الثلاثاء 20 أكتوبر 2026 14:12:03 GMT+02:00
Netcrook
WIKICROOK - A
مصطلحات تقنية
A fasceA tariff model where prices vary by time band or usage period.AAAAuthentication, Authorization, and Auditing, the access-control layer that verifies users and logs activity.AADSTSMicrosoft Entra error code family returned during authentication and token processing failures.AARRRA lifecycle framework covering Acquisition, Activation, Retention, Referral, and Revenue.AbandonmentThe point at which a user stops using a tool after trying it, signaling loss of fit or value.AbandonwareSoftware that is no longer maintained or supported by its original developer.ABAP CloudSAP's modern development model for cloud-ready apps and extensions with stricter code boundaries.ABINBrazil’s intelligence agency, named in the resolution as the central body for monitoring threats.AblationThe removal of material by a focused energy source.Abnormal loginA sign-in pattern that differs from expected behavior and may merit investigation.Absenteeismrepeated absence that can disrupt continuity in learning and practice.Abstraction LayerA software layer that separates application logic from specific model APIs, making replacement easier.Abuse MonitoringA security control that looks for misuse, fraud, or policy violations using prompts, outputs, metadata, or derived signals.Abuse-monitoring logsPlatform logs used for trust-and-safety monitoring and policy enforcement.AbuseFilterA MediaWiki control used to detect or block patterns that look like spam or abuse.AC-3A compressed audio format commonly associated with Dolby Digital playback.Academic integrityThe principle that student work should reflect genuine effort and authorized assistance only.Acceptable use policyRules that define how a platform or service may be used.Accepted domainA domain Microsoft 365 recognizes as belonging to the tenant for mail-flow decisions.Accertamentoan administrative assessment used to verify whether a charge is due.AccessCloudflare’s identity-aware access product for enforcing authentication and policy at the application boundary.Access at the point of needHaving a service available where and when users actually require it.Access boundariescontrols that limit who can reach sensitive records and systems.Access boundarythe point where one system or role should stop seeing data.Access brokerageThe criminal trade of buying, qualifying, and selling footholds inside compromised systems.Access CertificationA recurring review process where access is approved, removed, or left in place based on business need.Access checkA control that verifies whether a user or process is allowed to reach a resource or action.Access civicoA transparency mechanism under Italian law that can be submitted electronically and is subject to procedural and privacy-review steps where applicable.Access claimAn allegation that files or systems were reached without confirmation.Access codeA secret value used to verify identity when logging into an online portal or account system.Access control boundaryA rule or mechanism that separates permitted access from forbidden access.Access credentialsusernames, passwords, or tokens that may let an attacker authenticate to systems.Access databasea Microsoft database format often used for local business records.Access handoffThe moment when verified identity is converted into usable credentials or system access.Access hygienebasic account and privilege discipline that limits misuse of credentials.Access keysCredentials that may unlock cloud or service resources if valid.Access loga record of activity that can help confirm whether a system or file was touched.Access managementControls that decide who can enter systems and use sensitive functions.Access paththe route attackers use to enter or return to a target environment.Access Policy Manager (APM)The F5 BIG-IP module that handles access controls and session decisions.Access recordslogs that help confirm who connected to systems and when.Access Rights ManagerAn enterprise tool for managing, provisioning, and auditing user permissions across connected systems.Access segmentationseparating systems and files so one compromise does not reach everything.Access separationlimiting who can reach sensitive records or functions.Access sessionAn ongoing remote connection used for unattended or recurring administration.Access sprawlexcessive or poorly controlled permissions across accounts, services, or workflows.Access telemetrylogin and session data that can help defenders test whether intrusion actually occurred.Access validationchecking logs and systems to confirm whether unauthorized entry occurred.Access verificationchecking logs and permissions to confirm what actually happened.Access violationA crash condition where a process touches memory it is not allowed to use.Access-control failureA defect where permissions are applied, retained, or revoked incorrectly.Accessibility abuseMisuse of Android accessibility features to observe or manipulate on-screen activity.Accessibility APIAn operating system interface that exposes UI elements to assistive tools and automation.Accessibility AuditA review of a website or app to find barriers that may prevent people from using it effectively.Accessibility automationLegitimate control features that help users operate a device through alternate inputs.Accessibility baselineThe minimum design and testing standard needed for a site to work with assistive technologies.Accessibility optionsSettings that help more players use or adapt a game comfortably.Accessibility permissionsAndroid privileges that let apps observe the interface and perform actions for assistive use cases.Accessibility testingchecking whether a product works for people with disabilities and with assistive tools.Accessibility ToolsGoogle’s classification for apps whose core purpose is disability support, not general automation.Accessibility-first designAn approach that builds usability for people with different abilities into the product from the start.Accessibility-service abuseMisuse of Android accessibility features to gain extra control over device interaction.Accessible by designAn approach that builds accessibility into systems, content, and documents from the start rather than retrofitting it later.Accessory compatibilitywhether add-ons and peripherals continue to work with a product.Accessory validationThe process of checking whether an attached peripheral is recognized and acceptable.Accidental disclosureUnintended release of information to people who were not authorized to see it.Account activitylog evidence that can help confirm whether credentials or sessions were misused.Account activity reviewchecking logins, changes, and unusual access for signs of misuse.Account enforcementActions such as suspension or bans used to stop abuse.Account entitlementthe right of a customer account to access a specific service or feature.Account EnumerationA weakness where responses reveal whether a username or email exists, helping attackers shortlist targets.Account freezeA legal or operational restriction that prevents access to funds or account functions.Account governanceRules and controls that manage how accounts are created, used, and reviewed.Account Owner ModelA setup where one primary account controls administration, recovery, and feature access.Account promptA message asking a user to sign in, confirm, or reset access to an account.Account recovery abuseMisuse of password-reset or identity-verification flows to gain access.Account reviewA defensive check for unusual access, permissions, or login activity.Account SecurityThe controls that protect login access, such as strong passwords and multi-factor authentication.Account stateThe stored data that reflects a user's progress, settings, or status.Account suspensiona restriction that temporarily or permanently blocks access to a platform account.Account telemetrybehavior data that can help spot unusual logins, access, or fraud signals.Account throttlingLimiting signups or actions to slow abuse and contain suspicious activity.Account validationchecking whether user or admin logins show suspicious activity.Account verification portalA secure site where users can sign in directly to confirm whether an account alert is genuine.Account-based accessA system where use is controlled through a user account rather than only through possession of media.Account-based access controla system that grants features only after identity and purchase checks succeed.Account-Based CreditA stored balance tied to a user account that can be redeemed later.Account-connection flowA process where a user authorizes a service or app to link to an existing business account.Account-connection pageA workflow screen that asks a user to link or authorize an account, often resembling a normal business integration step.Account-level credentialA secret that applies broadly across resources in one cloud account rather than to a single narrow action.Account-level riskA security score or judgment based on the behavior of one account alone.Account-linked serviceA feature that works through a signed-in user account and its permissions.Account-Scoped ContextPrivate session data tied to a user account, such as chat history or personalization settings.Account-to-organization conversionA workflow that changes a personal account into an organization account and may alter ownership and access rules.Accountability chainThe series of people, organizations, and controls responsible for a system’s design and use.Accounting boundaryThe defined scope used to decide which systems, processes, or facilities are included in a measurement.Accounting CloseThe process of reconciling and finalizing financial records at the end of a period.Accounts payableThe business process used to receive, validate, and pay supplier invoices.Accounts ReceivableMoney customers owe for products or services already delivered.AccrediaThe Italian accreditation body, named in the draft in connection with CRA-related responsibilities.Accreditation bodyAn organization that evaluates and recognizes the competence of certification bodies.Accumulationbuying activity that increases holdings over time.AcetylcholineA neurotransmitter used by nerve cells to pass signals within the nervous system.ACHThe Automated Clearing House network used for electronic bank transfers, including routine business payments.Achievement setA grouped collection of achievements that can be organized separately from other progress.Achievement systemA platform feature that records milestones and rewards player progress.Acid-freea process that avoids using acid in a treatment or preparation step.ACL (Access Control List)Rules that define which users can run which commands or reach which data.ACN qualificationA provider-eligibility requirement referenced by the Mimit rules for certain public programs, with at least QC1 mentioned in the technical baseline.Acoustic detectionA method of identifying objects by analyzing sound patterns.Acoustic EnvironmentThe real-world sound conditions around a speech system, including noise, echo, and overlapping voices.Acoustic interferenceOverlapping sound waves that make a signal harder to interpret.Acoustic propulsionMotion generated by sound, pressure waves, or airflow rather than conventional motors.Acqui-hirean acquisition made mainly to bring in a team’s skills and operating style, not just its products.AcquisitionA transaction in which one company buys another and takes control of its assets or strategy.ACRAutomatic Content Recognition, a feature used to identify content on a screen.Acting ministerA temporary officeholder who performs the duties of a minister until a permanent appointment is made.Action allowlistA predefined set of actions that software is permitted to perform.Action ProvenanceEvidence showing what action occurred, when it occurred, and how it was authorized.ACTION recordAn internal task format that can turn model output into a queued work item for another component.ActionsAutomated workflows that run tasks such as tests, builds, or checks.Actions workflowAutomated jobs that run after repository events such as pushes or pull request updates.ActivationThe licensing step that confirms software is authorized for use.Activation conditionsThe specific rules that determine whether a customer can subscribe to an offer.Activation costA one-time charge that can raise the real first-month price of a mobile plan.Activation dataProtected material used to unlock or activate signing capability, separate from the private key itself.Activation feeThe one-time cost charged when a mobile service is started or transferred.Activation fraudUnauthorized or deceptive use of software licensing mechanisms to obtain illegitimate activation.Activation LockAn Apple anti-theft feature that helps prevent a lost or stolen device from being reactivated without the owner’s account access.Activation mechanismThe part of a device that determines when it turns on or off.Activation stateThe status that determines whether software considers itself licensed.Active Debug CodeDevelopment or troubleshooting code left reachable in production software.Active Directory (AD)Microsoft directory technology used to manage authentication, authorization, and enterprise identity in many hybrid networks.Active Directory Certificate ServicesMicrosoft’s Windows PKI role for issuing and managing certificates.Active Directory compromisecompromise or takeover of core Windows identity and access infrastructure.Active Directory Group PolicyA Windows mechanism for centrally applying configuration and control changes across a domain.Active Directory passwordscredentials that can unlock broader access to enterprise resources.Active filterA filter that measures distortion and applies compensating current or voltage dynamically.Active learningAn iterative method where a model helps choose the next most informative experiment or data point.Active modeThe mode in which Microsoft