There are two types of encryption in cybersecurity: symmetric and asymmetric. Symmetric encryption is where the same key is used to encrypt and decrypt the data. This is the most common type of encryption. Asymmetric encryption is where two different keys are used to encrypt and decrypt the data. This

A VPN, or Virtual Private Network, is a private network that encrypts and transmits data while it travels from one place to another. A VPN secures data by encapsulating it in an encrypted tunnel. This tunnel is created by a VPN server at one end and a VPN client at

Access control lists (ACLs) are a type of security measure that can be used to control access to resources on a computer network. They are typically used to control access to files, directories, and other resources on a server.ACLs can be used to allow or deny access to a

Encryption is a technique used to protect data or communication from unauthorized access. Encryption converts data into a format that is unreadable by anyone who does not have the key to convert it back into its original form.

There are several types of password attacks, including brute force, dictionary, and hybrid attacks. A brute force attack is a type of password attack that involves trying every possible combination of characters until the correct password is found. A dictionary attack is a type of password attack that involves trying

A logic bomb is a piece of code that is inserted into a software program with the intention of causing damage or disrupting the normal operation of the program. When the conditions specified in the code are met, the logic bomb is triggered and can cause serious damage. Time and

An evil twin is a type of cyberattack where an attacker creates a replica of a legitimate wireless access point/wifi and uses it to trick victims into connecting to it. The attacker can then intercept and eavesdrop on the victim's traffic. Examples, where evil twins might exist, are restaurants,

The term privilege escalation describes a situation where a user gains access to resources or information that they are not normally allowed to access. This can happen when a user is given more privileges than they need, when a user finds a way to bypass security controls, or when a

Ransomware is a type of malware that you may download from an infected email, website, or USB. Ransomeware encrypts up your hard drive and files and demands a ransom. The ransom might be paid in the form of cryptocurrency or a gift card. Some ransomware even impersonates organizations such as

A bad threat actor purchases a domain that is closely related to a popular site/domain and purposely makes a clone of the site. Visiting this site might reveal your privat data and information.

Shoulder surfing is a technique used by bad threat actors to look over your shoulder to see sensitive information/data.

The CIA Triad is a common model used when developing security systems. It stands for: Confidentiality, Integrity and Availibility. Confidentiality means to keep something hidden or secret, Integrity is making sure that data has not been changed, deleted or tampered with, and Availibility is to make data availible anytime anywhere.

A bad threat actor might look through your or an organization's trash before conducting an attack. Dumpster diving is a form of recon as it helps gather information about a target. Make sure to dispose of documents properly before throwing them in the trash or just install a lock in

Whaling is the term used when a bad threat actor is targetting the upper echelon group of an organization. The bad threat actor then proceeds to execute his plans by either doing phishing attacks or smishing attacks, etc.

Social engineering is how bad threat actors exploit human nature for their own benefit. For example, a bad threat actor might dress up as a firefighter and gain access to a building under the pretext of  "just checking for a gas leak". Phishing can also be in a form of

Phishing attack targetted against one person, usually an upper echelon personell. It could come in many forms such as banks, invoices, a friend, etc.

Smishing is a form of phishing but via SMS, a bad threat actor sends you a text message with a link and if you tap on the link it directs you to a  site that steals your personal information.

The zero trust model is a strategic approach to the cybersecurity standpoint of an organization, it evolves around the idea of not trusting anything, anyone, and assuming that the security plans you have implemented have vulnerabilities or have been breached already. Basically, it is a way of thinking to stay

A bad threat actor sends you an email containing an infected site attachment inside the email, and if you click the site it downloads Malware (Malicious Software) on your computer.

3rd layer of cybersecurity is the administrative layer. This layer is implemented by an administrater, and the layer includes ACL (Access Control List), AUP (Acceptible Use Policy), password policy, security training, check out policy, and many more.

The logic layer of the security onion. The logical layer comes after the physical layer, if a bad threat actor gets passed the physical layer of an organization they will have to face the logical layer. The logical layer includes IDS (Intrusion Detection System), IPS (Intrusion Prevention System), firewalls, antivirus,

Security in depth is the layers of security an organization takes to stop people from hacking, stealing, intruding, etc. their domain. It is split into 3 layers: physical, logical, and administrative. Physical defense is anything physical that prevents unauthorized people from coming in and out of a facility. This can

Bad threat actors are a person or organizations involved in hacking occurrences. Such examples include government-sponsored hackers. industry hackers, script kiddies, organized crime, hacktivists, and many more. Government Sponsored Hackers typically work with one government to hack into another government and steal info. Industry Hackers are hackers hired by companies

MFA or Multi Factor Authentication is the process of authenticating a person with multiple different ways. What you are: Biometric Where you are: Building you enter What you have: keycard, key, anything you have What you know: passwords, passphrases, anything you know