Viernes 16 Octubre 2026 17:04:04 GMT+02:00
Netcrook
WIKICROOK
TÉRMINOS TÉCNICOS
-nommu LinuxA Linux variant intended for systems that do not include an MMU..csprojAn XML-based project file for C# development that defines build settings and imported logic..csproj fileA Microsoft project file that tells MSBuild how to compile, package, and deploy a .NET application..dcma file extension commonly used for medical imaging data..fsaA sample file format used in fragment analysis workflows..git directoryThe hidden folder that stores Git repository objects, references, and configuration..hidA sample file format used in human-identification workflows..NET assemblyA managed code package that can be loaded by the .NET runtime, including from memory in some workflows..NET Native AOTA .NET build mode that compiles code ahead of time into native binaries, reducing dependence on a runtime JIT..NET runtimeThe execution environment for managed Windows applications, including startup settings and loading behavior that attackers may try to alter..terraform.lock.hclTerraform’s dependency lock file that pins provider selections and checksums for review and verification..vcxprojAn XML-based project file for Visual C++ development that controls build configuration and related imports..wpress archiveThe backup file format used by the plugin to package site data for migration and restore.§34 BNDGA German legal provision that, under defined conditions, allows certain BND access to foreign IT systems abroad.*nix worldA broad shorthand for Unix and Unix-like environments./24 NetworkAn IPv4 subnet containing 256 addresses, often used as a useful clustering unit in threat hunting./dev/vhost-netA Linux device node used for host-side acceleration of virtual networking./wp-adminThe WordPress administration area where site operators manage content, users, and settings.$request_filenameAn NGINX variable that resolves the file path for the current request based on the URI and mapping directives.0xc0000005A Windows error code for STATUS_ACCESS_VIOLATION, commonly seen in application crashes.0xc0000409A Windows fail-fast exception code that terminates a user-mode process immediately.11 Verification: A biometric check that compares one face against one claimed identity.1 TbpsOne terabit per second, a traffic rate that can severely strain many defenses and networks.1-bit CPUA processor that handles data one bit at a time, usually for narrow control or decision tasks.1024-bit RSAAn older RSA key size that is widely considered weak by modern standards.1080pA high-definition format with 1,920 by 1,080 pixels.112The European emergency number used to reach public-safety services across member states.12 nautical milesan operationally important offshore boundary; in the source context, it marks the point after which the cruise eSIM is said to activate.120 VACA common North American household voltage level.127.0.0.1the local loopback address, used for traffic that stays on the host.16-bitA design where data paths or registers process 16 bits at a time.16K displayA screen with extremely high resolution, far above common consumer displays.24/7 SOCA round-the-clock security operations center that monitors alerts and coordinates response.24H2A Windows 11 feature update version.25H2A Windows 11 feature update version or targeted release designation.26 GHz bandA high-frequency spectrum range used for wireless communications.28 GHz bandA high-frequency spectrum range used for capacity-heavy wireless services and shared coordination challenges.2D gameA game built on flat graphics with width and height, not depth.2FA Backup CodeA recovery code that can bypass a second authentication step if it is stolen.2FA extensionA browser add-on used for two-factor authentication workflows, which can become a high-value target on infected endpoints.2FA indicatora field that can show whether multi-factor authentication is enabled for an account.2FA scratch codesBackup codes used to complete two-factor authentication if the normal method is unavailable.2GAn older mobile standard with weaker security properties than newer cellular generations.2G downgradeA tactic that pushes a phone onto a weaker cellular generation where attacker control is easier.2G networkAn older mobile standard with weaker security properties than newer cellular generations.2G shutdownDisabling legacy 2G support to reduce exposure to weaker cellular fallback paths.3270 screensTerminal-style interfaces associated with traditional mainframe workflows.389 Directory ServerAn LDAP directory server used as the identity store behind FreeIPA.3D audioAn immersive playback format designed to create a spatial sound effect for supported devices.3D displaya visual output designed to create an apparent sense of depth.3D gameA game that uses depth as well as width and height to create spatial visuals.3D-printed gridA printed structural pattern that can add spacing, shape, and visual order to a build.3D-printed skinA manufactured outer layer that can add sensing or protective functions to a device.3v3 modeA smaller team format with three players per side, usually designed for faster matches.4G EPCThe Evolved Packet Core, the control and packet core used in LTE networks.4KA display resolution class widely used in televisions, monitors, and signage.4K Ultra HDA very high-resolution video format with more detail than standard HD playback.5G coreThe central 5G architecture that manages authentication, mobility, and session services.5G Stand AloneA 5G architecture that uses a native 5G core instead of relying on older mobile core components.5G StandaloneA 5G architecture with a standalone 5G core, enabling advanced service control and differentiation.7726A carrier short code commonly used to forward suspicious spam or scam texts for review.8-bitA computer design built around 8-bit data processing, common in early home computers.8-bit computerA machine built around a processor design that handles data in 8-bit chunks.8-bit home computerA computer built around an 8-bit processor, usually with tight limits on memory and storage.8-bit microprocessorA processor designed to handle data in 8-bit chunks, common in early computing.8087Intel’s early floating point coprocessor used with x86 systems.8KA higher-resolution display standard that remains uncommon in everyday viewing.A fasceA tariff model where prices vary by time band or usage period.AAAAuthentication, Authorization, and Auditing, the access-control layer that verifies users and logs activity.AADSTSMicrosoft Entra error code family returned during authentication and token processing failures.AARRRA lifecycle framework covering Acquisition, Activation, Retention, Referral, and Revenue.AbandonmentThe point at which a user stops using a tool after trying it, signaling loss of fit or value.AbandonwareSoftware that is no longer maintained or supported by its original developer.ABAP CloudSAP's modern development model for cloud-ready apps and extensions with stricter code boundaries.ABINBrazil’s intelligence agency, named in the resolution as the central body for monitoring threats.AblationThe removal of material by a focused energy source.Abnormal loginA sign-in pattern that differs from expected behavior and may merit investigation.Absenteeismrepeated absence that can disrupt continuity in learning and practice.Abstraction LayerA software layer that separates application logic from specific model APIs, making replacement easier.Abuse MonitoringA security control that looks for misuse, fraud, or policy violations using prompts, outputs, metadata, or derived signals.Abuse-monitoring logsPlatform logs used for trust-and-safety monitoring and policy enforcement.AbuseFilterA MediaWiki control used to detect or block patterns that look like spam or abuse.AC-3A compressed audio format commonly associated with Dolby Digital playback.Academic integrityThe principle that student work should reflect genuine effort and authorized assistance only.Acceptable use policyRules that define how a platform or service may be used.Accepted domainA domain Microsoft 365 recognizes as belonging to the tenant for mail-flow decisions.Accertamentoan administrative assessment used to verify whether a charge is due.AccessCloudflare’s identity-aware access product for enforcing authentication and policy at the application boundary.Access at the point of needHaving a service available where and when users actually require it.Access boundariescontrols that limit who can reach sensitive records and systems.Access boundarythe point where one system or role should stop seeing data.Access brokerageThe criminal trade of buying, qualifying, and selling footholds inside compromised systems.Access CertificationA recurring review process where access is approved, removed, or left in place based on