A secret sequence of characters used to confirm user identity.
Password
The practice of using at least two different verification steps to log into an account.
Multi-Factor Authentication
Using the exact same password across multiple online accounts
Password Reuse
Password Reuse
Fraudulent emails pretending to be trusted entities to steal personal information.
Phising
A malicious program disguised as legitimate, harmless software.
Trojan Hourse
A hardware or software barrier that monitors and filters network traffic.
Firewall

Installing these regularly ensures systems have the latest security fixes.
Patches or Update
Opening unverified links or downloading attachments from unknown senders.
Clicking Suspicious Links
Malicious software that encrypts user files and demands payment to restore access.
Ranmsomwere
Small text files saved on a web browser to track user activity and site preferences.
Cookies![]()
The process of converting readable data into unreadable code to prevent unauthorized access.
Encryption
A secure application used to generate, store, and manage unique credentials
Password Manager
Leaving a workstation unlocked and unattended in an open area.
Unlocked Screen
An attack that floods a server with overwhelming traffic to take it offline.
DDoS
A security specialist who uses hacking skills legally to find and fix vulnerabilities.
White Hat Hacker
duplicate copy of data stored separately for recovery in case of loss.
Backup
An encrypted connection protocol often used to safely browse on public Wi-Fi networks.
VPN
Looking over someone's shoulder to spy on their screen, PIN, or credentials.
Shoulder Surfing
Manipulating people psychologically so they voluntarily reveal confidential information.
Social Engineering
The digital trail of personal data left behind when using the internet.
Digital Footprint
A flaw or weakness in software code that attackers can exploit
Vulnerability
Prompt: The security practice of granting users only the minimum access rights necessary for their tasks.
Principle of Least Privilege
Connecting an unknown, found USB flash drive into a company computer.
Connecting an unknown, found USB flash drive into a company computer.
An attack that exploits a software flaw before the developer has released a patch for it
Zero-Day Exploit
An isolated test environment that allows suspicious files to run without risking the main system.
Sandbox