Defender Antivirus provides primary real-time protection and remediation.Active Noise Cancellation (ANC)Audio processing that reduces outside sound by generating opposing sound waves.Active Remote SessionA live connection where an operator can interact with a remote machine.Active researcherA participant counted as active because they submitted at least one vulnerability report in a period.Active StorageThe Rails subsystem for file attachments and on-demand image variants.Active Windows user sessionA logged-in desktop session that is still open and usable on the device.Active-exploitation signalEvidence that a vulnerability is being used in the wild, often used to speed up remediation decisions.Actively exploiteda vulnerability already being used in real attacks.Actively exploited vulnerabilitya flaw that is being used in real-world attacks.Activity-based costingA costing approach that assigns expenses to activities based on the resources they consume.ActivityPubA protocol used by decentralized social platforms to communicate across servers.Actual-consumption billingCharges calculated from measured usage rather than a flat rate.Actuator mechanismThe physical part that moves a disc into position.Ad auctionan automated process that determines which advertisement is selected for placement.AD CSActive Directory Certificate Services, Microsoft’s certificate authority and PKI component for issuing trusted certificates.AD CS templateA certificate template in Active Directory Certificate Services that can become an escalation path if misconfigured.AD FSActive Directory Federation Services, a federation system used for single sign-on and token-based trust relationships.Ad platforma third-party system that may receive browser-level data for advertising or measurement.Ad platform abuseThe misuse of advertising systems to distribute deceptive or harmful content to unsuspecting users.Ad techsoftware and services that automate digital advertising, targeting, and measurement.Ad tech supply chainThe network of brokers, exchanges, and platforms that move an ad from advertiser to publisher.Ad-fraud toolingMalware or automation used to generate fake ad impressions, clicks, or related traffic for profit.Ad-free plana paid tier that removes advertisements from a service.Ad-supported interfacea product design that places sponsored content inside the user workflow.Ad-supported plana lower-cost option that includes advertising during viewing.Ad-tech ecosystemThe network of platforms, brokers, and services that deliver and track digital advertising.AdaptabilityThe ability of malware to adjust to different screens, prompts, or user flows with less manual rewriting.Adaptationthe process of adjusting systems or workflows to new conditions without losing stability.Adaptive attackAn attack that changes behavior, timing, or execution to evade detection.Adaptive AuthenticationA login method that changes the required verification steps based on risk signals.Adaptive GapA term for the distance between AI capability and an organization's readiness to use it effectively.Adaptive interfacea digital interface that changes based on context, behavior, or user needs.Adaptive LearningA training approach that changes content, pacing, or feedback based on learner progress.Adaptive opticsA correction technique that helps compensate for optical distortion caused by imperfect lenses or uneven tissue.Adaptive scoringA risk-scoring approach that updates outputs as new data and patterns arrive.Adaptive testingAn evaluation method that changes question difficulty based on performance to preserve measurement strength.AdaptivenessThe ability of a system to change behavior after deployment.ADB (Android Debug Bridge)A command interface used to communicate with and control Android devices for debugging and automation.ADB / ADB shellAndroid Debug Bridge and its shell interface, which can provide shell-level access to a paired device.ADC (Application Delivery Controller)A device that manages and optimizes application traffic, often at the network edge.Add-onA tool added on top of an existing system without deep integration into daily operations.Add-on signingA Firefox control intended to help verify and govern extensions, reducing the risk of unreviewed or unsigned add-ons in release builds.AdditivesExtra substances blended into a base material to change how it prints or performs.Addon domainA hosting feature that maps an additional domain to content under one account.Address blockA routed range of IP addresses allocated together on the internet.Address translationThe process of converting one memory address form into another so hardware can place data correctly.Adequacy decisionAn EU legal finding that another jurisdiction provides a level of data protection essentially equivalent to EU standards.Adequate measuresMeasures judged sufficient for the protection duty in the relevant context.AdherenceHow closely a patient follows the treatment plan over time.Adjacent accessAn attack condition where the adversary must be near or on the local network or bus rather than attacking from the internet.Adjacent network accessaccess from a nearby network position, not necessarily from the internet.Adjacent-network attackAn attack that requires access to the same local network segment or nearby trust zone, rather than the public internet.Adjacent-network attackerA threat actor who already has access to the local network or can observe it from nearby.ADMASUSTOR Data Master, the operating environment used to manage ASUSTOR NAS devices.Admin accountsprivileged identities that can control system recovery.Admin consentOrganization-level approval for an app to receive permissions across a tenant.Admin controlAn administrator setting that can enable, disable, or manage a feature for users.Admin gatingA control model where administrators must approve access before users can opt in.Admin keyshigh-privilege credentials that can control sensitive systems and data.Admin portalthe control panel used to manage hosting, mail, DNS, and security settings.Admin REST APIThe administrative interface used by Keycloak to manage users, roles, and other identity data.Admin rightselevated permissions that let a user manage systems, settings, or data.Admin sessionA logged-in administrator browser state that can carry high privileges on the site.Admin tokenA privileged credential that can act with administrative rights.Admin-level accessHigh-privilege access that can change settings, policies, or other sensitive controls.Admin-managed policyAccess rules set by administrators rather than left to ad hoc user consent.Administered tax regimeA setup in which the platform handles certain tax steps on behalf of the user.Administrative account takeoverUnauthorized control of a privileged login that can change system settings.Administrative actAn official decision or document produced by a public body as part of its legal and operational duties.Administrative APIA programmatic interface used to manage sensitive system settings and operations.Administrative burdenThe time and effort required to meet reporting, compliance, or procedural demands.Administrative continuityThe ability of an institution to keep decisions, approvals, and services moving without interruption.Administrative controlThe highest level of device access, allowing broad changes to configuration and behavior.Administrative fineA regulatory penalty imposed for breaking legal or compliance obligations.Administrative frictionthe time and effort required to complete routine business tasks.Administrative loginA privileged account that can change settings, deploy actions, or control other devices.Administrative portalA control surface that can govern access, settings, or connected systems.Administrative privilegesElevated rights that allow a user to make system-level changes.Administrative surfaceThe management interface or controls that configure a system and are often high-value targets.Administrative workflowthe sequence of official tasks that keeps a public process moving.Administrative workflowsthe internal processes that handle records, scheduling, and support tasks.Administrator accessThe highest privilege level in WordPress, with control over settings, users, and content.Administrator authenticationThe process that verifies whether a user can access privileged device controls.Administrator impersonationA condition where an attacker is treated as a privileged admin account.Administrator protectionA Windows security feature that keeps users deprivileged and limits elevation to approved just-in-time actions.Administrator sessionAn authenticated WordPress state that gives a user elevated control over settings, users, and site functions.Administrator takeoverA scenario where attacker activity can lead to control over privileged management accounts or settings.Administrator-level accessThe highest level of control in an application, usually including user, permission, and configuration management.AdministratorAccessAn AWS managed policy that provides full access to AWS services and resources.Administrators groupA privileged group whose membership typically grants high-level control over the identity system.Admissibilitythe legal question of whether evidence can be used in court.Adooption gapThe difference in usage rates between groups, organizations, or regions.Adoption at scaleWidespread real-world use beyond pilots, prototypes, or limited deployments.Adoption continuityThe ability to keep an AI initiative active and useful over time, beyond the pilot phase.Adoption curveThe pace at which people and organizations accept new technology.Adoption theaterA situation where people appear to embrace a new system but keep doing the old work underneath.AdtechAdvertising technology that routes user data, auctions, and targeting signals through multiple platforms and vendors.Adtech identifierA device or browser signal used to recognize, segment, or target a user across ad systems.Advance directive (DAT)A document that records a person's wishes for future medical treatment and care.Advance payment frauddeception that aims to divert money before goods or services are delivered.Advance-fee fraudA scam that asks for upfront payments, such as fees or taxes, before promised money can be released.Advanced chipA highly miniaturized semiconductor used in performance-sensitive computing and electronics.Advanced Data ProtectionApple’s higher-security cloud mode that extends end-to-end encryption to more data, including backups.Advanced DX TalentSpecialized staff who can implement more complex digital and AI-driven business changes.Advanced electronic signatureA signature category that links a signer to a document and can reveal later changes.Advanced Malware Protection (AMP)A malware-defense feature that inspects files and attachments for suspicious behavior or known threats.Advanced Planning and Scheduling (APS)Software used to allocate machines, labor, and materials under production constraints.Adversarial environmentA setting where systems must be defended against active attempts to misuse them.Adversarial ExampleAn input crafted to make a model behave incorrectly.Adversarial Simulationcontrolled exercises that mimic attack behavior to test defenses and response plans.Adversarial thinkingA method of examining how a system might be stressed, misused, or bypassed.Adversary clustera set of related malicious activities that may be tracked under multiple names or aliases.Adversary disruptionActions intended to interfere with a threat actor’s operations or infrastructure.Adversary-in-the-middle (AiTM) phishingA technique where an attacker sits between a victim and a real login page to capture usable session material.Advertised payThe salary or wage listed in a job posting, which may differ from final compensation.AdvisoryA vendor security notice that identifies vulnerabilities, affected products, and patch guidance.Advisory boardA non-executive group that provides expertise and guidance but does not usually run day-to-day operations.AdXan ad-tech platform tied to automated online advertising workflows.AECarchitecture, engineering, and construction, a sector that often handles large project files and sensitive records.AEOAnswer Engine Optimization, a term for shaping content so it is more likely to be used in AI-generated answers.Aerial imageryImages taken from aircraft or similar platforms, often used to inspect land use and built structures.AES-256A symmetric encryption standard that uses a 256-bit key size.AES-CBCA block-cipher mode that can become vulnerable when applications leak different decryption failure signals.AF_UNIXA Linux socket family for local inter-process communication on the same host.AF_UNIX socketA local inter-process communication endpoint used by programs on the same host.AFD.sysA Windows kernel driver for Winsock networking that handles low-level socket communication.Affect recognitionAutomated inference of emotional state from signals like facial expression, tone of voice, or behavior.Affected systemsDevices or environments running the vulnerable software and therefore exposed until they are patched or mitigated.Affiliate portala controlled dashboard used to manage criminal tasks, access, or payments.Affiliate programa partner-driven setup where outside operators help distribute traffic or leads for a share of revenue.Affordability crisisA situation where the cost of essential cyber defenses grows faster than an organization can sustainably pay.AFS licenceAn Australian Financial Services licence, checked against official registers to help confirm legitimacy.AG 421A draft or scheme intended to align Italian law with the EU AI Act, as described in the provided material.Age estimationA model-driven process that predicts approximate age from an image or other signal, often used for access control.Age gatea check that restricts access based on the user's age.Age predictionEstimating a user's age from indirect signals instead of direct