business need.Access checkA control that verifies whether a user or process is allowed to reach a resource or action.Access civicoA transparency mechanism under Italian law that can be submitted electronically and is subject to procedural and privacy-review steps where applicable.Access codeA secret value used to verify identity when logging into an online portal or account system.Access control boundaryA rule or mechanism that separates permitted access from forbidden access.Access databasea Microsoft database format often used for local business records.Access handoffThe moment when verified identity is converted into usable credentials or system access.Access hygienebasic account and privilege discipline that limits misuse of credentials.Access loga record of activity that can help confirm whether a system or file was touched.Access managementControls that decide who can enter systems and use sensitive functions.Access paththe route attackers use to enter or return to a target environment.Access Policy Manager (APM)The F5 BIG-IP module that handles access controls and session decisions.Access recordslogs that help confirm who connected to systems and when.Access Rights ManagerAn enterprise tool for managing, provisioning, and auditing user permissions across connected systems.Access segmentationseparating systems and files so one compromise does not reach everything.Access separationlimiting who can reach sensitive records or functions.Access sessionAn ongoing remote connection used for unattended or recurring administration.Access sprawlexcessive or poorly controlled permissions across accounts, services, or workflows.Access validationchecking logs and systems to confirm whether unauthorized entry occurred.Access verificationchecking logs and permissions to confirm what actually happened.Access violationA crash condition where a process touches memory it is not allowed to use.Access-control failureA defect where permissions are applied, retained, or revoked incorrectly.Accessibility abuseMisuse of Android accessibility features to observe or manipulate on-screen activity.Accessibility APIAn operating system interface that exposes UI elements to assistive tools and automation.Accessibility AuditA review of a website or app to find barriers that may prevent people from using it effectively.Accessibility automationLegitimate control features that help users operate a device through alternate inputs.Accessibility baselineThe minimum design and testing standard needed for a site to work with assistive technologies.Accessibility permissionsAndroid privileges that let apps observe the interface and perform actions for assistive use cases.Accessibility testingchecking whether a product works for people with disabilities and with assistive tools.Accessibility ToolsGoogle’s classification for apps whose core purpose is disability support, not general automation.Accessibility-first designAn approach that builds usability for people with different abilities into the product from the start.Accessibility-service abuseMisuse of Android accessibility features to gain extra control over device interaction.Accessible by designAn approach that builds accessibility into systems, content, and documents from the start rather than retrofitting it later.Accessory compatibilitywhether add-ons and peripherals continue to work with a product.Accessory validationThe process of checking whether an attached peripheral is recognized and acceptable.Accidental disclosureUnintended release of information to people who were not authorized to see it.Account activitylog evidence that can help confirm whether credentials or sessions were misused.Account activity reviewchecking logins, changes, and unusual access for signs of misuse.Account enforcementActions such as suspension or bans used to stop abuse.Account entitlementthe right of a customer account to access a specific service or feature.Account EnumerationA weakness where responses reveal whether a username or email exists, helping attackers shortlist targets.Account freezeA legal or operational restriction that prevents access to funds or account functions.Account governanceRules and controls that manage how accounts are created, used, and reviewed.Account Owner ModelA setup where one primary account controls administration, recovery, and feature access.Account promptA message asking a user to sign in, confirm, or reset access to an account.Account recovery abuseMisuse of password-reset or identity-verification flows to gain access.Account reviewA defensive check for unusual access, permissions, or login activity.Account SecurityThe controls that protect login access, such as strong passwords and multi-factor authentication.Account stateThe stored data that reflects a user's progress, settings, or status.Account suspensiona restriction that temporarily or permanently blocks access to a platform account.Account telemetrybehavior data that can help spot unusual logins, access, or fraud signals.Account throttlingLimiting signups or actions to slow abuse and contain suspicious activity.Account validationchecking whether user or admin logins show suspicious activity.Account verification portalA secure site where users can sign in directly to confirm whether an account alert is genuine.Account-based accessA system where use is controlled through a user account rather than only through possession of media.Account-Based CreditA stored balance tied to a user account that can be redeemed later.Account-connection flowA process where a user authorizes a service or app to link to an existing business account.Account-connection pageA workflow screen that asks a user to link or authorize an account, often resembling a normal business integration step.Account-level credentialA secret that applies broadly across resources in one cloud account rather than to a single narrow action.Account-level riskA security score or judgment based on the behavior of one account alone.Account-linked serviceA feature that works through a signed-in user account and its permissions.Account-Scoped ContextPrivate session data tied to a user account, such as chat history or personalization settings.Account-to-organization conversionA workflow that changes a personal account into an organization account and may alter ownership and access rules.Accountability chainThe series of people, organizations, and controls responsible for a system’s design and use.Accounting boundaryThe defined scope used to decide which systems, processes, or facilities are included in a measurement.Accounting CloseThe process of reconciling and finalizing financial records at the end of a period.Accounts payableThe business process used to receive, validate, and pay supplier invoices.Accounts ReceivableMoney customers owe for products or services already delivered.AccrediaThe Italian accreditation body, named in the draft in connection with CRA-related responsibilities.Accreditation bodyAn organization that evaluates and recognizes the competence of certification bodies.Accumulationbuying activity that increases holdings over time.AcetylcholineA neurotransmitter used by nerve cells to pass signals within the nervous system.ACHThe Automated Clearing House network used for electronic bank transfers, including routine business payments.Achievement systemA platform feature that records milestones and rewards player progress.Acid-freea process that avoids using acid in a treatment or preparation step.ACL (Access Control List)Rules that define which users can run which commands or reach which data.Acoustic detectionA method of identifying objects by analyzing sound patterns.Acoustic EnvironmentThe real-world sound conditions around a speech system, including noise, echo, and overlapping voices.Acoustic interferenceOverlapping sound waves that make a signal harder to interpret.Acoustic propulsionMotion generated by sound, pressure waves, or airflow rather than conventional motors.Acqui-hirean acquisition made mainly to bring in a team’s skills and operating style, not just its products.AcquisitionA transaction in which one company buys another and takes control of its assets or strategy.ACRAutomatic Content Recognition, a feature used to identify content on a screen.Acting ministerA temporary officeholder who performs the duties of a minister until a permanent appointment is made.Action ProvenanceEvidence showing what action occurred, when it occurred, and how it was authorized.ACTION recordAn internal task format that can turn model output into a queued work item for another component.ActionsAutomated workflows that run tasks such as tests, builds, or checks.Actions workflowAutomated jobs that run after repository events such as pushes or pull request updates.ActivationThe licensing step that confirms software is authorized for use.Activation