Cybersecurity Glossary
Your guide to understanding social engineering threats, email security protocols, regulatory frameworks, and workforce risk management concepts.
Showing 30 of 30 terms
Adware
Malicious software that automatically displays or downloads advertisements to generate revenue, often tracking user browsing habits without consent.
Business Email Compromise (BEC)
A targeted scam where cybercriminals impersonate corporate executives, vendors, or trusted contacts to trick employees into transferring funds or sharing confidential information.
Compliance Training
Education programs designed to ensure employees understand and adhere to legal frameworks, privacy laws, and corporate regulations such as GDPR, HIPAA, and India's DPDP Act.
Deepfake
Synthesized media (video, audio, or images) generated using deep learning AI to convincingly impersonate a real person's voice or appearance, frequently deployed in vishing.
Encryption
The process of converting information or data into a code, especially to prevent unauthorized access.
Firewall
A network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules.
Gamified Microlearning
Educational approach using interactive mini-games, milestones, and XP/points to increase training completion rates and improve information recall.
Human Risk Management (HRM)
A strategic cybersecurity framework focused on identifying, monitoring, and reducing human-centric security risks through tracking behaviors, reporting, and tailored training.
InSAT (Innvikta Security Awareness Training)
Innvikta's core security awareness training platform, utilizing microlearning, story-driven modules, and gamification to build everyday secure workforce behaviors.
Jailbreaking
The privilege escalation process of removing software restrictions imposed by the manufacturer on iOS, iPadOS, tvOS, and watchOS devices.
Keylogger
A type of surveillance software or spyware that has the capability to record every keystroke you make to a log file, often to steal credentials.
Logic Bomb
A piece of code intentionally inserted into a software system that will set off a malicious function when specified conditions are met.
Multi-Factor Authentication (MFA)
A security protocol requiring users to provide two or more distinct verification factors to gain access to an account, greatly reducing credential theft risk.
Network Security
The practice of securing a computer network from intruders, whether targeted attackers or opportunistic malware.
OWASP
An international non-profit organization dedicated to web application security, known for the OWASP Top 10 list of critical web vulnerabilities.
Phishing
The practice of sending fraudulent messages, often impersonating reputable organizations, to trick individuals into disclosing credentials, financial details, or downloading malware.
QR Code Phishing (Quishing)
A phishing attack vector where the credential-harvesting link is embedded inside a QR code, successfully hiding the URL from traditional email filters.
Ransomware
Malicious software that encrypts files and systems, demanding a ransom payment from the victim in exchange for the decryption key.
Smishing
Social engineering attacks conducted via Short Message Service (SMS) text messages, prompting targets to click malicious links or share data.
SOC 2 Compliance
A voluntary auditing standard verifying that service providers manage customer data securely, protecting privacy, confidentiality, and processing integrity.
Spearphishing
A highly targeted phishing campaign using specific personal or corporate details about the target victim to maximize the rate of successful deception.
SPF (Sender Policy Framework)
An email validation system that allows domain owners to publish a list of IP addresses or subnets authorized to send emails on their domain's behalf.
Trojan Horse
A type of malicious code or software that looks legitimate but can take control of your computer, designed to damage, disrupt, or steal data.
URL Phishing
A phishing attack where the threat actor uses a disguised or malicious link to trick the victim into visiting a fake website and revealing credentials.
Vishing
Voice-based phishing where cybercriminals use phone calls, voice cloning, or robocalls to impersonate trusted entities and steal personal or organizational data.
Workforce Maturity Level
A metric-driven scale measuring an organization's overall human security posture, ranging from initial compliance checkbox to fully security-driven culture.
XSS (Cross-Site Scripting)
A vulnerability where an attacker injects malicious scripts into trusted websites, which are then executed by unsuspecting visitors' browsers.
Yearly Security Awareness Auditing
A comprehensive yearly evaluation of an organization's security posture, employee completion rates, and simulation performance metrics.
Zero-Day Exploit
A cyberattack targeting a software vulnerability that is completely unknown to the vendor, leaving the system exposed before a security patch can be released.
Ready to Test Your Workforce?
Run safe simulations and turn risky behaviour into measurable learning.