confirmation.Age ratingA classification that indicates the intended audience for a product or piece of content.Age-awareness APIa software interface that returns an age-related category instead of a full date of birth.Agent ConfigurationThe settings that define how an AI assistant uses tools, instructions, and workflows.Agent control planeThe management layer that governs how AI agents are registered, permitted, observed, and revoked.Agent harnessThe software layer that controls how an AI agent receives input, calls tools, and returns actions or outputs.Agent HostA machine running a monitoring agent that communicates with a central platform.Agent Identity SecurityA security approach focused on identifying, governing, and monitoring AI agents.Agent infrastructureThe orchestration layer that connects model output to external tools, APIs, or workflows.Agent InteroperabilityThe ability of different AI agents and tools to work together across platforms with shared trust and access rules.Agent memory storeA persistent layer that saves learned state, patterns, or workflow context for later use.Agent PollingA model where build agents periodically contact a server for instructions or jobs.Agent polling protocolThe request cycle TeamCity agents use to contact the server for instructions.Agent serviceA background component installed on endpoints so a central platform can manage them.Agent sessionA work period in which an AI system performs tasks or interactions that can be logged and reviewed.Agent swarmA group of autonomous agents that can coordinate across tasks, often multiplying both capability and risk.Agent System of RecordA central registry for tracking AI agents, their ownership, and their access boundaries.Agent TeslaA Windows infostealer family associated with credential theft and other data-harvesting behavior.Agent-based patchingA model where a lightweight software agent on the endpoint receives and applies update jobs.Agent-to-agent commerceA proposed model in which software agents may negotiate and execute transactions with other agents under defined authorization and control limits.Agent-to-Controller CallableA Jenkins mechanism for sending callable objects from agents to the controller; unsafe implementations can create security risk.Agent/Connect permissionA Jenkins permission that allows a user or system to connect agents to the controller.AgentDBA persistent store used by Ruflo for agent memory or learning data that can affect later behavior.Agentica design where software can make limited decisions or take actions with some autonomy.Agentic abuseMisuse of autonomous or semi-autonomous AI systems to carry out repeated actions on a target platform.Agentic Access ManagementA security model for governing what AI agents and other non-human identities can access and do.Agentic appSoftware that can take multi-step actions on a user’s behalf, often including file and tool access.Agentic browsingweb navigation performed by software that can choose actions and follow multi-step tasks.Agentic Commerce ProtocolA set of technical rules for structured product discovery and checkout between an AI interface and merchant systems.Agentic data engineeringA workflow where an AI agent can carry out defined data tasks, check results, and adjust its approach.Agentic defenseA security strategy that uses AI agents to help investigate and respond to threats with limited human delay.Agentic DevelopmentSoftware creation where AI agents help plan, build, and test changes with limited human oversight.Agentic endpoint securityA runtime-focused security approach that monitors and governs AI agents, tools, and dynamically loaded components on endpoints.Agentic enterpriseAn organization that uses autonomous AI agents to execute and coordinate business processes.Agentic executionAI workflows where a system plans and carries out multistep tasks with limited human intervention.Agentic frameworkSoftware that coordinates AI agents so they can plan, act, and adjust tasks across multiple steps.Agentic Identity and Access ManagementControls that treat AI agents as auditable identities with scoped permissions.Agentic identity platformA system that assigns and manages identity, authorization, and policy for AI agents.Agentic intelligenceAI systems designed to act with some autonomy, making recommendations or taking limited actions based on context.Agentic operating modelAn AI setup where systems can plan, call tools, and carry out multi-step actions with limited supervision.Agentic pentestingSecurity testing that uses autonomous decision-making to choose the next test step.Agentic remediationAutomated repair of known security problems by an AI system acting within set limits.Agentic securitySecurity workflows in which multiple AI agents collaborate across specialized roles.Agentic security systemA pipeline of specialized AI components that split detection, validation, and remediation support into separate steps.Agentic sprawlThe proliferation of autonomous AI agents and their related tool and API connections.Agentic testingSecurity testing where an autonomous system searches for flaws and then verifies them with active checks.Agentic workA workflow where an AI is used for multi-step task planning or action-oriented assistance.Agentic workloadAn automated task flow where software agents call models repeatedly to complete a goal.AgenticOpsOperational practices for supervising AI agents in production, including identity and reliability controls.AgentlessA security model that relies on APIs or cloud-native access rather than installing software agents on every resource.Agentless connectorAn integration that collects cloud data through APIs instead of installing software on hosts.Agentless discoveryA method of identifying devices without installing software agents on them.Agentless MFAMFA enforcement that adds protection without installing software on the protected application.Agentless migrationA transfer process that moves workloads without installing software inside each guest VM.Agentless securityA way to inspect cloud environments without installing software on each host.Agentless visibilityCloud inspection that gathers security data without installing software on each workload.AGEsLikely means advanced glycation end products, a common acronym for compounds that can accumulate in tissues, though the provided material does not define it explicitly.Aggravated Identity TheftA criminal offense involving the misuse of another person’s identifying information in connection with certain crimes.Aggregate patternA signal that becomes visible only when many small events are viewed together.Aggregated data analysisAnalysis that combines individual inputs into group-level results, reducing exposure of personal details.Aggregation breadthThe range of security signals a platform can combine into one view.Agile analysisAnalysis work adapted to iterative delivery and changing priorities.Agile ceremoniesrecurring meetings such as stand-ups, planning sessions, and retrospectives.AGNTCYAn open-source effort for agent interoperability built around discovery, identity, messaging, and observability.AgrivoltaicsA setup that combines solar generation with agricultural land use.AGVAutomated Guided Vehicle, a driverless machine used to move materials through a warehouse or plant.AI accessThe level of permission or availability granted to organizations using an AI system.AI agent frameworkSoftware used to build systems that coordinate tasks, tools, and automation for AI workflows.AI agent governanceSecurity controls that limit what autonomous software can access, decide, and execute.AI agent harnessAn orchestrated system that lets AI tools inspect code, test hypotheses, and help search for vulnerabilities.AI agent swarmMultiple coordinated AI agents that divide work across research, analysis, and action.AI Agent SystemA contextual term for an AI setup that can plan and take actions through tools or services.AI agent trafficRequests and responses exchanged between a client tool and an AI service, including prompts and sometimes secrets or metadata.AI alignmentThe effort to make model behavior match human intent, constraints, and values.AI API tokenA secret credential used to authenticate requests to an AI service.AI assistanta conversational system that can answer questions and trigger actions.AI assuranceA set of methods for proving that an AI system behaves within acceptable risk limits.AI attackA broad term for threats that use AI, target AI systems, or interact with AI-driven workflows.AI attack surfaceThe ways artificial intelligence systems can be abused, manipulated, or targeted by attackers.AI botsoftware that uses automation, and sometimes AI techniques, to carry out repeated online actions.AI BrowserA browser that uses an AI model to interpret, summarize, or act on web content.AI capacityThe compute, power, cooling, and networking resources needed to support artificial intelligence workloads.AI Chat LogsConversation content from AI tools, which may include confidential, personal, or business-sensitive information.AI clauseA contract provision that defines how artificial intelligence is used, controlled, and governed in a tech agreement.AI clinical resilienceThe ability of AI-supported healthcare workflows to remain safe, usable, and recoverable when systems fail or behave unexpectedly.AI coding agentsSoftware tools that generate code or app components from prompts and task instructions.AI companionA conversational system designed to sustain emotionally meaningful interaction over time.AI complementarityThe ability to work alongside AI rather than compete with it directly.AI complianceThe governance process used to meet legal, policy, or internal requirements for AI use.AI computeThe hardware and infrastructure resources needed to train and run AI systems at scale.AI control planeThe policy and management layer that helps govern how AI systems, agents, and tools are used.AI data fabricAn architecture that uses AI to connect structured and unstructured data into a usable context layer.AI developmentThe process of building and improving artificial intelligence systems.AI doomsday scenariosHigh-impact worst-case ideas about advanced AI causing severe, potentially irreversible harm.AI economicsThe study of how AI systems consume resources and create measurable business value.AI Email SummarizerA tool that uses a language model to condense email threads into shorter, readable summaries.AI exploitationuse of AI tools or outputs to support attack activity.AI exposureA measure of how closely a job’s tasks align with current AI capabilities.AI fabricA reusable platform pattern for deploying, governing, and observing AI workloads consistently.AI guardrailsControls meant to block unsafe prompts or outputs before they cause harm.AI hallucinationA false or fabricated output produced with high confidence by an AI system.AI harnessSoftware that wraps an AI model with tools, memory, or workflows so it can perform structured tasks.AI hypothesis engineAn inferred AI-assisted workflow that generates candidate explanations or priorities for alerts rather than relying only on manual sorting.AI InboxA Gmail feature that summarizes email threads and highlights action items.AI incidentA harmful or significant AI event that may require logging, review, or escalation.AI inferenceRunning a trained model on new data to produce an output or decision.AI integrationEmbedding AI into existing workflows, systems, and decision paths.AI investmentsSpending on artificial intelligence systems, tools, and infrastructure with the goal of future returns.AI jailbreakingAdversarial prompting designed to bypass a model’s safety or policy constraints.AI keya secret credential that can unlock access to an AI service or account.AI kill switchAn emergency control intended to stop or disable an AI system’s activity.AI Liability DirectiveA proposed EU measure on AI-related civil liability that was later withdrawn.AI life cycleThe full path of an AI system, including design, deployment, monitoring, updates, and retirement.AI lifecycle risk managementSecurity controls that cover an AI system from design and training through deployment and monitoring.AI maturityThe staged progression from simple AI assistance to tightly governed automation.AI Maturity ModelA framework for assessing how advanced an organization’s AI governance and operational practices are.AI migrationA project move that may involve using AI, building around AI, or leaving an AI platform.AI misalignmentA failure mode where an AI system’s actions diverge from the operator’s intended goal or constraints.AI model payloadA packaged model file or workload that a device uses to run local AI features.AI NotetakerSoftware that records, transcribes, and summarizes meetings automatically.AI OfficeEuropean Commission body associated with AI Act implementation and frontier-AI coordination.AI OmnibusThe amendment package that simplifies some AI Act implementation steps while preserving core protections.AI OrchestrationA control layer that coordinates multiple AI-driven tasks or agents across a workflow.AI orchestration layerA workflow that uses an AI tool to coordinate tasks such as scripting, triage, or operational sequencing.AI orchestratorSoftware that coordinates multi-step AI workflows, including tool use and repeated model calls.AI outputtext, code, or media generated by a model rather than a human.AI output riskThe possibility that an AI system produces inaccurate, incomplete, or unsuitable results.AI oversightGovernance controls applied to AI features to limit unsafe behavior, misuse, or unmanaged risk.AI pentestThe use of artificial intelligence to assist with parts of offensive security testing.AI policyRules that define how artificial intelligence may be used in a class, school, or institution.AI profilingautomated grouping of people based on inferred traits or behavior.AI promptText given to an AI system to direct its output, analysis, or