conditionsThe specific rules that determine whether a customer can subscribe to an offer.Activation costA one-time charge that can raise the real first-month price of a mobile plan.Activation dataProtected material used to unlock or activate signing capability, separate from the private key itself.Activation feeThe one-time cost charged when a mobile service is started or transferred.Activation fraudUnauthorized or deceptive use of software licensing mechanisms to obtain illegitimate activation.Activation LockAn Apple anti-theft feature that helps prevent a lost or stolen device from being reactivated without the owner’s account access.Activation mechanismThe part of a device that determines when it turns on or off.Activation stateThe status that determines whether software considers itself licensed.Active Debug CodeDevelopment or troubleshooting code left reachable in production software.Active Directory (AD)Microsoft directory technology used to manage authentication, authorization, and enterprise identity in many hybrid networks.Active Directory Certificate ServicesMicrosoft’s Windows PKI role for issuing and managing certificates.Active Directory compromisecompromise or takeover of core Windows identity and access infrastructure.Active Directory Group PolicyA Windows mechanism for centrally applying configuration and control changes across a domain.Active Directory passwordscredentials that can unlock broader access to enterprise resources.Active filterA filter that measures distortion and applies compensating current or voltage dynamically.Active learningAn iterative method where a model helps choose the next most informative experiment or data point.Active modeThe mode in which Microsoft Defender Antivirus provides primary real-time protection and remediation.Active Noise Cancellation (ANC)Audio processing that reduces outside sound by generating opposing sound waves.Active Remote SessionA live connection where an operator can interact with a remote machine.Active researcherA participant counted as active because they submitted at least one vulnerability report in a period.Active StorageThe Rails subsystem for file attachments and on-demand image variants.Active Windows user sessionA logged-in desktop session that is still open and usable on the device.Active-exploitation signalEvidence that a vulnerability is being used in the wild, often used to speed up remediation decisions.Actively exploiteda vulnerability already being used in real attacks.Actively exploited vulnerabilitya flaw that is being used in real-world attacks.Activity-based costingA costing approach that assigns expenses to activities based on the resources they consume.ActivityPubA protocol used by decentralized social platforms to communicate across servers.Actual-consumption billingCharges calculated from measured usage rather than a flat rate.Actuator mechanismThe physical part that moves a disc into position.Ad auctionan automated process that determines which advertisement is selected for placement.AD CSActive Directory Certificate Services, Microsoft’s certificate authority and PKI component for issuing trusted certificates.AD CS templateA certificate template in Active Directory Certificate Services that can become an escalation path if misconfigured.AD FSActive Directory Federation Services, a federation system used for single sign-on and token-based trust relationships.Ad platforma third-party system that may receive browser-level data for advertising or measurement.Ad platform abuseThe misuse of advertising systems to distribute deceptive or harmful content to unsuspecting users.Ad techsoftware and services that automate digital advertising, targeting, and measurement.Ad tech supply chainThe network of brokers, exchanges, and platforms that move an ad from advertiser to publisher.Ad-fraud toolingMalware or automation used to generate fake ad impressions, clicks, or related traffic for profit.Ad-free plana paid tier that removes advertisements from a service.Ad-supported interfacea product design that places sponsored content inside the user workflow.Ad-supported plana lower-cost option that includes advertising during viewing.Ad-tech ecosystemThe network of platforms, brokers, and services that deliver and track digital advertising.AdaptabilityThe ability of malware to adjust to different screens, prompts, or user flows with less manual rewriting.Adaptive attackAn attack that changes behavior, timing, or execution to evade detection.Adaptive AuthenticationA login method that changes the required verification steps based on risk signals.Adaptive GapA term for the distance between AI capability and an organization's readiness to use it effectively.Adaptive interfacea digital interface that changes based on context, behavior, or user needs.Adaptive LearningA training approach that changes content, pacing, or feedback based on learner progress.Adaptive opticsA correction technique that helps compensate for optical distortion caused by imperfect lenses or uneven tissue.Adaptive scoringA risk-scoring approach that updates outputs as new data and patterns arrive.Adaptive testingAn evaluation method that changes question difficulty based on performance to preserve measurement strength.AdaptivenessThe ability of a system to change behavior after deployment.ADB (Android Debug Bridge)A command interface used to communicate with and control Android devices for debugging and automation.ADB / ADB shellAndroid Debug Bridge and its shell interface, which can provide shell-level access to a paired device.ADC (Application Delivery Controller)A device that manages and optimizes application traffic, often at the network edge.Add-onA tool added on top of an existing system without deep integration into daily operations.Add-on signingA Firefox control intended to help verify and govern extensions, reducing the risk of unreviewed or unsigned add-ons in release builds.AdditivesExtra substances blended into a base material to change how it prints or performs.Addon domainA hosting feature that maps an additional domain to content under one account.Address blockA routed range of IP addresses allocated together on the internet.Address translationThe process of converting one memory address form into another so hardware can place data correctly.Adequacy decisionAn EU legal finding that another jurisdiction provides a level of data protection essentially equivalent to EU standards.Adequate measuresMeasures judged sufficient for the protection duty in the relevant context.AdherenceHow closely a patient follows the treatment plan over time.Adjacent accessAn attack condition where the adversary must be near or on the local network or bus rather than attacking from the internet.Adjacent network accessaccess from a nearby network position, not necessarily from the internet.Adjacent-network attackAn attack that requires access to the same local network segment or nearby trust zone, rather than the public internet.Adjacent-network attackerA threat actor who already has access to the local network or can observe it from nearby.ADMASUSTOR Data Master, the operating environment used to manage ASUSTOR NAS devices.Admin accountsprivileged identities that can control system recovery.Admin consentOrganization-level approval for an app to receive permissions across a tenant.Admin gatingA control model where administrators must approve access before users can opt in.Admin keyshigh-privilege credentials that can control sensitive systems and data.Admin portalthe control panel used to manage hosting, mail, DNS, and security settings.Admin REST APIThe administrative interface used by Keycloak to manage users, roles, and other identity data.Admin rightselevated permissions that let a user manage systems, settings, or data.Admin sessionA logged-in administrator browser state that can carry high privileges on the site.Admin tokenA privileged credential that can act with administrative rights.Admin-level accessHigh-privilege access that can change settings, policies, or other sensitive controls.Admin-managed policyAccess rules set by administrators rather than left to ad hoc user consent.Administered tax regimeA setup in which the platform handles certain tax steps on behalf of the user.Administrative account takeoverUnauthorized control of a privileged login that can change system settings.Administrative APIA programmatic interface used to manage sensitive system settings and operations.Administrative burdenThe time and effort required to meet reporting, compliance, or procedural demands.Administrative continuityThe ability of an institution to keep decisions, approvals, and services moving without interruption.Administrative controlThe highest level of device access, allowing broad changes to configuration and behavior.Administrative fineA regulatory