The CIA triad is the core security model in cybersecurity, defining protection goals as confidentiality, integrity and availability of information.
Containment in incident response is the phase that limits how far an attack spreads and how much damage it causes while evidence…
Credential stuffing is an automated attack that replays username and password pairs stolen from one breach against login pages of other services.
A cryptographic nonce is a value used only once with a given key or session, keeping ciphertexts distinct and making replayed messages…
CSP (Content Security Policy) is an HTTP response header that tells browsers which scripts, styles and other resources a web page may…
CSRF, cross-site request forgery, tricks a logged-in user's browser into sending unwanted authenticated requests to a web application that trusts it.
CVE (Common Vulnerabilities and Exposures) is the global catalog of unique identifiers for publicly disclosed security vulnerabilities in software and hardware.
CVSS, the Common Vulnerability Scoring System, rates the technical severity of software vulnerabilities on a scale from 0.0 to 10.0 using standard…
CWE (Common Weakness Enumeration) is a cybersecurity catalog of software and hardware weakness types, used to classify the root causes of vulnerabilities.