behavior.AI provenanceInformation that describes where AI-generated or AI-edited content came from and how it was transformed.AI proxy serviceAn intermediary that fronts access to an upstream model and resells that access to others.AI red-teamingStructured testing of an AI system to uncover unsafe behavior, misuse paths, or guardrail failures.AI registerAn authoritative inventory of AI use cases that supports ownership, review, and operational oversight.AI Result PoisoningSeeding public content to distort what AI systems retrieve or generate.AI safetyThe practice of making AI systems reliable, bounded, and safe to operate in real environments.AI safety guardrailsPolicy and refusal controls in LLM systems that can be triggered by sensitive or prohibited-looking content.AI sandboxA controlled environment used to develop, test, and validate AI systems under supervision.AI scam detectionAutomated analysis that tries to flag suspicious messages, sites, or calls.AI Scam ProtectionAn AI-assisted feature meant to flag suspicious messages, calls, or sites linked to fraud attempts.AI scraperAn automated system that collects web content at scale for search, indexing, or model training.AI SearchSearch systems that use generative models to retrieve, synthesize, and present answers.AI Security EngineerA security role focused on protecting AI-related systems, data, and workflows.AI serverA high-performance computer system designed to run demanding machine learning and inference workloads.AI service layerAI embedded inside products or workflows so users experience it as part of a service rather than a standalone tool.AI sitebuilderA website creation tool that uses AI to produce a draft layout or content from a short description.AI slopSynthetic content produced at scale with low informational value.AI slopsquattingRegistering package names that AI tools may suggest or hallucinate, then turning those names into malicious dependencies.AI spendCosts tied to building, training, running, or serving AI systems and models.AI standardsTechnical rules or common practices used to guide how systems are tested, measured, and compared.AI summarizationA system that compresses longer text into shorter output using machine learning models.AI sustainabilitythe effort to reduce the environmental and social costs of artificial intelligence.AI threat taxonomyA structured way to classify how adversaries may misuse AI systems or AI components.AI token budgetA set amount of AI usage allocated to a team or project for prompts, generation, or agent activity.AI trainingThe process of using data to improve a machine learning system.AI transformationThe process of embedding AI into workflows, decision-making, and business measurement, not just adding a new tool.AI triageAutomated or assisted prioritization of alerts so analysts can focus on the most relevant events first.AI unit economicsA way to measure AI value per dollar spent by comparing business impact with delivery cost.AI validationTesting and verification needed before an AI tool is used in clinical decision support.AI vishingVoice phishing that uses synthetic or AI-generated speech to imitate a trusted person or organization.AI VisualizerA concept-generation feature that turns simple inputs into visual design ideas.AI washingMarketing a product as AI-powered without solid evidence that the capability is real or useful.AI website toolsSoftware features that help generate or manage site content, layouts, or setup tasks with automation.AI workflow engineSoftware that connects prompts, tools, agents, and processing steps into executable flows.AI WormA worm-like pattern in which model-generated content may carry forward malicious instructions into later files or workflows.AI-assistedA workflow where AI helps with parts of creation, while a human still retains primary creative control.AI-assisted analysisAutomated or semi-automated tools that help identify software weaknesses before release.AI-assisted classificationUsing machine learning to help identify and label sensitive data at scale.AI-assisted codingUsing artificial intelligence tools to generate, complete, or suggest software code.AI-assisted malwaremalicious code or workflows that use AI features or automation to improve abuse.AI-assisted negotiationautomated text generation or analysis used to make extortion demands more targeted and convincing.AI-assisted phishingPhishing that uses AI tools to help craft, adapt, or localize deceptive messages.AI-assisted scanningUsing machine learning or large language models to help detect possible security flaws in code or systems.AI-assisted toolSoftware that uses machine learning or other AI methods to support analysis, evaluation, or decision-making.AI-based financial analysisSoftware that applies machine-learning or other AI methods to financial data to surface patterns or suggestions.AI-BOMAn inventory record for an AI system that lists its key artifacts and lineage data.AI-driven cyber defenceUse of artificial intelligence to help detect, prioritise, or respond to threats.AI-enabled attackscyber operations that use automated or generative tools to improve scale, speed, or realism.AI-enabled browserA browser that embeds an assistant or agent to summarize, automate, or act on behalf of the user.AI-enabled cyberattackAn attack that uses artificial intelligence to increase speed, scale, realism, or automation.AI-Enabled ExfiltrationA behavior where an AI system is induced to move data outside approved channels.AI-Enabled Identity WorkflowAn authentication or review process that uses AI or machine learning to help make identity-related decisions.AI-era crimeCriminal activity that uses artificial intelligence to scale fraud, deception, or coordination.AI-focused environmentA technology setting where artificial intelligence systems, tools, or workflows are part of the security problem space.AI-generated reportsSecurity submissions produced with the help of artificial intelligence, which still need human validation.AI-generated videoVideo created fully by generative AI tools rather than recorded directly by a person.AI-native complianceCompliance workflows that use artificial intelligence to assist with evidence, mapping, and review tasks.AI-native SaaSSoftware-as-a-service built around AI work, where usage and output matter more than user count.AI-powered attacksCyberattacks that use artificial intelligence to speed up or scale familiar criminal tactics.AI-powered browserA browser or agent that uses machine learning to interpret content or take actions.AI-powered defensesSecurity tools that use machine learning or other AI methods to assist with detection, triage, or response.AI-powered DLPDLP products that use automation or context-aware analysis to support data protection decisions.AI-powered fraudFraud that uses generative or synthetic AI to imitate people, documents, or messages.AI-readyA publishing approach that makes web content easier for both humans and automated systems to discover and process.AI-speed attacksA shorthand for adversary activity that may be accelerated by automation or AI-assisted workflows.AI4Sciencethe use of artificial intelligence to support scientific discovery, analysis, and experimental planning across disciplines.Air blowerA tool that moves air for cleaning, drying, or general workshop use.Air conditionerA cooling device that uses heat-pump principles to remove indoor heat.Air defensesystems used to detect, track, and counter aerial threats.Air-driven organa standard organ design that uses air to move sound-producing parts.Air-gapped backupsRecovery data kept isolated from the main network.Air-gapped networkA system or network kept physically separate from the internet and other external links.Air-gapped signingKeeping a wallet device physically separate from networks while approving transactions.Air-GappingPhysically separating a system from external networks to reduce remote attack exposure.Aircraft wiringthe physical cabling that carries power and signals between aircraft components.Airframethe structural body of a drone that holds its components together.Airless tireA tire design that does not depend on compressed air for support.Airlinera passenger aircraft with many coordinated systems that must work together safely.Airsofta recreational activity that uses non-lethal replica gear or projectiles.AirTagApple’s Bluetooth item tracker, used to help locate physical objects.AISEThe Italian foreign intelligence service responsible for external intelligence.AISIThe Italian domestic intelligence service responsible for internal security.AIT-GUIA browser-based operator console used with the AMMOS Instrument Toolkit for mission monitoring and commanding.AiTM (Adversary-in-the-Middle)An attack setup that relays traffic between the victim and the real service so the attacker can intercept login artifacts.AJAXEvaluateA ServiceNow server-side script entry point associated with the platform’s sandbox model.AJPA connector protocol Tomcat uses with Apache HTTP Server in trusted-network setups.Alarm suppressionA technique that hides or disables warnings so operators may not see critical conditions.Alert CorrelationThe process of connecting related security alerts to separate real threats from noise.Alert prioritisationA ranking method that helps analysts focus on the most urgent events first.Alert tuningAdjusting detection rules to reduce false positives and improve response quality.Alexa+Amazon's AI assistant service, now offered on Fire TV devices without a Prime or Alexa+ subscription requirement.Algae biodieselFuel made from algae-derived material, presented here as a DIY energy project.Algorithm agilityThe ability to replace one cryptographic method with another without redesigning the whole system.Algorithm governanceThe oversight, policies, and review controls used to manage automated decisions.Algorithmic controlautomated decision-making that influences how content is ranked, shown, or distributed.Algorithmic debtA nonstandard term for deferred technical, operational, and oversight costs created by uncontrolled AI growth.Algorithmic decision supportsoftware that assists a human process by ranking, filtering, or recommending outcomes.Algorithmic decision-makingChoices influenced or produced by automated systems.Algorithmic defenseAutomated or AI-assisted detection and response used to scale security operations.Algorithmic mediationThe process by which software filters, ranks, or summarizes information before it reaches users.Algorithmic ModerationAutomated filtering or ranking of online content using rules, classifiers, or machine learning.Algorithmic recommendationautomated ranking that chooses which content a user sees first.AlgorithmsThe rules and models systems use to decide what content to show and in what order.Algoritmi socialplatform ranking systems that influence which content users are most likely to see.Alignment AuditA review designed to check whether a model behaves in ways that match human goals and policy limits.Alignment failureA case where a model’s behavior diverges from intended safety goals or operator expectations.Alignment FakingA research term for behavior where a model appears compliant under observation but acts differently in other conditions.Alignment monitoringOpenAI’s monitoring of model actions and evaluation traffic for misalignment-related behavior.All-cash acquisitionA transaction paid entirely in cash rather than with stock or mixed consideration.All-cash dealA transaction paid entirely in cash rather than stock or a mix of assets.All-flash storageA storage architecture that uses solid-state drives to deliver low latency and high performance.Alleleone version of a gene among possible variants.Allergen immunotherapyA treatment area that can depend on sensitive research, production, and regulated operations.Alliance dependenceReliance on external partners for security guarantees, information, or technical support.Allocation matrixa decision framework that maps security capabilities to assets or device classes based on operational constraints and risk.AllophoneA short speech sound unit used to build synthetic speech from fragments.ALPCA Windows inter-process communication mechanism used by core system components.Alphanumeric passwordA secret made from letters and numbers, usually stronger than a short numeric PIN.AlphaServer 2100a DEC server model that is the focus of this retrocomputing homelab feature.AlphaZeroA DeepMind system known for strong game-playing performance learned through self-play.ALPRAutomated License Plate Recognition, a system that reads vehicle plates and turns them into searchable records.Alt+TabThe classic Windows shortcut for moving between open applications.Alternative cloudA cloud platform built for narrower workload needs, often emphasizing AI, sovereignty, or edge performance.Alternative paymentsPayment methods that operate outside a platform’s default billing flow.Alternative protocolA different communication channel used instead of the primary internet path.Alternative siteA secondary location prepared to support operations if a primary site cannot be used.AluminumA lightweight metal often used when low weight and easy forming are important.Always On VPNA VPN model that aims to connect automatically when the device is online.Always-on devicehardware that stays connected for long periods and can be quietly repurposed.Always-on microphoneA sensor that continuously captures audio and should be treated as privacy-sensitive.AM radioA radio receiver designed for amplitude-modulated broadcast signals.AM29000A processor family from AMD associated with late-1980s next-generation silicon.Amatera StealerAn information-stealing payload associated with credential and session theft risk.Ambidextrous leadershipA management approach that combines exploration and execution so an organization can innovate without losing discipline.Ambient CaptureRecording that happens continuously or opportunistically in the