penalty imposed for breaking legal or compliance obligations.Administrative frictionthe time and effort required to complete routine business tasks.Administrative loginA privileged account that can change settings, deploy actions, or control other devices.Administrative portalA control surface that can govern access, settings, or connected systems.Administrative privilegesElevated rights that allow a user to make system-level changes.Administrative surfaceThe management interface or controls that configure a system and are often high-value targets.Administrative workflowthe sequence of official tasks that keeps a public process moving.Administrative workflowsthe internal processes that handle records, scheduling, and support tasks.Administrator accessThe highest privilege level in WordPress, with control over settings, users, and content.Administrator authenticationThe process that verifies whether a user can access privileged device controls.Administrator impersonationA condition where an attacker is treated as a privileged admin account.Administrator protectionA Windows security feature that keeps users deprivileged and limits elevation to approved just-in-time actions.Administrator sessionAn authenticated WordPress state that gives a user elevated control over settings, users, and site functions.Administrator takeoverA scenario where attacker activity can lead to control over privileged management accounts or settings.Administrator-level accessThe highest level of control in an application, usually including user, permission, and configuration management.AdministratorAccessAn AWS managed policy that provides full access to AWS services and resources.Administrators groupA privileged group whose membership typically grants high-level control over the identity system.Admissibilitythe legal question of whether evidence can be used in court.Adooption gapThe difference in usage rates between groups, organizations, or regions.Adoption at scaleWidespread real-world use beyond pilots, prototypes, or limited deployments.Adoption continuityThe ability to keep an AI initiative active and useful over time, beyond the pilot phase.Adoption curveThe pace at which people and organizations accept new technology.Adoption theaterA situation where people appear to embrace a new system but keep doing the old work underneath.AdtechAdvertising technology that routes user data, auctions, and targeting signals through multiple platforms and vendors.Adtech identifierA device or browser signal used to recognize, segment, or target a user across ad systems.Advance directive (DAT)A document that records a person's wishes for future medical treatment and care.Advance payment frauddeception that aims to divert money before goods or services are delivered.Advance-fee fraudA scam that asks for upfront payments, such as fees or taxes, before promised money can be released.Advanced chipA highly miniaturized semiconductor used in performance-sensitive computing and electronics.Advanced Data ProtectionApple’s higher-security cloud mode that extends end-to-end encryption to more data, including backups.Advanced DX TalentSpecialized staff who can implement more complex digital and AI-driven business changes.Advanced electronic signatureA signature category that links a signer to a document and can reveal later changes.Advanced Malware Protection (AMP)A malware-defense feature that inspects files and attachments for suspicious behavior or known threats.Advanced Planning and Scheduling (APS)Software used to allocate machines, labor, and materials under production constraints.Adversarial environmentA setting where systems must be defended against active attempts to misuse them.Adversarial ExampleAn input crafted to make a model behave incorrectly.Adversarial Simulationcontrolled exercises that mimic attack behavior to test defenses and response plans.Adversarial thinkingA method of examining how a system might be stressed, misused, or bypassed.Adversary clustera set of related malicious activities that may be tracked under multiple names or aliases.Adversary disruptionActions intended to interfere with a threat actor’s operations or infrastructure.Adversary-in-the-middle (AiTM) phishingA technique where an attacker sits between a victim and a real login page to capture usable session material.Advertised payThe salary or wage listed in a job posting, which may differ from final compensation.AdvisoryA vendor security notice that identifies vulnerabilities, affected products, and patch guidance.Advisory boardA non-executive group that provides expertise and guidance but does not usually run day-to-day operations.AdXan ad-tech platform tied to automated online advertising workflows.AECarchitecture, engineering, and construction, a sector that often handles large project files and sensitive records.AEOAnswer Engine Optimization, a term for shaping content so it is more likely to be used in AI-generated answers.Aerial imageryImages taken from aircraft or similar platforms, often used to inspect land use and built structures.AES-256A symmetric encryption standard that uses a 256-bit key size.AES-CBCA block-cipher mode that can become vulnerable when applications leak different decryption failure signals.AF_UNIXA Linux socket family for local inter-process communication on the same host.AF_UNIX socketA local inter-process communication endpoint used by programs on the same host.AFD.sysA Windows kernel driver for Winsock networking that handles low-level socket communication.Affect recognitionAutomated inference of emotional state from signals like facial expression, tone of voice, or behavior.Affected systemsDevices or environments running the vulnerable software and therefore exposed until they are patched or mitigated.Affiliate portala controlled dashboard used to manage criminal tasks, access, or payments.Affiliate programa partner-driven setup where outside operators help distribute traffic or leads for a share of revenue.Affordability crisisA situation where the cost of essential cyber defenses grows faster than an organization can sustainably pay.AFS licenceAn Australian Financial Services licence, checked against official registers to help confirm legitimacy.AG 421A draft or scheme intended to align Italian law with the EU AI Act, as described in the provided material.Age estimationA model-driven process that predicts approximate age from an image or other signal, often used for access control.Age gatea check that restricts access based on the user's age.Age predictionEstimating a user's age from indirect signals instead of direct confirmation.Age ratingA classification that indicates the intended audience for a product or piece of content.Age-awareness APIa software interface that returns an age-related category instead of a full date of birth.Agent ConfigurationThe settings that define how an AI assistant uses tools, instructions, and workflows.Agent control planeThe management layer that governs how AI agents are registered, permitted, observed, and revoked.Agent harnessThe software layer that controls how an AI agent receives input, calls tools, and returns actions or outputs.Agent HostA machine running a monitoring agent that communicates with a central platform.Agent Identity SecurityA security approach focused on identifying, governing, and monitoring AI agents.Agent infrastructureThe orchestration layer that connects model output to external tools, APIs, or workflows.Agent InteroperabilityThe ability of different AI agents and tools to work together across platforms with shared trust and access rules.Agent memory storeA persistent layer that saves learned state, patterns, or workflow context for later use.Agent PollingA model where build agents periodically contact a server for instructions or jobs.Agent polling protocolThe request cycle TeamCity agents use to contact the server for instructions.Agent serviceA background component installed on endpoints so a central platform can manage them.Agent sessionA work period in which an AI system performs tasks or interactions that can be logged and reviewed.Agent swarmA group of autonomous agents that can coordinate across tasks, often multiplying both capability and risk.Agent System of RecordA central registry for tracking AI agents, their ownership, and their access boundaries.Agent TeslaA Windows infostealer family associated with credential theft and other data-harvesting behavior.Agent-based patchingA model where a lightweight software agent on the endpoint receives and applies update jobs.Agent-to-agent commerceA proposed model in which software agents may negotiate and execute transactions with other agents under defined authorization and control limits.Agent-to-Controller CallableA Jenkins mechanism for sending callable objects from agents to the controller; unsafe