Cyber Security

Asset: A resource of value such as the data in a database or on the file system, or a system resource:

Vulnerability is a weakness that makes a threat possible, like a weak password, which leads to threats

Threat is any potential occurrence, malicious or otherwise, that could harm an asset. In other words, a threat is any bad thing that can happen to your assets.

Attack is an action that exploits a vulnerability or enacts a threat. 

Countermeasure. A safeguard that addresses a threat and mitigates risk

CSRF: Cross-Site Request Forgery is an attack where a malicious site sends a request to a vulnerable site where the user is currently logged in. 

Hijacking: To steal something from the client or the server 

Phishing

Malware

Ransomware: Encrypts data and demands ransom, you should have Backups, EDR, least privilege, behavior-based detection

Spyware is a type of malicious software that secretly monitors and collects data from a user's device without their knowledge or consent.

Spoofing: Impersonation (IP, email, DNS, etc.), you should have SSL/TLS, SPF/DKIM/DMARC, DNSSEC

Botnet: Network of compromised devices used for attacks, you should have Network monitoring, firewalls, and IoT security controls

Rootkit: Malware that hides in the system/root level, you should have Kernel-level protection, file integrity monitoring

Social Engineering: Manipulating people to leak confidential data, you should have Employee training, verification procedures, and phishing simulations

APT: Advanced Persistent Threat — long-term, stealthy attack, you should use Network segmentation, anomaly detection, threat hunting

Zero Day: Unknown vulnerabilities that developers or users are not aware, so defense is not effective