surrounding environment, often through wearable devices.Ambient listeningA documentation approach that captures clinical conversation and drafts a note for review.Ambient pressureThe surrounding environmental pressure, typically around 1 atmosphere under ordinary conditions.Ambulatory surgery centera healthcare facility type that may handle sensitive patient records.Ambush marketingPromotional tactics that seek attention from a major event without official sponsorship.AMD SEV-SNPAMD confidential computing feature set for protecting virtual machine memory and state.AMIAmazon Machine Image, a reusable template for launching EC2 instances with a predefined software state.Amiga 1000an early home computer platform released in 1985.AMLAnti-money laundering controls used to detect and report suspicious fund movement.AML auditCompliance material used to review suspicious activity and financial controls.AML platformsoftware that supports anti-money laundering compliance workflows.AMLA PackageAn EU anti-money-laundering package that introduces common criteria for assessing risk, organization, and decisions.AMMOS Instrument ToolkitNASA/JPL’s open-source toolkit for operations and data processing for instruments and small satellites.AMOLEDA display technology known for thin panels, vivid color, and low-profile designs.Amortization mismatchA gap between how long an asset is paid for and how long it remains economically useful.AMOSShort for Atomic macOS Stealer, a malware family associated with stealing credentials and wallet data on Macs.Amplitudethe size of a vibration or oscillation.AMRAdvanced Modular Reactor, a broad label for newer reactor concepts with varied designs and fuel approaches.AmygdalaA brain structure involved in threat detection and rapid emotional responses.Analog circuitA circuit that processes continuously varying electrical signals without software logic.Analog computingComputation performed through continuous physical phenomena rather than discrete instructions.Analog formatA medium that stores or plays information as continuous signals rather than discrete digital files.Analog redundancyA backup path using non-digital components that can help maintain function if digital systems fail.Analog TV signalsThe older broadcast format that was widely switched off in favor of digital transmission.Analog videoA video signal represented as a continuous waveform rather than discrete digital values.Analysis resistanceTechniques that slow reverse engineering, sandboxing, or automated malware inspection.Analyst workflowthe steps security teams follow to investigate and track threats.Analytical thinkingThe habit of breaking problems into parts and evaluating evidence before acting.AnalyticsPlatform-specific detection logic such as queries, rules, or detections that implement a strategy in a real environment.Analytics engineerA role focused on modeling, testing, and maintaining trusted analytics data for business and AI use.Analytics pipelinethe systems that collect and process usage data for measurement or reporting.AnalyzerA tool used to inspect electrical or communication behavior in a device setup.Anatomical mapa structured representation of a body part and its features.Android Accessibility ServiceA powerful Android API intended for assistive apps that can observe UI events and interact with the screen.Android Automotive OSGoogle’s in-car Android platform that runs directly on vehicle hardware, separate from phone projection features.Android debuggingA developer feature that helps test and manage devices, but can increase risk if left enabled unnecessarily.Android endpointa connected device running Android that needs software and access control.Android EnterpriseGoogle’s management framework for policy-driven provisioning and control of Android business devices.Android head unitThe in-vehicle computer that powers infotainment, navigation, and related functions.Android kernelThe Linux-based core of Android that handles hardware access, memory management, and security primitives.Android permissionsThe access requests apps use to reach sensors, communications, and device functions.Android security patch levelA device-reported marker showing which Android security fixes are present.Android spywareMalware designed for Android devices that covertly gathers data or monitors activity.Android Work ProfileA managed Android space that separates work apps and data from personal apps and data.Android-based systemA device platform built on Android components and services.Angle of viewthe direction from which a scene is observed, which can change what details are visible.Angler EKA named distribution ecosystem referenced in the case, without technical detail in the supplied material.Anglo concertinaA type of concertina associated with folk performance and bellows-driven play.AnnexA legal attachment that lists categories, cases, or criteria used to apply a rule.Annex IIIThe AI Act list of use cases treated as high-risk because of their potential impact.AnnotationA meeting feature that lets participants draw or mark up shared content.Annotation engineThe part of a meeting app that processes drawing, markup, and overlay input during a session.Annual feeA recurring yearly charge separate from the usage price.Annual gatheringA recurring event held once every year, often used to track continuity and community size.Annual interest rateThe yearly percentage used to calculate earnings on a deposit.Annual percentage ratethe yearly return expressed as a percentage.Annual rateThe yearly percentage used to describe the return on a financial product.Annual reportA recurring public assessment that summarizes threat trends, risks, and defensive priorities over a defined period.Annual subscriptiona plan billed on a yearly cycle, often with different renewal terms after a promo period.Anomaly MonitoringDetection of unusual activity that may indicate abuse, compromise, or misuse.Anonymous Cache KeyThe cache identifier used for logged-out traffic, which should prevent one user's input from affecting others.ANPRItaly’s national population registry, used as an authoritative source for identity and residency data.ANSCthe platform referenced for managing digital civil-status records.Answer engineA search or assistant system that returns a direct synthesized answer instead of a simple list of links.Answer validityWhether a generated or retrieved answer is current, accurate, and authorized for use.Answer-Preserving ScalingA test method that increases irrelevant data while keeping the correct answer unchanged to stress the retrieval layer.Ant Colony Optimization (ACO)A metaheuristic method used to search for near-optimal solutions in complex scheduling problems.Anti-abuseControls designed to detect and reduce misuse of a platform feature.Anti-analysis checkCode that looks for debuggers, virtual machines, or other analysis conditions before running fully.Anti-Automation EvasionBehaviors aimed at bypassing or working around bot defenses such as CAPTCHA.Anti-bot protectionControls that detect and block automated access that mimics or exceeds normal user behavior.Anti-bot protectionsControls designed to detect and block automated web traffic.Anti-CSRF tokenA protection mechanism that helps ensure a write request was intentionally made by an authorized client.Anti-fraud toolsfeatures meant to help flag suspicious messages, sites, or payment activity.Anti-phishing controlsSecurity features that help detect, block, or investigate deceptive messages and link-based attacks.Anti-ransomwarecontrols designed to detect or block ransomware-style file encryption and related behavior.Anti-sandbox checksEnvironment tests used by malware to detect analysis systems and change behavior or stop running.Anti-steeringRules or barriers that stop developers or sellers from directing users to alternative offers or payment paths.Anti-tamperProtective controls meant to stop unauthorized modification, removal, or disabling of security software.Anti-tamper protectionA mechanism intended to prevent elevated processes from modifying a client’s files, registry, service, or local policy cache.Anti-VMChecks used to detect or avoid virtual machines and sandboxes.AntifragilityA property of systems that can improve when exposed to stress, volatility, or shocks.Antifraud controlsSecurity checks designed to detect suspicious behavior, unusual transactions, or impersonation attempts.Antimalwaresoftware designed to detect, block, or remove malicious files and activity.Antimalware scanningAutomated checks for suspicious or malicious files and behavior in hosted environments.Antimicrobial resistance (AMR)The ability of microbes to survive drugs that once worked against them.Antimicrobial susceptibility testing (AST)Laboratory testing used to determine whether a bacterium is sensitive or resistant to an antibiotic.Antivirus AIMarketing for malware-detection tools that use machine learning or other automated analysis.Antivirus alerta warning generated when security software detects suspicious or malicious activity.Antivirus exclusionsSettings that tell security software to skip specific files, folders, or processes.Anxietya feeling of fear or worry that can affect daily functioning.Any-any entrya permissive firewall rule that allows any source, destination, or service.ApacheA widely used web server that processes requests through handlers and modules.Apache HTTP ServerOpen-source web server software used to deliver websites and applications.Apache modulea loadable component that extends Apache web server behavior.Apache StrutsAn open-source Java web framework used to build MVC-based applications.Apache TomcatAn open-source Java servlet/JSP container used to run web applications.Apache-2.0 licenseA permissive open-source license that allows reuse and modification under defined terms.API (Application Programming Interface)A defined interface that lets software systems exchange data or invoke functions in a controlled way.API abstractionA design layer that helps switch providers without rewriting every integration.API accountA programmatic identity used by software to access platform functions under defined permissions.API connectorA link that lets one system call another service or exchange data automatically.API Control PlaneThe management layer that governs API policies, configuration, and security controls.API discoveryThe process of identifying exposed endpoints, services, and data flows.API drainAbuse of an application interface to consume quotas, credits, or spend without permission.API DrainingRepeated legitimate API use that can exhaust quota, consume credits, or inflate cost.API GatewayMiddleware that sits between clients and backend services to route requests and enforce policy.API governanceThe policies and controls used to secure application programming interfaces and limit unsafe data exposure.API hookingIntercepting or modifying API behavior to observe, block, or alter function results.API HuntingDefender log review focused on suspicious requests to application endpoints that may indicate exploitation attempts.API pricingThe cost charged for using an application programming interface, often measured by token volume in AI systems.API ProxyAn intermediary that forwards API requests between a client and an upstream service, potentially changing routing and visibility.API rate limitingA control that restricts how many requests a client can send in a given time.API responseData returned by a server to a client request, which can leak sensitive fields if poorly designed.API RouteA named endpoint an application exposes for requests such as management or data access.API SchemaA structured description of API endpoints, inputs, and outputs, often used to guide testing.API Security Top 10OWASP's risk taxonomy for the most important API security problems defenders should test.API service datainformation exchanged through application interfaces, which may reveal operational detail if exposed.API sessionA valid authenticated connection to an application programming interface used for device management.API session managementThe logic that tracks whether a request has a valid authenticated session.API-based scanningRetrospective inspection of SaaS settings and stored data through application programming interfaces.API-only accessA deployment model where users interact with a model through an interface, but cannot inspect or modify the underlying system.API-SSLThe encrypted version of MikroTik's API service, intended for safer remote administration.APISAdvance Passenger Information System, used to exchange traveler identity and flight data for border and security processing.APNAccess Point Name, a cellular routing label that points traffic toward a specific network or service.APN (Access Point Name)The network setting a mobile device uses to reach a carrier data service.App automationA macOS permission that lets one app control another app when the user allows it.App CloningDuplicating an app into another container or profile so it runs in a separate space.App distribution channelThe path through which software reaches users, such as an app store.App downloadThe transfer of an application package from a store to a device.App governanceAdministrative control over which third-party apps can access organization data.App impersonationa fake application made to resemble a trusted product or service.App IOA digital service channel used by Italian public administrations for citizen-facing communication.App marketplaceA platform used to distribute, discover, and install mobile applications.App or website managementAccount access and administration performed through a mobile application or web portal.App passwordA long-lived application-specific password used by older apps or devices that do not support modern 2-step verification.App replacementAn attack method where a legitimate app is swapped or patched with a malicious version.App RouterThe Next.js routing model used to organize application