implementations can create security risk.Agent/Connect permissionA Jenkins permission that allows a user or system to connect agents to the controller.AgentDBA persistent store used by Ruflo for agent memory or learning data that can affect later behavior.Agentica design where software can make limited decisions or take actions with some autonomy.Agentic abuseMisuse of autonomous or semi-autonomous AI systems to carry out repeated actions on a target platform.Agentic Access ManagementA security model for governing what AI agents and other non-human identities can access and do.Agentic appSoftware that can take multi-step actions on a user’s behalf, often including file and tool access.Agentic browsingweb navigation performed by software that can choose actions and follow multi-step tasks.Agentic Commerce ProtocolA set of technical rules for structured product discovery and checkout between an AI interface and merchant systems.Agentic data engineeringA workflow where an AI agent can carry out defined data tasks, check results, and adjust its approach.Agentic defenseA security strategy that uses AI agents to help investigate and respond to threats with limited human delay.Agentic DevelopmentSoftware creation where AI agents help plan, build, and test changes with limited human oversight.Agentic endpoint securityA runtime-focused security approach that monitors and governs AI agents, tools, and dynamically loaded components on endpoints.Agentic enterpriseAn organization that uses autonomous AI agents to execute and coordinate business processes.Agentic executionAI workflows where a system plans and carries out multistep tasks with limited human intervention.Agentic frameworkSoftware that coordinates AI agents so they can plan, act, and adjust tasks across multiple steps.Agentic Identity and Access ManagementControls that treat AI agents as auditable identities with scoped permissions.Agentic identity platformA system that assigns and manages identity, authorization, and policy for AI agents.Agentic intelligenceAI systems designed to act with some autonomy, making recommendations or taking limited actions based on context.Agentic operating modelAn AI setup where systems can plan, call tools, and carry out multi-step actions with limited supervision.Agentic pentestingSecurity testing that uses autonomous decision-making to choose the next test step.Agentic remediationAutomated repair of known security problems by an AI system acting within set limits.Agentic securitySecurity workflows in which multiple AI agents collaborate across specialized roles.Agentic security systemA pipeline of specialized AI components that split detection, validation, and remediation support into separate steps.Agentic sprawlThe proliferation of autonomous AI agents and their related tool and API connections.Agentic testingSecurity testing where an autonomous system searches for flaws and then verifies them with active checks.Agentic workA workflow where an AI is used for multi-step task planning or action-oriented assistance.Agentic workloadAn automated task flow where software agents call models repeatedly to complete a goal.AgenticOpsOperational practices for supervising AI agents in production, including identity and reliability controls.AgentlessA security model that relies on APIs or cloud-native access rather than installing software agents on every resource.Agentless connectorAn integration that collects cloud data through APIs instead of installing software on hosts.Agentless discoveryA method of identifying devices without installing software agents on them.Agentless MFAMFA enforcement that adds protection without installing software on the protected application.Agentless migrationA transfer process that moves workloads without installing software inside each guest VM.Agentless securityA way to inspect cloud environments without installing software on each host.Agentless visibilityCloud inspection that gathers security data without installing software on each workload.AGEsLikely means advanced glycation end products, a common acronym for compounds that can accumulate in tissues, though the provided material does not define it explicitly.Aggravated Identity TheftA criminal offense involving the misuse of another person’s identifying information in connection with certain crimes.Aggregate patternA signal that becomes visible only when many small events are viewed together.Aggregated data analysisAnalysis that combines individual inputs into group-level results, reducing exposure of personal details.Aggregation breadthThe range of security signals a platform can combine into one view.Agile analysisAnalysis work adapted to iterative delivery and changing priorities.AGNTCYAn open-source effort for agent interoperability built around discovery, identity, messaging, and observability.AgrivoltaicsA setup that combines solar generation with agricultural land use.AGVAutomated Guided Vehicle, a driverless machine used to move materials through a warehouse or plant.AI accessThe level of permission or availability granted to organizations using an AI system.AI agent frameworkSoftware used to build systems that coordinate tasks, tools, and automation for AI workflows.AI agent governanceSecurity controls that limit what autonomous software can access, decide, and execute.AI agent harnessAn orchestrated system that lets AI tools inspect code, test hypotheses, and help search for vulnerabilities.AI agent swarmMultiple coordinated AI agents that divide work across research, analysis, and action.AI Agent SystemA contextual term for an AI setup that can plan and take actions through tools or services.AI alignmentThe effort to make model behavior match human intent, constraints, and values.AI API tokenA secret credential used to authenticate requests to an AI service.AI assistanta conversational system that can answer questions and trigger actions.AI assuranceA set of methods for proving that an AI system behaves within acceptable risk limits.AI attackA broad term for threats that use AI, target AI systems, or interact with AI-driven workflows.AI attack surfaceThe ways artificial intelligence systems can be abused, manipulated, or targeted by attackers.AI botsoftware that uses automation, and sometimes AI techniques, to carry out repeated online actions.AI BrowserA browser that uses an AI model to interpret, summarize, or act on web content.AI capacityThe compute, power, cooling, and networking resources needed to support artificial intelligence workloads.AI Chat LogsConversation content from AI tools, which may include confidential, personal, or business-sensitive information.AI clauseA contract provision that defines how artificial intelligence is used, controlled, and governed in a tech agreement.AI clinical resilienceThe ability of AI-supported healthcare workflows to remain safe, usable, and recoverable when systems fail or behave unexpectedly.AI coding agentsSoftware tools that generate code or app components from prompts and task instructions.AI companionA conversational system designed to sustain emotionally meaningful interaction over time.AI complementarityThe ability to work alongside AI rather than compete with it directly.AI complianceThe governance process used to meet legal, policy, or internal requirements for AI use.AI computeThe hardware and infrastructure resources needed to train and run AI systems at scale.AI control planeThe policy and management layer that helps govern how AI systems, agents, and tools are used.AI data fabricAn architecture that uses AI to connect structured and unstructured data into a usable context layer.AI developmentThe process of building and improving artificial intelligence systems.AI doomsday scenariosHigh-impact worst-case ideas about advanced AI causing severe, potentially irreversible harm.AI economicsThe study of how AI systems consume resources and create measurable business value.AI Email SummarizerA tool that uses a language model to condense email threads into shorter, readable summaries.AI exploitationuse of AI tools or outputs to support attack activity.AI exposureA measure of how closely a job’s tasks align with current AI capabilities.AI fabricA reusable platform pattern for deploying, governing, and observing AI workloads consistently.AI guardrailsControls meant to block unsafe prompts or outputs before they cause harm.AI hallucinationA false or fabricated output produced with high confidence by an AI system.AI harnessSoftware that wraps an AI model with tools, memory, or workflows so it can perform structured tasks.AI hypothesis engineAn inferred AI-assisted workflow that generates candidate explanations or priorities for alerts rather than relying only on manual sorting.AI incidentA harmful or significant AI event that may require logging, review, or escalation.AI