DNS sinkhole
DNS sinkhole is a concept or mechanism used in cybersecurity to redirigate some malicious domains to a controlled target.
View definitionClear, practical definitions to understand network, security, systems and IT vocabulary.
DNS sinkhole is a concept or mechanism used in cybersecurity to redirigate some malicious domains to a controlled target.
View definitionDouble extortion ransomware combines data encryption with threats to disclose stolen information unless a ransom is paid.
View definitionA detection and response solution that continuously monitors the activity of the posts and servers.
View definitionAn email security gateway inspects incoming and outgoing messages to detect malware, phishing, spam, and policy violations.
View definitionUnderstand encryption, ciphertext, symmetric and asymmetric keys, and how encryption differs from hashing and backup.
View definitionAn exploit uses a software or hardware vulnerability to cause behavior outside the system's intended security boundaries.
View definitionAn exploit kit automates delivery of attacks against vulnerable applications, often through compromised or malicious websites.
View definitionExposure management continuously discovers, prioritizes, and reduces weaknesses across systems and external services.
View definitionEASM discovers internet-facing assets and misconfigurations that could expose an organization to attackers.
View definitionFileless malware uses legitimate system tools or memory-resident execution to reduce reliance on executable files on disk.
View definitionA firewall filters network communications using security rules that allow or block traffic based on its characteristics.
View definitionUnderstand cryptographic hashes, integrity checks and password hashing, including why a digest is not encrypted data.
View definitionITDR monitors identity-related activity to detect, investigate, and respond to account compromise and directory attacks.
View definitionA system that detects suspicious network or system activities without necessarily blocking them.
View definitionIOA is a concept or mechanism used in cybersecurity to describe suspicious behaviour or action rather than a fixed artifact
View definitionAn observed indicator that may indicate compromise.
View definitionA system of prevention capable of blocking traffic identified as malicious.
View definitionA Kubernetes admission controller validates or modifies API requests before cluster objects are persisted.
View definitionKSPM continuously assesses Kubernetes clusters against security configuration and compliance requirements.
View definitionThe movement of an attacker from a compromised machine or account to other network resources.
View definitionThe principle of giving only the necessary rights for the necessary period.
View definitionLiving off the land describes attackers abusing legitimate administrative tools to perform malicious actions.
View definitionLOLBins are legitimate system executables that attackers may misuse for execution, persistence, or evasion.
View definitionMultifactor authentication (MFA) verifies identity using at least two distinct factor categories, improving account protection.
View definition