paths and request handling.App SecurityThe Mendix area where user roles and permission settings are configured.App Store delistingRemoval of an app from a marketplace, which can block discovery, downloads, and reinstalls.App store governanceThe rules and controls that determine how software is listed, ranked, reviewed, and distributed.App Store listingthe official marketplace entry used to discover, install, and update a mobile app.APP_SECRETKimai’s application secret; in the technical advisory context, it is described as the Symfony kernel.secret.App-based bankingFinancial services that are opened and managed through a mobile application.App-based managementA service model where account and card functions are handled through a mobile application.App-based monitoringA feature that lets users check usage or status through a mobile application.App-in-appan embedded application that runs inside another platform or chat surface.App-only accessA model where an application uses its own identity and permissions without a signed-in user.App-only tokenAn access token issued to an application acting as itself, not as a signed-in user.App-plus-API pathsThe combined attack surface formed by a mobile app and the backend APIs it uses.App-store controlsReview and scanning systems used to block harmful mobile apps before release.Apparent AuthorityThe impression that an agent is allowed to act, which may influence how others treat its actions.AppArmorA Linux security module that limits what programs can do through policy profiles.AppContext switchA .NET setting that can turn a runtime behavior or workaround on or off.Appeals courta higher court that reviews decisions from a lower court.Appearance monitoringRepeated attention to looks, presentation, or visible traits.Apple ][An early Apple computer platform with its own software and hardware conventions.Apple BiomeApple’s framework for device-related data streams; not a biometric system.Apple depththe level of platform-specific support and control available for Apple devices.Apple EventsA macOS automation system that lets one app send commands to another app, usually after a user approval prompt.Apple notarizationAn Apple review process that scans software for known malware and issues a notarization ticket for distribution.Apple Threat NotificationA high-confidence alert that warns a user of possible targeting by advanced spyware.AppleDoubleA legacy Apple file format used to carry Macintosh-specific data and resource information.Appliance controlThe act of triggering or managing a household device through a command path.Appliance deploymentA packaged software or hardware unit that often has its own update path and versioning.Appliance Management ConsoleThe web-based administrative interface used to configure and monitor the SMA1000 appliance.ApplicabilityThe question of whether a vulnerability actually exists in a specific deployment.Applicant datapersonal and administrative information collected during a hiring process.Application access policyA control that can restrict which mailboxes an app is allowed to reach.Application accountThe service identity an application uses to run processes and access local resources.Application Bound EncryptionA Chrome security control that binds some local secrets more tightly to the browser application.Application containera packaged software unit that isolates an app from parts of the host environment.Application crashA failure mode where a program stops unexpectedly, often disrupting the service it supports.Application credentialA secret, certificate, or other proof an app uses to authenticate and request tokens.Application databaseThe internal datastore an application uses to keep core configuration, objects, and state.Application frameworkA reusable software foundation that provides common functions for building applications.Application identityThe identity an application uses to authenticate and request access in a cloud environment.Application IntegrityA control goal focused on ensuring only approved, unmodified software is allowed to run on a system.Application inventoryThe organized view of applications and projects used to assign ownership and track risk.Application passcodeA separate password issued for app or device access, often usable outside the main login flow.Application performance monitoringSoftware that tracks the health and response of business applications and supporting systems.Application permissionA privilege granted to an app so it can access tenant resources based on its assigned scope.Application permissionsApp-only privileges that let software access data without a signed-in user.Application rationalizationThe process of reviewing software to decide whether it should be kept, modernized, replaced, or retired.Application registrationThe step that creates an app identity for use with tenant-integrated authentication or access workflows.Application Security (AppSec)The discipline of finding, fixing, and reducing risks in software applications.Application tokenA credential-like token used by software to establish authenticated access.Application-layer protocol abuseMisuse of normal protocols such as web, DNS, or SaaS APIs to hide malicious traffic.Application-layer storageData kept by a website or plugin outside normal core credential handling, sometimes in custom fields, logs, or exports.Application-level kill switchA scoped control that cuts off a specific app path, credential, or workflow without shutting everything down.Application-Specific PasswordA credential used by older apps or devices that may not follow the organization’s standard MFA flow.AppLockerA Windows feature for restricting apps, scripts, and installers by rule.Apply-time governanceEvaluating infrastructure changes at plan or deployment time before resources are actually provisioned.Appointment management systemsoftware used to manage bookings, scheduling, and related workflows.ApprenticeshipStructured on-the-job learning that turns supervised practice into real expertise.Apprenticeship layerThe early-career stage where people learn core operational skills through practice.Approval chainA sequence of authorizations required before a sensitive action can happen.Approval promptA user confirmation step before a tool performs a sensitive action such as running a command.Approvazione e controlloBoard activities focused on reviewing, authorizing, and monitoring decisions.Approved-provider listA controlled list of external services that security and procurement teams have authorized for use.Approximate measurementA reading that should be treated as close, but not exact.Approximationa result that is close enough for practical use, even if it is not exact.AppSec validationSecurity-focused review of code, patches, or behavior by application security specialists.APRabbreviation used in the source for Sistemi Aeromobili a Pilotaggio Remoto, or remote-piloted aircraft systems.APRA CPS 230An Australian prudential standard focused on operational risk, operational resilience, and service-provider risk.APT36A threat group also known as Transparent Tribe; the cluster is linked to it with moderate confidence.Aquatic environmentswater-based settings such as rivers, lakes, or oceans.ARaugmented reality, digital content layered onto the physical world.arbitrary file overwriteA condition where a program can replace files it should not be allowed to modify.Arbitrary File-System ReadA vulnerability that can allow unauthorized reading of files stored on a server.Arbitrary Script ExecutionThe ability to run attacker-influenced code or scripts on a target system.Arc flashA rapid release of electrical energy that can cause burns, injury, and damage when an arc forms between conductive parts.Arc-rated PPEProtective clothing and gear designed to reduce injury risk from electrical arc-flash exposure.Arcade topperA decorative or functional unit placed above an arcade-style machine.Architectural CGIComputer-generated imagery used to present buildings and spaces, often involving large project assets.Architectural lightingLighting planned as part of a building or interior design, not just added decoration.Architecture and integrationThe way a new application fits into existing systems, dependencies, and workflows.Architecture Decision RecordA short record that preserves a decision, its context, and its consequences.Archivea stored collection of files or documents that may be singled out in an extortion claim.Archive abuseMisuse of compressed files to hide payloads, steer file placement, or trigger execution during extraction.Archive Collected DataPacking stolen files into compressed or encrypted containers before transfer.Archive exploitationAbuse of compressed-file handling to place or run content in unintended ways.Archive exposurerisk that stored documents can be copied, leaked, or used for coercion.Archive extractionThe process of unpacking files from containers such as ZIP or 7z archives.Archive extraction boundaryThe intended limit of where files from an archive are allowed to be written during unpacking.Archive leakalleged exposure of stored files or records.Archive segmentationSeparating bulk file stores from core operational systems.Archive separationKeeping different categories of data in distinct storage locations.Archive systemA repository that stores older records not used in daily operations.Archive validationchecking whether claimed files are genuine, complete, and sensitive.Archived codepreserved historical website or application code that can reveal old routes and logic.Archived contentRecorded material that remains available after a live event ends.ArchivingThe preservation of digital material for future access, study, or reference.Argument collapseA failure mode where generated reasoning converges on a narrow set of arguments and structures.Argument handlingThe way a program receives and passes command-line parameters, critical for safe automation.Argument injectionA related issue where input alters command-line options or parameters rather than the command itself.Arm architectureA CPU design commonly used in efficient, low-power devices.ARM-based Windows devicesWindows PCs built on Arm processors, where app compatibility can differ from traditional x86 systems.AROSan open source operating system inspired by the Amiga architecture and user experience.ARRAnnual recurring revenue, a subscription-style metric that tracks predictable yearly income.Art. 25-viciesThe new article introduced by draft decree no. 418, based on available information baseline.Art. 43-bis L.A.the legal provision cited as the basis for the compensation regime.Art. 437-bisA newly discussed legal provision linked to AI-related security and oversight duties.ARTEXA contextual reference to an open-source penetration testing platform reportedly used in the campaign.Article 10 GDPRthe rule covering personal data linked to possible criminal offenses.Article 102 TFEUEU competition law provision that prohibits abuse of a dominant market position.Article 14The CRA provision that covers vulnerability and incident reporting.Article 17The Italian NIS2 provision discussed here, centered on formalized cybersecurity-information sharing and related notification steps.Article 22A GDPR provision that can apply to decisions based solely on automated processing.Article 24The GDPR provision requiring controllers to implement appropriate technical and organizational measures.Article 24 GDPRthe rule requiring controllers to implement appropriate technical and organizational measures.Article 32The GDPR provision requiring appropriate technical and organizational measures to secure personal data.Article 4The provision in the AI Act that requires providers and deployers to take measures for sufficient AI literacy, based on role and context.Article 48The DSA provision that covers voluntary crisis protocols for informational emergencies.Article 50 AI ActThe EU transparency rule set that covers certain AI-generated or manipulated outputs.Article 6The AI Act provision used to determine whether a system follows the high-risk classification route.Article 69The transitional rule that brings some reporting duties into effect before the full regime applies.Article 73The EU AI Act rule that requires providers of covered AI systems to report serious incidents within set deadlines.Article 9 GDPRthe EU rule that lists special categories of personal data requiring stronger protection.Article 99The AI Act provision that sets administrative fine ceilings for different categories of infringement.Artifact governanceRules and controls for where generated files are stored and who can access them.Artifact hygieneThe practice of reviewing, isolating, and retiring old files that may still carry risk.Artifact repositoryA system that stores and serves software packages, builds, and dependencies for development workflows.Artifact reviewThe process of inspecting model files, code, or packages before they are approved for use.Artifact storeThe storage layer used for files created by machine learning workflows, such as models and outputs.Artifact taphonomyThe study of how objects change from use to burial to discovery.ArtifactoryA repository manager used to store, manage, and distribute software packages and build artifacts in development pipelines.Artificial agencyA philosophical lens used to emphasize what systems can do - act, adapt, and affect environments - rather than whether they possess human-like consciousness.Artificial gravitythe effect of simulating gravity through motion, usually by rotation.Artificial Intelligence (AI)Software techniques that perform tasks associated with human judgment, such as classification, prediction, or language generation.Artificial Intelligence Management System (AIMS)The organizational framework used to govern policies, objectives, and processes for AI.Artificial StateA concept for describing governance that is increasingly mediated by platforms, data systems, and automated decision