inferenceRunning a trained model on new data to produce an output or decision.AI integrationEmbedding AI into existing workflows, systems, and decision paths.AI investmentsSpending on artificial intelligence systems, tools, and infrastructure with the goal of future returns.AI jailbreakingAdversarial prompting designed to bypass a model’s safety or policy constraints.AI keya secret credential that can unlock access to an AI service or account.AI kill switchAn emergency control intended to stop or disable an AI system’s activity.AI Liability DirectiveA proposed EU measure on AI-related civil liability that was later withdrawn.AI life cycleThe full path of an AI system, including design, deployment, monitoring, updates, and retirement.AI lifecycle risk managementSecurity controls that cover an AI system from design and training through deployment and monitoring.AI maturityThe staged progression from simple AI assistance to tightly governed automation.AI Maturity ModelA framework for assessing how advanced an organization’s AI governance and operational practices are.AI migrationA project move that may involve using AI, building around AI, or leaving an AI platform.AI misalignmentA failure mode where an AI system’s actions diverge from the operator’s intended goal or constraints.AI model payloadA packaged model file or workload that a device uses to run local AI features.AI NotetakerSoftware that records, transcribes, and summarizes meetings automatically.AI OfficeEuropean Commission body associated with AI Act implementation and frontier-AI coordination.AI OmnibusThe amendment package that simplifies some AI Act implementation steps while preserving core protections.AI OrchestrationA control layer that coordinates multiple AI-driven tasks or agents across a workflow.AI orchestration layerA workflow that uses an AI tool to coordinate tasks such as scripting, triage, or operational sequencing.AI orchestratorSoftware that coordinates multi-step AI workflows, including tool use and repeated model calls.AI outputtext, code, or media generated by a model rather than a human.AI oversightGovernance controls applied to AI features to limit unsafe behavior, misuse, or unmanaged risk.AI pentestThe use of artificial intelligence to assist with parts of offensive security testing.AI policyRules that define how artificial intelligence may be used in a class, school, or institution.AI profilingautomated grouping of people based on inferred traits or behavior.AI promptText given to an AI system to direct its output, analysis, or behavior.AI provenanceInformation that describes where AI-generated or AI-edited content came from and how it was transformed.AI proxy serviceAn intermediary that fronts access to an upstream model and resells that access to others.AI red-teamingStructured testing of an AI system to uncover unsafe behavior, misuse paths, or guardrail failures.AI registerAn authoritative inventory of AI use cases that supports ownership, review, and operational oversight.AI safetyThe practice of making AI systems reliable, bounded, and safe to operate in real environments.AI safety guardrailsPolicy and refusal controls in LLM systems that can be triggered by sensitive or prohibited-looking content.AI sandboxA controlled environment used to develop, test, and validate AI systems under supervision.AI scam detectionAutomated analysis that tries to flag suspicious messages, sites, or calls.AI Scam ProtectionAn AI-assisted feature meant to flag suspicious messages, calls, or sites linked to fraud attempts.AI scraperAn automated system that collects web content at scale for search, indexing, or model training.AI SearchSearch systems that use generative models to retrieve, synthesize, and present answers.AI serverA high-performance computer system designed to run demanding machine learning and inference workloads.AI service layerAI embedded inside products or workflows so users experience it as part of a service rather than a standalone tool.AI sitebuilderA website creation tool that uses AI to produce a draft layout or content from a short description.AI slopSynthetic content produced at scale with low informational value.AI slopsquattingRegistering package names that AI tools may suggest or hallucinate, then turning those names into malicious dependencies.AI spendCosts tied to building, training, running, or serving AI systems and models.AI standardsTechnical rules or common practices used to guide how systems are tested, measured, and compared.AI summarizationA system that compresses longer text into shorter output using machine learning models.AI sustainabilitythe effort to reduce the environmental and social costs of artificial intelligence.AI threat taxonomyA structured way to classify how adversaries may misuse AI systems or AI components.AI token budgetA set amount of AI usage allocated to a team or project for prompts, generation, or agent activity.AI trainingThe process of using data to improve a machine learning system.AI transformationThe process of embedding AI into workflows, decision-making, and business measurement, not just adding a new tool.AI triageAutomated or assisted prioritization of alerts so analysts can focus on the most relevant events first.AI unit economicsA way to measure AI value per dollar spent by comparing business impact with delivery cost.AI validationTesting and verification needed before an AI tool is used in clinical decision support.AI vishingVoice phishing that uses synthetic or AI-generated speech to imitate a trusted person or organization.AI VisualizerA concept-generation feature that turns simple inputs into visual design ideas.AI washingMarketing a product as AI-powered without solid evidence that the capability is real or useful.AI website toolsSoftware features that help generate or manage site content, layouts, or setup tasks with automation.AI workflow engineSoftware that connects prompts, tools, agents, and processing steps into executable flows.AI WormA worm-like pattern in which model-generated content may carry forward malicious instructions into later files or workflows.AI-assistedA workflow where AI helps with parts of creation, while a human still retains primary creative control.AI-assisted analysisAutomated or semi-automated tools that help identify software weaknesses before release.AI-assisted classificationUsing machine learning to help identify and label sensitive data at scale.AI-assisted codingUsing artificial intelligence tools to generate, complete, or suggest software code.AI-assisted malwaremalicious code or workflows that use AI features or automation to improve abuse.AI-assisted negotiationautomated text generation or analysis used to make extortion demands more targeted and convincing.AI-assisted phishingPhishing that uses AI tools to help craft, adapt, or localize deceptive messages.AI-assisted scanningUsing machine learning or large language models to help detect possible security flaws in code or systems.AI-assisted toolSoftware that uses machine learning or other AI methods to support analysis, evaluation, or decision-making.AI-BOMAn inventory record for an AI system that lists its key artifacts and lineage data.AI-driven cyber defenceUse of artificial intelligence to help detect, prioritise, or respond to threats.AI-enabled attackscyber operations that use automated or generative tools to improve scale, speed, or realism.AI-enabled browserA browser that embeds an assistant or agent to summarize, automate, or act on behalf of the user.AI-enabled cyberattackAn attack that uses artificial intelligence to increase speed, scale, realism, or automation.AI-Enabled ExfiltrationA behavior where an AI system is induced to move data outside approved channels.AI-Enabled Identity WorkflowAn authentication or review process that uses AI or machine learning to help make identity-related decisions.AI-era crimeCriminal activity that uses artificial intelligence to scale fraud, deception, or coordination.AI-focused environmentA technology setting where artificial intelligence systems, tools, or workflows are part of the security problem space.AI-generated reportsSecurity submissions produced with the help of artificial intelligence, which still need human validation.AI-generated videoVideo created fully by generative AI tools rather than recorded directly by a person.AI-native complianceCompliance workflows that use artificial intelligence to assist with evidence, mapping, and review tasks.AI-native SaaSSoftware-as-a-service built around AI work, where usage and output matter more than user count.AI-powered attacksCyberattacks that use artificial intelligence to speed up or scale familiar criminal tactics.AI-powered browserA browser or agent that uses machine learning to interpret content or take actions.AI-powered defensesSecurity tools that