Conventional security controls are standard defenses designed to prevent or detect threats. They include web and email filters, malware scans, reputation checks, and policies that restrict risky actions. These controls help block known malicious content and suspicious activity before it reaches users or systems.
Attackers may try to bypass these defenses by persuading a person to perform the dangerous step. In ClickFix-style attacks, for example, a user is tricked into copying a command from a webpage and pasting it into a system prompt. Because the user initiates execution, filters and scans may not catch the action. Layered defenses-such as clear warnings, restricted command execution, and user training-can help address this gap.