🛡️🔥 Cybersecurity Terms Every Beginner Should Know — Part 3

1. Attack Vector 🎯 — The method or path an attacker uses to gain access to a target.

2. Threat ⚠️ — Anything that has the potential to cause harm to a system, network, or data.

3. Risk 📊 — The potential for a threat to cause harm by exploiting a vulnerability.

4. Security Control 🛡️ — A measure used to prevent, detect, or reduce security risks.

5. Access Control 🔐 — Rules and mechanisms that determine who can access resources.

6. Privilege Escalation ⬆️ — Gaining higher permissions than originally authorized.

7. Lateral Movement ↔️ — An attacker's movement between systems after gaining an initial foothold.

8. Data Breach 🚨 — An incident in which sensitive or protected information is accessed or disclosed without authorization.

9. Data Exfiltration 📤 — Unauthorized removal or transfer of data from a system or network.

10. Incident 🚨 — An event that threatens or violates the security of systems, data, or services.

11. Incident Response 🧯 — The process of detecting, containing, investigating, and recovering from security incidents.

12. Forensics 🔎 — The collection and analysis of digital evidence to understand what happened.

13. Sandbox 🧪 — An isolated environment used to safely test or analyze software and behavior.

14. IOC (Indicator of Compromise) 🔍 — Evidence that may indicate a system has been compromised.

15. TTPs 🧠 — Tactics, Techniques, and Procedures describing how threat actors operate.

16. CVE 🆔 — A standardized identifier assigned to a publicly known cybersecurity vulnerability.

17. CVSS 📈 — A scoring system used to communicate the severity of security vulnerabilities.

18. Security Baseline 📋 — A defined set of minimum security configurations and requirements.

19. Hardening 🔒 — Strengthening a system by reducing unnecessary features, services, permissions, and weaknesses.

20. Defense in Depth 🧱 — Using multiple layers of security so one failed control doesn't expose everything.

💡 Double Tap ❤️ For More