Glossary of Cybersecurity Terms

Security measures that restrict access to data or systems to authorized individuals only.

Software designed to detect, prevent, and remove malicious software or viruses from a computer.

A UK government-backed certification scheme designed to help businesses protect against common cyber threats.

An incident where sensitive, protected, or confidential data is accessed or disclosed without authorization.

The process of converting data into a secure code to prevent unauthorized access.

A security system that monitors and controls incoming and outgoing network traffic based on predefined security rules.

Malicious software designed to damage, disrupt, or gain unauthorized access to a computer system.

An extra layer of security that requires two or more forms of verification to access an account, such as a password and a code sent to a phone.

A tool that securely stores and manages passwords for various online accounts.

A deceptive attempt to obtain sensitive information by pretending to be a trustworthy entity, typically through email or text.

A type of malware that encrypts files on a device, making them inaccessible until a ransom is paid.

This attack uses text messages to deliver phishing scams. These messages may prompt recipients to click on malicious links or enter personal information. As more employees use mobile devices for work, smishing has gained popularity.

A manipulation technique used to trick individuals into giving away confidential information or performing actions that compromise security.

Phone calls are used to impersonate trusted sources (e.g., IT support or financial institutions). Attackers often request information under the false impression of fixing an issue or verifying account details.

A tool that creates a secure, encrypted connection over the internet, often used to protect data and privacy.

This technique targets senior executives or decision-makers. Attackers impersonate CEOs or CFOs, requesting sensitive information or financial transactions. Because these requests seem to come from high-level executives, employees may be less likely to question them..