Vulnerability Management Glossary

An attack vector in information security refers to the path or method that an attacker use...

A software designed to protect computers from malware, spyware, viruses, worms, trojans, r...

Advanced threat protection (ATP) is a solution and methodology that provides real-time sec...

Advanced persistent threat (APT) is a malicious cyber activity designed to gain access to ...

Buffer overflow is a type of software error where an application fails to properly allocat...

A botnet is a network of computers controlled by a single entity

A method of bypassing the security of any device or software

Cybersecurity awareness is the understanding of potential risks and threats to personal or...

Cybersecurity refers to the protection of computer networks and information from unauthori...

A malicious act committed via computer networks, malicious software on devices

Threat intelligence (TI) is the continuous monitoring of potential threats and vulnerabili...

The term describes any event involving malicious computer code or hardware being used to d...

A malicious ransomware program that encrypts files on the infected computer, demanding ran...

Cross-site scripting (XSS) is a type of vulnerability where malicious code is injected int...

Critical infrastructure refers to the physical and virtual systems and assets that are ess...

Continuous security monitoring (CSM) is a process of observing and analyzing an organizati...

CWE stands for Common Weakness Enumeration, and it is a community-developed list of softwa...

A method for measuring the severity of computer security vulnerabilities

A source of information about software vulnerabilities

A command & control (C&C) server is a web server that allows attackers to remotely access ...

An injection of a malicious code (malicious software), which exploits a computer bug that ...

Detection and response in information security refer to the processes and tools used to id...

Distributed denial-of-service (DDoS) attacks involve flooding a target website with traffi...

An exploit kit (also known as a malware kit) is a type of software designed to help cyberc...

In computer science, an exploit is a type of software or specially crafted data designed t...

The Exploit Prediction Scoring System (EPSS) is a framework developed by the United States...

Software designed to protect computers on a network

An incident where information is released without authorization, usually is the loss of co...

A piece of malware that contains its distinctive features, information about itself, its c...

Malware is a term used to refer to malicious software designed to disrupt computer systems...

Malicious code, also known as malware, refers to any code or software that is designed to ...

Phishing is a technique where attackers send malicious links or attachments disguised as t...

A security assessment aimed at identifying vulnerabilities within a system and evaluating ...

Patch management is a process of identifying, acquiring, testing, and deploying software u...

Risk management in information security is the process of identifying, assessing, and miti...

Risk assessment is the process of determining what the potential negative consequences cou...

The term refers to any vulnerability that exposes a target computer system to control over...

A remote access trojan (RAT) is a malware that allows attackers to gain remote access and ...

Ransomware is a type of malicious software that blocks access to data until a ransom is pa...

A supply chain attack is a type of cyberattack that targets the networks and systems of or...

An SQL injection is a type of attack where malicious code is injected into a web applicati...

Spyware is a type of malware that records user activity and sends the information back to ...

Social engineering is the act of manipulating people into providing personal information o...

A security scanner is a type of software tool that scans and analyzes computer systems, ne...

A small software update designed to address a specific vulnerability

SOAR is a technology that helps organizations automate and streamline their security opera...

Usually refers to a cybersecurity team that monitors security events in their respective n...

A solution that provides visibility into events across the entire network

Threat intelligence feeds are sources of information on cybersecurity threats and risks

Threat intelligence is the practice of analyzing data to identify threats and vulnerabilit...

Threat hunting is a proactive approach to cybersecurity that involves actively searching f...

The practice of finding software flaws (also known as vulnerabilities) in computer systems

Vulnerability management (VM) is the practice of identifying vulnerabilities in systems an...

Vulnerability assessment is the process of identifying and evaluating security vulnerabili...

A vulnerability is any weakness in a computer program or system that makes it possible to ...

A security software or device that inspects the requests sent to websites and blocks malic...

A 0-day vulnerability is a type of software vulnerability that is not yet known to the ven...

A zero-day exploit refers to a security vulnerability or weakness in a software or system ...

A zero-day attack is a targeted attack that exploits previously unknown vulnerabilities in...