tools.ArubaOS-CXThe network operating system used on HPE Aruba Networking switches.ARXA design pattern using Addition, Rotation, and XOR, common in compact software routines and sometimes adapted for obfuscation.AS-pathThe sequence of autonomous systems a BGP route advertisement has traveled through or claims to have traveled through.ASARElectron’s archive format for bundling application code and assets into a packaged file.ASCGA Brocade support-connectivity component associated with secure proxy functions.ASCII smugglingAn evasion method that hides content by inserting invisible or non-rendering Unicode characters into text.ASCONFThe SCTP message format used for dynamic address reconfiguration.ASICApplication-Specific Integrated Circuit, a chip built for a particular task rather than general-purpose computing.ASLR (Address Space Layout Randomization)A defense that randomizes memory locations to make exploitation harder.ASMFActive Substance Master File, a regulatory file for active ingredient details.ASN.1A standard notation for encoding structured data in many security and telecom protocols.ASP.NET machine keyA secret used by ASP.NET applications to protect tokens and state; if abused, it can complicate cleanup and persistence.Aspect-Aware SummarizationA method that groups feedback by topic so users can inspect evidence more clearly.ASPMApplication Security Posture Management, a layer that consolidates and prioritizes application security findings.Assembly workflowThe step-by-step process used to put a design together correctly.AssertionA trusted statement used in federation to convey identity or authentication information between systems.Assessment boundaryThe defined set of systems and environments included in a compliance review.Assessment designThe way an exam or assignment is structured to measure learning and reasoning.Assessment pauseA suspension of certification timing that can delay verification without removing underlying obligations.Assessment preparationThe work of collecting evidence, scoping systems, and readying controls for review.Assessment recordsinternal security or audit material that can reveal weaknesses if exposed.Assessment scopeThe systems, controls, and operational practices included in a review.Assessment systemsinternal tools that can store hiring, scoring, and review records.Assessment toolA system that gathers inputs and turns them into an evaluation.Assessment validityThe degree to which an exam measures the skill or knowledge it is meant to test.Assessor standardsThe qualifications, rules, and methods used to judge whether a security control meets a required benchmark.AssetAny system, service, or resource that has value and needs protection.Asset contextInformation about what a device is, where it sits, and why it matters operationally.Asset dataMeasurements and status information collected from equipment or plant systems.Asset dependencyThe changing relationship between multiple financial instruments.Asset documentationthe records that identify, describe, and support ownership of a property or device.Asset EnrichmentAdding context such as device identity, product data, and lifecycle information to improve security decisions.Asset freezingrestricting movement of funds through custodial or exchange cooperation.Asset graphThe interconnected map of devices, services, workflows, and AI assets inside an organization.Asset IntelligenceEnriched device context used to identify, classify, and prioritize assets.Asset ownerThe organization responsible for operating and securing an OT environment.Asset pipelineThe workflow used to move art, audio, and other content into a finished build.Asset provenanceThe record showing where images, code, audio, and other content came from.Asset recoveryThe legal and administrative process of tracing, seizing, and managing property tied to proceedings or sanctions.Asset retrievalThe process by which macOS fetches downloadable components such as AI models to a device.Asset tracingThe process of following stolen funds across addresses, chains, and exchanges.Assets under managementThe total value of capital a firm oversees on behalf of investors or clients.Assistive audioaudio technology intended to help users hear, understand, or interact more effectively.AssumptionA condition a system relies on without fully verifying it in every case.Assurance boundaryThe exact systems, controls, and interfaces included in a security review.Assurance modelA control framework that proves a system stayed within approved purpose, boundaries, and operating conditions.AstarothA banking trojan family also known as Guildma, associated with credential theft and regional targeting.Astensionismo giovanilelow voter participation among younger age groups.Astrophysical plasmaplasma found in space, including stars, winds, and other high-energy environments.Asymmetryan uneven distribution of power or control between different actors.Async HttpClientA non-blocking HTTP client design that handles requests and responses without tying up the calling thread.AsyncOSCisco’s software platform for Secure Email Gateway.AT CommandA control instruction used to manage modem behavior and query cellular functions.AT&C lossesAggregate Technical and Commercial losses, a measure that combines physical energy loss and non-technical revenue loss.Atlassian CrowdAn identity and access management product used for centralized authentication and user management.ATmega32U4A microcontroller with integrated USB support, often used in compact embedded devices.AtmosphereA layer of gases surrounding a planet.Atomic StealerA macOS infostealer family associated with credential and data theft.ATSCThe digital television standard family associated with North America.ATT&CK T1090The MITRE technique family for proxy-based command-and-control and traffic relay behavior.Attachment blockingA mail security control that prevents selected file types from being delivered.Attachment deceptionA social-engineering trick that makes a malicious file look harmless by disguising its real type or purpose.Attachment filteringMail-security controls that inspect or block risky files before they reach users.Attachment ManagerThe Windows component that tracks file origin and helps decide when warnings should appear.Attachment parsingThe process of reading and interpreting attached files, which can become a security risk when the file is malicious.Attachment processingThe steps software uses to open, read, or modify files users send.Attack attributionthe process of linking activity to a specific actor.Attack deadlineA timed ultimatum used to intensify pressure on a target.Attack evidencetraces left behind that can help defenders understand what happened after an incident.Attack ExposureThe degree to which a system can be reached or contacted by a potential attacker.Attack graphA map of possible paths an attacker can follow through systems, identities, and services.Attack hash codea fixed digital fingerprint attached to a case record or artifact; its exact type is not specified here.Attack identifiera code used to label or track a reported or claimed incident.Attack orchestrationCoordination logic that sequences attack steps and routes actions across multiple targets.Attack Path AnalysisThe process of mapping how an attacker could move through a network toward a target.Attack timelineThe sequence and duration of stages in an intrusion, from initial access to follow-on actions.Attack validationThe process of checking whether a vulnerability is present, reachable, and exploitable in a specific environment.Attack-path analysisA method for identifying the reachable chains of weaknesses an attacker could combine to reach a target.Attack-path correlationA method for linking separate weaknesses into a likely route an attacker could take.Attack-path modelingPlanning possible chains of steps that connect findings into a follow-on testing route.Attack-path validationTesting whether separate weaknesses can be chained into a real compromise route.Attacker artifactsFiles or data recovered from adversary infrastructure that help reconstruct parts of an intrusion.Attacker attributionlinking activity to a group, which still requires verification.Attacker behaviorObservable actions that can indicate tactics such as lateral movement or command and control.Attacker emulationDefensive training that recreates adversary behavior in a safe environment to improve detection and response.Attacker SophisticationThe level of skill, resources, and experience an adversary brings to an operation.Attended AutomationAutomation that runs with a person present, often allowing human input during the process.Attention managementThe practice of organizing time and tools to support sustained concentration.Attention surfaceAny part of a digital interface that competes for a user's focus.Attitude controlmethods used to orient a moving object in space.Attivismo connettivonetworked mobilization built through sharing, linking, and online connection rather than centralized coordination.Attivismo informalepolitical engagement outside traditional party structures or formal organizations.Attività inventivaThe inventive work that gives a patentable idea its technical substance.Attribution confidencehow strongly evidence links an event to a specific actor.Attribution contextTechnical clues that may suggest a link to a threat cluster, but do not by themselves prove identity.Attribution granularityThe level of detail used to assign cost or activity to a user, project, request, or workload.Attribution indicatorA technical clue, such as shared infrastructure or delivery paths, used to connect related cyber activity.Attribution of ActionThe process of determining who is legally or operationally responsible for an action taken by a system.Attribution riskThe chance that viewers will wrongly associate content with a person, campaign, or organization.Attribution uncertaintythe gap between a named claim and confirmed technical proof.AttributionControlThe MapLibre UI component used to display map credits and attributions.Audience ModelingThe practice of estimating how different groups may react to content or products.Audio CaptureMalware collection of sound from a device microphone or audio input path.Audit consolidationThe process of combining logs and records from multiple systems into one monitoring view.Audit evidencerecords or observations used to verify that a control works in practice.Audit functionan independent review role that checks controls, evidence, and risk handling.Audit readinessThe state of being able to quickly produce evidence, records, and controls for inspection.Audit recordsLogs that document transaction and matching activity for review.Augmented Reality (AR)A technology that overlays digital content onto the physical world through devices such as headsets or tablets.Aura/API surfaceA Salesforce request surface discussed in portal-hunting contexts for guest-user enumeration and content retrieval.Auth proxyA setup where authentication decisions are delegated to an external process.Authenticated accessAccess obtained with valid credentials, often a stepping stone for deeper abuse.Authenticated account holderA user who has logged in successfully and can access permitted functions.Authenticated browser sessionA browser state in which a user is already logged in and the session carries their authority.Authenticated Command InjectionAn attack path where a logged-in user can force a system to run commands through crafted input.Authenticated Exploit PathAn attack route that normally requires a valid login, though some flaws also have paths that do not.Authenticated PairingA BLE security step that verifies devices before trust and encrypted communication are established.Authenticated Project MemberA logged-in user with access to a project, often enough to trigger trusted workflows.Authenticated RCEA remote code execution flaw that requires a valid login before the vulnerable path can be reached.Authenticated sessionA logged-in browser or app session that carries the user’s existing access and privileges.Authenticated session stateThe active proof that a user has already logged in and remains signed in.Authenticated user sessionA logged-in state where a system recognizes the user and applies their permissions.Authentication activitylogin behavior that can reveal suspicious access attempts.Authentication anomaliesUnusual login activity that can indicate account abuse or intrusion attempts.Authentication attacksrepeated attempts to test, reuse, or guess login details.Authentication callbackA server-side function that decides whether a login attempt can proceed.Authentication checksverifying that users, services, and devices are still validated correctly after change.Authentication codesOne-time verification values used to confirm identity during login or payment steps.Authentication controlA mechanism that verifies identity and limits access to approved users, systems, or actions.Authentication controlsChecks that verify whether a request or user is legitimate.Authentication eventslogin and access records that can help verify unusual account activity.Authentication filterA servlet-layer control that checks whether a request should be allowed past the login boundary.Authentication flawa weakness in access checks that may let an attacker bypass normal login controls.Authentication gapA mismatch where some access paths have stronger login controls than others.Authentication gatewayA system component that mediates login checks between users, directory services, and protected applications.Authentication HashA cryptographic representation of a secret used to verify credentials without storing plaintext passwords.Authentication hygienebasic practices that help verify user and device identity securely.Authentication logicthe rules a system uses to verify that a user is allowed to sign in.Authentication materialinformation a system uses to prove identity or authorize access.Authentication