Cybersecurity Glossary

Cybersecurity: Lexicon and Glossary

From A for APT to Z for Zero-Day

IT security is a complex topic - especially when you are given the task of familiarizing yourself with this topic in order to make your own company more resilient against cyber attacks. To offer some assistance here, we have created a comprehensive lexicon and glossary in which we explain the most important IT security terms.

From A for Advanced Persistent Threat to Z for Zero-Day-Exploit - in our glossary you will find all the important terms, definitions and explanations you need to find your way around the world of IT security. If something is missing: write to us!

100+
Terms
A-Z
Categories
24/7
Available
Cybersecurity Glossary
Understandable
Simply explained
Current
Regularly updated
Thematic navigation

Explore by knowledge area

Each overview introduces a subject and points to its detailed concepts, attack techniques and vulnerabilities. Every entry remains available in the alphabetical index below.

Vulnerabilities and weakness types API and application security Identity and Access Management Software supply chain Malware and post-exploitation Penetration testing and red teaming ISMS, standards and regulation Phishing and social engineering Attack surface and asset discovery

#

2FA

A

Active Directory Account Enumeration API APT ASN Assume Breach Attack Surface

B

Backdoor Backup Beacon Biometric authentication Black-Box-Pentest Black Hat-Hacker Blended Attack Bot Broken Access Control Business Logic Vulnerabilities Brute Force Attack BSI IT-Grundschutz Bug Bounty Program

C

Capture the Flag (CTF) Clickjacking CIA Triad CISA KEV Catalog CIDR CIS Controls Command Injection Content Security Policy (CSP) CORS Misconfiguration Credential Stuffing Critical Infrastructure (KRITIS) Cross-Site Scripting (XSS) Cross-Site Request Forgery (CSRF) CSIRT CT Logs CVE CVSS CWE Cybercrime Cyberterrorism Cyber Resilience Act (CRA)

D

Darknet Data exfiltration Deep Fake Denial of Service (DoS) Dependency Confusion Digital Health Application (DiGA) DIN EN IEC 81001-5-1 DIN SPEC 27076 Domain Squatting DORA

E

eASM EPSS Ethical Hacking Exploit

F

FINMA-RS File Upload Vulnerabilities

G

GDPR Grey-Box-Pentest GraphQL

H

Hacker Hacktivism HIPAA Host Header Injection HTTP Request Smuggling

I

IDOR Identity and Access Management (IAM) IEC 62443 Information Security Management System (ISMS) Infostealer Insecure Deserialization ISO/IEC 27001 IT Asset Management IT Baseline Protection IT Security Check

J

JSON Web Token (JWT)

K

Keylogger Kerberoasting

L

Lateral Movement Living off the Land LDAP LDAP Injection Load Balancing Local File Inclusion (LFI)

M

Malware Mass Assignment Man-in-the-Middle Attack MaRisk MITRE ATT&CK Microsoft Entra ID Mobile Application Penetration Testing MSSP Multi-Factor Authentication (MFA)

N

Network Segmentation NIS2 NoSQL Injection

O

Open Redirect OAuth 2.0 and OpenID Connect Open Source Intelligence (OSINT) OWASP ÖNORM A7700

P

Password Policy Passkeys, WebAuthn and FIDO2 Path Traversal PCI DSS Penetration testing Pharming Phishing Portscan Privilege Escalation Prompt Injection Prototype Pollution Purple Team

R

Race Condition Ransomware Rate Limiting Red Teaming Remote Code Execution (RCE) Remote File Inclusion (RFI) Reverse Shell

S

Salting SAML SBOM Scope Security by Obscurity Secrets Management Security Operations Center (SOC) Server-Side Request Forgery (SSRF) Server-Side Template Injection (SSTI) Shadow-IT SIEM Session Fixation Session Hijacking Session Management Smishing SOC 2 Social Engineering Software Supply Chain Attack Spear Phishing Spoofing SQL Injection SSL/TLS Subdomain Enumeration Subdomain Takeover

T

Tailgating Threat Intelligence Platform (TIP) Threat Modeling TIBER-EU

V

Vishing Vulnerability Vulnerability Assessment Vulnerability Disclosure Program Vulnerability Scanner

W

Web Application Firewall (WAF) Web Cache Poisoning WebSockets Whaling White-Box-Pentest White Hat-Hacker

X

XML External Entity (XXE) XML Signature Wrapping

Z

Zero-Day-Exploit Zero Trust
Damian Strobel

Have we forgotten something? Is a term missing? Tell us and we'll add it!

Damian Strobel - CEO

Get in touch