use machine learning or other AI methods to assist with detection, triage, or response.AI-powered DLPDLP products that use automation or context-aware analysis to support data protection decisions.AI-powered fraudFraud that uses generative or synthetic AI to imitate people, documents, or messages.AI-readyA publishing approach that makes web content easier for both humans and automated systems to discover and process.AI-speed attacksA shorthand for adversary activity that may be accelerated by automation or AI-assisted workflows.AI4Sciencethe use of artificial intelligence to support scientific discovery, analysis, and experimental planning across disciplines.Air blowerA tool that moves air for cleaning, drying, or general workshop use.Air conditionerA cooling device that uses heat-pump principles to remove indoor heat.Air defensesystems used to detect, track, and counter aerial threats.Air-driven organa standard organ design that uses air to move sound-producing parts.Air-gapped backupsRecovery data kept isolated from the main network.Air-gapped networkA system or network kept physically separate from the internet and other external links.Air-gapped signingKeeping a wallet device physically separate from networks while approving transactions.Air-GappingPhysically separating a system from external networks to reduce remote attack exposure.Aircraft wiringthe physical cabling that carries power and signals between aircraft components.Airframethe structural body of a drone that holds its components together.Airless tireA tire design that does not depend on compressed air for support.Airlinera passenger aircraft with many coordinated systems that must work together safely.Airsofta recreational activity that uses non-lethal replica gear or projectiles.AirTagApple’s Bluetooth item tracker, used to help locate physical objects.AISEThe Italian foreign intelligence service responsible for external intelligence.AISIThe Italian domestic intelligence service responsible for internal security.AIT-GUIA browser-based operator console used with the AMMOS Instrument Toolkit for mission monitoring and commanding.AiTM (Adversary-in-the-Middle)An attack setup that relays traffic between the victim and the real service so the attacker can intercept login artifacts.AJAXEvaluateA ServiceNow server-side script entry point associated with the platform’s sandbox model.AJPA connector protocol Tomcat uses with Apache HTTP Server in trusted-network setups.Alarm suppressionA technique that hides or disables warnings so operators may not see critical conditions.Alert CorrelationThe process of connecting related security alerts to separate real threats from noise.Alert prioritisationA ranking method that helps analysts focus on the most urgent events first.Alert tuningAdjusting detection rules to reduce false positives and improve response quality.Alexa+Amazon's AI assistant service, now offered on Fire TV devices without a Prime or Alexa+ subscription requirement.Algae biodieselFuel made from algae-derived material, presented here as a DIY energy project.Algorithm agilityThe ability to replace one cryptographic method with another without redesigning the whole system.Algorithm governanceThe oversight, policies, and review controls used to manage automated decisions.Algorithmic controlautomated decision-making that influences how content is ranked, shown, or distributed.Algorithmic debtA nonstandard term for deferred technical, operational, and oversight costs created by uncontrolled AI growth.Algorithmic decision supportsoftware that assists a human process by ranking, filtering, or recommending outcomes.Algorithmic decision-makingChoices influenced or produced by automated systems.Algorithmic defenseAutomated or AI-assisted detection and response used to scale security operations.Algorithmic mediationThe process by which software filters, ranks, or summarizes information before it reaches users.Algorithmic ModerationAutomated filtering or ranking of online content using rules, classifiers, or machine learning.Algorithmic recommendationautomated ranking that chooses which content a user sees first.AlgorithmsThe rules and models systems use to decide what content to show and in what order.Algoritmi socialplatform ranking systems that influence which content users are most likely to see.Alignment AuditA review designed to check whether a model behaves in ways that match human goals and policy limits.Alignment failureA case where a model’s behavior diverges from intended safety goals or operator expectations.Alignment FakingA research term for behavior where a model appears compliant under observation but acts differently in other conditions.Alignment monitoringOpenAI’s monitoring of model actions and evaluation traffic for misalignment-related behavior.All-cash dealA transaction paid entirely in cash rather than stock or a mix of assets.All-flash storageA storage architecture that uses solid-state drives to deliver low latency and high performance.Alleleone version of a gene among possible variants.Allergen immunotherapyA treatment area that can depend on sensitive research, production, and regulated operations.Alliance dependenceReliance on external partners for security guarantees, information, or technical support.Allocation matrixa decision framework that maps security capabilities to assets or device classes based on operational constraints and risk.AllophoneA short speech sound unit used to build synthetic speech from fragments.ALPCA Windows inter-process communication mechanism used by core system components.Alphanumeric passwordA secret made from letters and numbers, usually stronger than a short numeric PIN.AlphaServer 2100a DEC server model that is the focus of this retrocomputing homelab feature.AlphaZeroA DeepMind system known for strong game-playing performance learned through self-play.ALPRAutomated License Plate Recognition, a system that reads vehicle plates and turns them into searchable records.Alt+TabThe classic Windows shortcut for moving between open applications.Alternative cloudA cloud platform built for narrower workload needs, often emphasizing AI, sovereignty, or edge performance.Alternative paymentsPayment methods that operate outside a platform’s default billing flow.Alternative protocolA different communication channel used instead of the primary internet path.Alternative siteA secondary location prepared to support operations if a primary site cannot be used.AluminumA lightweight metal often used when low weight and easy forming are important.Always On VPNA VPN model that aims to connect automatically when the device is online.Always-on devicehardware that stays connected for long periods and can be quietly repurposed.Always-on microphoneA sensor that continuously captures audio and should be treated as privacy-sensitive.AM radioA radio receiver designed for amplitude-modulated broadcast signals.AM29000A processor family from AMD associated with late-1980s next-generation silicon.Amatera StealerAn information-stealing payload associated with credential and session theft risk.Ambidextrous leadershipA management approach that combines exploration and execution so an organization can innovate without losing discipline.Ambient CaptureRecording that happens continuously or opportunistically in the surrounding environment, often through wearable devices.Ambient listeningA documentation approach that captures clinical conversation and drafts a note for review.Ambient pressureThe surrounding environmental pressure, typically around 1 atmosphere under ordinary conditions.Ambush marketingPromotional tactics that seek attention from a major event without official sponsorship.AMD SEV-SNPAMD confidential computing feature set for protecting virtual machine memory and state.AMIAmazon Machine Image, a reusable template for launching EC2 instances with a predefined software state.Amiga 1000an early home computer platform released in 1985.AMLAnti-money laundering controls used to detect and report suspicious fund movement.AML auditCompliance material used to review suspicious activity and financial controls.AML platformsoftware that supports anti-money laundering compliance workflows.AMLA PackageAn EU anti-money-laundering package that introduces common criteria for assessing risk, organization, and decisions.AMMOS Instrument ToolkitNASA/JPL’s open-source toolkit for operations and data processing for instruments and small satellites.AMOLEDA display technology known for thin panels, vivid color, and low-profile designs.Amortization mismatchA gap between how long an asset is paid for and how long it remains economically useful.AMOSShort for Atomic macOS Stealer, a malware family associated with stealing credentials and wallet data on Macs.Amplitudethe size of a vibration or oscillation.AMRAdvanced Modular