metadataInformation tied to login or access activity that can be sensitive if exposed.Authentication MethodA credential or approval path used to verify a user, such as a passkey or app prompt.Authentication policyA rule set that defines how users prove identity before getting access.Authentication Policy AdministratorA privileged role that can manage authentication method settings and related policies.Authentication recordslogs that can help confirm whether accounts or sessions were used legitimately.Authentication redirect flowThe part of a web app that sends users onward after login, often handling return or state parameters.Authentication SecretSensitive material used to prove identity, such as tokens or signing keys.Authentication servicesSystem components that handle identity checks and access decisions.Authentication SystemsMechanisms that verify identity, such as certificates, logins, tokens, and digital signatures.Authentication-as-a-Service (AaaS)Hosted identity services that manage sign-in, user accounts, and token handling for applications.Authenticator RevocationDisabling compromised passwords, tokens, or sessions so they can no longer be used.Authenticity checkA method used to confirm that a product, part, or component is legitimate.Authenticity VerificationChecks that help confirm software, firmware, or hardware is genuine and has not been altered.Author roleA WordPress role with content-creation privileges; capabilities can vary by configuration.Author-level accountA WordPress role that can publish content and, by default, upload files.Authorial responsibilityThe obligation to stand behind the content, decisions, and disclosures tied to a work.Authoritative DNSThe official DNS servers that answer for a domain zone.Authoritative name serverA DNS server that provides the official records for domains it manages.Authoritative sourcethe system treated as the trusted reference for a given data field.AuthoritativenessThe degree to which a source is seen as credible, reliable, and worth referencing.AuthorityThe ability to make decisions, direct action, and approve resources.Authority driftThe gradual shift of decision-making power from people to automated systems without a clear reassignment of responsibility.Authority requestA request that appears to come from a government or legal body and can trigger special handling.Authority signalA trust indicator that helps a system judge whether content appears credible or relevant.Authorization bindingThe practice of tying approval to one exact action, resource, and destination.Authorization chainThe formal sequence of approvals required before a sensitive security action can proceed.Authorization checkA control that verifies whether a request is allowed to perform a sensitive action.Authorization ChecksControls that decide whether a request or user is allowed to perform an action.Authorization controlsRules that decide which terminals or users are permitted to connect to a service.Authorization layerA control point that decides whether a requested action should be allowed at runtime.Authorization regimethe set of approvals required to build or operate network infrastructure.Authorization Regression TestingRepeated testing to make sure access-control fixes stay intact after code changes and feature updates.Authorization weaknessA flaw where software checks access incorrectly, allowing actions that should be blocked.Authorization workflowThe process used to approve and register devices or users before access is granted.Authorized attackerAn attacker who already has some valid access or trust relationship before triggering the flaw.Authorized paymentA transfer approved by the user, even if that approval was manipulated.Authorized viewsA warehouse feature that exposes only approved slices of data without opening the source dataset directly.AuthorshipThe responsibility and ownership of a piece of writing, including who created and edited it.Auto modeA higher-autonomy mode that uses automated screening to decide whether actions can proceed.Auto-configurationFramework-driven setup that enables features based on detected dependencies or settings.Auto-prepend fileA PHP setting that forces one file to run before the main script.Auto-propagating wormMalware that can replicate itself without manual copying, often by abusing trusted workflows.Auto-remediationA feature some CSPM tools may use to correct certain risky settings automatically, usually with policy controls.AutocatalysisA reaction in which the product helps drive its own formation, strengthening the reaction over time.AutofatturaSelf-issued invoice used in specific regulatory situations.AutoItA legitimate Windows automation language that attackers can abuse to run scripted malicious logic.Automated AI ValidationTesting that looks for unsafe or noncompliant behavior before or during deployment.Automated classificationA system that sorts or labels inputs based on learned patterns and predefined task goals.Automated CollectionThe use of scripts or software to gather files or information at scale before theft.Automated compliancecontrols and policy checks embedded in systems so governance can run continuously.Automated controlsSoftware-based checks that help enforce rules, detect anomalies, or approve transactions.Automated cyber attackA cyber operation in which software performs attack steps with little or no human intervention.Automated Decision-Making System (ADS)Software that makes or helps make decisions by scoring, ranking, or filtering people.Automated deletion requesta system-generated opt-out or removal notice sent on a user's behalf.Automated exploitationAttacks that use tools to scale scanning and abuse of weaknesses with minimal manual work.Automated fraudrepeated digital abuse designed to gain money, access, or advantage through machine-driven workflows.Automated indicatora metric computed by a system to help track performance or deviation.Automated patchingThe use of software or AI to generate and validate code fixes for vulnerabilities.Automated responseSecurity actions triggered by software without manual approval, such as isolating a host or disabling access.Automated submissionA report produced with scripts or other tooling, often at high volume and with limited manual verification.Automated Vulnerability TestingRepeated or scripted probing of systems to find weaknesses at high speed.Automatic backupA feature that copies files or photos to the cloud without manual upload each time.Automatic failoverA design that lets malware switch to a backup server when the primary path stops working.Automatic Identification System (AIS)A maritime radio system that broadcasts vessel identity and movement information.Automatic reconnectionA device feature that joins known networks without fresh user approval.Automatic Renewala billing setting that extends a subscription unless canceled.Automatic Speech Recognition (ASR)Software that converts spoken language into text, often used in voice assistants and call systems.Automatic updateThe browser’s built-in mechanism for receiving and applying security fixes quickly.Automatic updatesA patch delivery model that installs browser fixes without relying on users to update manually.Automatic verificationSoftware checks that can validate fields, consistency, or completeness, but not necessarily truthfulness.Automation abuseThe use of automated tools to increase the speed, scale, or adaptability of malicious activity.Automation ExposureThe extent to which a job or process contains tasks that could be machine-assisted or automated.Automation permissionA macOS setting that lets one app control another app or system function.Automation planethe control layer that manages security actions and updates in an automated environment.Automation pressureThe tendency for software to replace or reshape tasks once done by people.Automation workflowscripted release steps that can be misused if credentials are stolen.AutomorphismA symmetry that maps a mathematical structure onto itself without changing its core form.Autonomous agentsSoftware systems that can carry out tasks with limited human intervention across a workflow.Autonomous AI agentAn AI system that can plan and take actions using tools with limited human input.Autonomous AI agent systemSoftware that can plan and carry out multi-step tasks with limited direct human input.Autonomous Completion RateAn article-proposed metric for the share of eligible tasks finished correctly without human intervention.Autonomous controlleran organization that determines its own purposes and means of processing.Autonomous cyber incidentA security event in which software behaves with limited human direction and produces unexpected or risky actions.Autonomous cyberattackAn attack chain that can be planned or executed by an AI system with little human direction.Autonomous daemonA background service that can keep running and making decisions with limited direct input.Autonomous defensesSecurity tools or workflows that use AI to analyze, decide, or respond automatically.Autonomous DetectionSecurity analysis or response that operates with minimal human intervention.Autonomous penetration testingAutomated security testing that simulates attacks with limited human input.Autonomous pentestingSecurity testing where software sequences tasks and adjusts actions with minimal human input.Autonomous responseAutomated security actions that a platform can take without waiting for a human analyst.Autonomous Security AgentAn AI-driven system that independently searches for vulnerabilities in software or systems.Autonomous vulnerability discoveryAI-driven identification of software flaws with limited direct human input.Autonomy debtRisk created when automation grows faster than oversight and recovery controls.Autopilot agentAn AI agent designed to take action in a workflow after policy checks or human approval, rather than only suggesting next steps.Autostart LocationA Windows path or setting that can cause a program to run automatically during login or startup.AutoTypeA Fastjson feature for automatic type resolution during parsing, historically sensitive from a security perspective.Aux inputa port that accepts an external audio signal from another device.AV/EDRSecurity tools designed to detect malicious activity and block ransomware execution.Availability errora message showing that a service or listing cannot currently be reached.Availability lossA service outage caused by overload or disruption of access.Availability regressionA software update side effect that disrupts access or service stability instead of adding a new feature.Availability targeta stated uptime level a service aims to maintain.Avatara digital figure or interface that mediates interaction between a person and a system.Average powerthe long-term energy output measured over time.Aviation communicationsThe systems and links used to exchange operational information between aircraft, air traffic control, and supporting services.AVIFA modern image format designed for efficient compression on the web.AvionicsElectronic systems used on aircraft for navigation, communication, sensing, and control.AvowalThe formal public acknowledgment of an intelligence or security role or identity.AWAITINGa status label shown on the listing, with no additional explanation in the source.AWAITING statusA label that can signal a pending or incomplete listing state.Awareness and trainingRelated but distinct education concepts used in cybersecurity programs.Awareness ProgramA structured effort to improve user behavior and decision-making through repeated security education.AWS BudgetsA cloud budgeting tool used to set spending thresholds and trigger alerts.AWS ConfigAn AWS service that records configuration changes for cloud resources and supports security and forensic review.AWS credentialsSensitive keys and tokens used to authenticate to Amazon Web Services.AWS Data ExportsAWS service for exporting cost and usage data into formats that can be queried and analyzed downstream.AWS EC2Amazon’s virtual server service, which attackers can abuse to spread login attempts across many source IPs.AWS IAMAmazon Web Services Identity and Access Management, the policy system that controls what identities can do in AWS.AWS IAM access keyA credential used to authenticate programmatic access to AWS services.AWS MarketplaceA service that can be involved in some Bedrock third-party model access and subscription flows.AWS OrganizationsAWS’s multi-account management service, which can help centralize or reduce root credential exposure.AWS root userThe top-level identity in an AWS account, with complete control over resources and billing.AWS Secrets ManagerA service for storing and retrieving sensitive data such as API keys and private keys.AWS-native toolsSecurity controls built into Amazon Web Services itself.AWSCompromisedKeyQuarantineAn AWS-managed policy that restricts risky actions after a key is treated as exposed.AxiosA JavaScript HTTP client library used in browser and Node.js environments.AzobenzeneA light-responsive molecule that can switch forms under certain wavelengths.Azure AutomationMicrosoft’s service for running scheduled and on-demand automation workflows in cloud and hybrid environments.Azure consumptionThe amount of Microsoft Azure services and resources used by customers or organizations.Azure Key VaultA Microsoft service for storing and managing secrets, keys, and certificates more securely than embedding them in code.Azure PolicyA governance service used to apply rules and standards across Azure resources.Azure resource lockA protection setting that can block deletion or modification of selected resources.Azure Storage account access keyA powerful secret that can authorize access to data in a storage account.Azure tenantThe identity and access boundary for an organization in Microsoft cloud services.Azure Virtual DesktopMicrosoft’s cloud desktop platform for delivering remote Windows sessions to users.