IT vocabulary
A software program designed to infiltrate or damage a computer system without the owner's informed consent
Malware
This authentication method requires two different factors to verify a user's identity before granting access.
Multi-Factor Authentication or 2FA
A malicious attack where scammers send fraudulent emails to trick individuals into revealing sensitive credentials.
Phishing
Using "password123" or using the exact same password across multiple websites.
Password reuse
Malicious software that hides inside a seemingly harmless program or file to trick users into installing it.
Trojan horse
The practice of protecting systems, networks, and programs from digital attacks.
Cybersecurity
You should do this regularly to your important data to ensure you don't lose it during a ransomware attack.
Backing up data
A type of malware that threatens to publish the victim's personal data or perpetually block access to it unless a fee is paid.
Ransomware
Downloading files, movies, or games from untrusted peer-to-peer torrent sites.
Pirating software / Downloading unverified files
A network security device that monitors and filters incoming and outgoing network traffic based on an organization's previously established security policies
Firewall
A set of rules governing the exchange or transmission of data between devices.
Protocol
A tool that generates and stores strong, unique passwords for all your online accounts.
Password Manager
An attack that attempts to disrupt normal traffic of a targeted server by overwhelming it with a flood of internet traffic from multiple sources.
DDoS (Distributed Denial of Service) attack
Clicking on links or downloading attachments inside an unexpected, urgent email from an unknown sender.
Opening suspicious links/attachments
The psychological manipulation of people into performing actions or divulging confidential information.
Social Engineering
The process of converting information or data into a code, especially to prevent unauthorized access
Encryption
This type of software should always be kept up-to-date to protect your operating system from newly discovered bugs and vulnerabilities.
Antivirus
An attack where a malicious actor inserts themselves into a conversation between two parties to secretly intercept data.
Man-in-the-Middle (MitM) attack
Leaving your workstation unlocked and unattended in a public place or open office.
Poor physical security
A network of private computers infected with malicious software and controlled as a group without the owners' knowledge, often used to launch DDoS attacks.
Botnet
A vulnerability in a software application that is unknown to the vendor and is exploited before a patch is available.
Zero-day exploit
A secure tunnel over the internet that hides your IP address and encrypts your internet traffic, especially on public Wi-Fi.
VPN
A highly targeted phishing attack aimed at a specific individual or organization, often customized with personal details.
Spear Phishing
Sharing sensitive corporate or personal identifying details publicly on social media platforms like LinkedIn or Instagram
Oversharing online (or Social Engineering exposure)
Ethical hackers who use their skills legally to find vulnerabilities in a system before malicious hackers can exploit them
White Hat Hacker