWebsite scraping bot
A bot that automatically collects data from websites, often used for both legitimate and harmful purposes.
GLOSSARYZero-day
A vulnerability in software that attackers can exploit before developers know about it.