Reactor, a broad label for newer reactor concepts with varied designs and fuel approaches.AmygdalaA brain structure involved in threat detection and rapid emotional responses.Analog circuitA circuit that processes continuously varying electrical signals without software logic.Analog computingComputation performed through continuous physical phenomena rather than discrete instructions.Analog formatA medium that stores or plays information as continuous signals rather than discrete digital files.Analog redundancyA backup path using non-digital components that can help maintain function if digital systems fail.Analog TV signalsThe older broadcast format that was widely switched off in favor of digital transmission.Analog videoA video signal represented as a continuous waveform rather than discrete digital values.Analysis resistanceTechniques that slow reverse engineering, sandboxing, or automated malware inspection.Analyst workflowthe steps security teams follow to investigate and track threats.Analytical thinkingThe habit of breaking problems into parts and evaluating evidence before acting.Analytics engineerA role focused on modeling, testing, and maintaining trusted analytics data for business and AI use.Analytics pipelinethe systems that collect and process usage data for measurement or reporting.AnalyzerA tool used to inspect electrical or communication behavior in a device setup.Anatomical mapa structured representation of a body part and its features.Android Accessibility ServiceA powerful Android API intended for assistive apps that can observe UI events and interact with the screen.Android Automotive OSGoogle’s in-car Android platform that runs directly on vehicle hardware, separate from phone projection features.Android debuggingA developer feature that helps test and manage devices, but can increase risk if left enabled unnecessarily.Android endpointa connected device running Android that needs software and access control.Android EnterpriseGoogle’s management framework for policy-driven provisioning and control of Android business devices.Android head unitThe in-vehicle computer that powers infotainment, navigation, and related functions.Android kernelThe Linux-based core of Android that handles hardware access, memory management, and security primitives.Android permissionsThe access requests apps use to reach sensors, communications, and device functions.Android security patch levelA device-reported marker showing which Android security fixes are present.Android spywareMalware designed for Android devices that covertly gathers data or monitors activity.Android Work ProfileA managed Android space that separates work apps and data from personal apps and data.Android-based systemA device platform built on Android components and services.Angle of viewthe direction from which a scene is observed, which can change what details are visible.Angler EKA named distribution ecosystem referenced in the case, without technical detail in the supplied material.Anglo concertinaA type of concertina associated with folk performance and bellows-driven play.AnnexA legal attachment that lists categories, cases, or criteria used to apply a rule.Annex IIIThe AI Act list of use cases treated as high-risk because of their potential impact.AnnotationA meeting feature that lets participants draw or mark up shared content.Annotation engineThe part of a meeting app that processes drawing, markup, and overlay input during a session.Annual feeA recurring yearly charge separate from the usage price.Annual gatheringA recurring event held once every year, often used to track continuity and community size.Annual interest rateThe yearly percentage used to calculate earnings on a deposit.Annual percentage ratethe yearly return expressed as a percentage.Annual reportA recurring public assessment that summarizes threat trends, risks, and defensive priorities over a defined period.Annual subscriptiona plan billed on a yearly cycle, often with different renewal terms after a promo period.Anomaly MonitoringDetection of unusual activity that may indicate abuse, compromise, or misuse.Anonymous Cache KeyThe cache identifier used for logged-out traffic, which should prevent one user's input from affecting others.ANPRItaly’s national population registry, used as an authoritative source for identity and residency data.ANSCthe platform referenced for managing digital civil-status records.Answer engineA search or assistant system that returns a direct synthesized answer instead of a simple list of links.Answer validityWhether a generated or retrieved answer is current, accurate, and authorized for use.Answer-Preserving ScalingA test method that increases irrelevant data while keeping the correct answer unchanged to stress the retrieval layer.Ant Colony Optimization (ACO)A metaheuristic method used to search for near-optimal solutions in complex scheduling problems.Anti-abuseControls designed to detect and reduce misuse of a platform feature.Anti-analysis checkCode that looks for debuggers, virtual machines, or other analysis conditions before running fully.Anti-bot protectionControls that detect and block automated access that mimics or exceeds normal user behavior.Anti-bot protectionsControls designed to detect and block automated web traffic.Anti-CSRF tokenA protection mechanism that helps ensure a write request was intentionally made by an authorized client.Anti-fraud toolsfeatures meant to help flag suspicious messages, sites, or payment activity.Anti-ransomwarecontrols designed to detect or block ransomware-style file encryption and related behavior.Anti-sandbox checksEnvironment tests used by malware to detect analysis systems and change behavior or stop running.Anti-steeringRules or barriers that stop developers or sellers from directing users to alternative offers or payment paths.Anti-tamperProtective controls meant to stop unauthorized modification, removal, or disabling of security software.Anti-tamper protectionA mechanism intended to prevent elevated processes from modifying a client’s files, registry, service, or local policy cache.Anti-VMChecks used to detect or avoid virtual machines and sandboxes.AntifragilityA property of systems that can improve when exposed to stress, volatility, or shocks.Antifraud controlsSecurity checks designed to detect suspicious behavior, unusual transactions, or impersonation attempts.Antimalwaresoftware designed to detect, block, or remove malicious files and activity.Antimalware scanningAutomated checks for suspicious or malicious files and behavior in hosted environments.Antimicrobial resistance (AMR)The ability of microbes to survive drugs that once worked against them.Antimicrobial susceptibility testing (AST)Laboratory testing used to determine whether a bacterium is sensitive or resistant to an antibiotic.Antivirus AIMarketing for malware-detection tools that use machine learning or other automated analysis.Antivirus alerta warning generated when security software detects suspicious or malicious activity.Antivirus exclusionsSettings that tell security software to skip specific files, folders, or processes.Anxietya feeling of fear or worry that can affect daily functioning.Any-any entrya permissive firewall rule that allows any source, destination, or service.ApacheA widely used web server that processes requests through handlers and modules.Apache HTTP ServerOpen-source web server software used to deliver websites and applications.Apache modulea loadable component that extends Apache web server behavior.Apache StrutsAn open-source Java web framework used to build MVC-based applications.Apache TomcatAn open-source Java servlet/JSP container used to run web applications.Apache-2.0 licenseA permissive open-source license that allows reuse and modification under defined terms.API (Application Programming Interface)A defined interface that lets software systems exchange data or invoke functions in a controlled way.API abstractionA design layer that helps switch providers without rewriting every integration.API accountA programmatic identity used by software to access platform functions under defined permissions.API connectorA link that lets one system call another service or exchange data automatically.API Control PlaneThe management layer that governs API policies, configuration, and security controls.API discoveryThe process of identifying exposed endpoints, services, and data flows.API drainAbuse of an application interface to consume quotas, credits, or spend without permission.API DrainingRepeated legitimate API use that can exhaust quota, consume credits, or inflate cost.API GatewayMiddleware that sits between clients and backend services to route requests and enforce policy.API governanceThe policies and controls used to secure application programming interfaces and limit unsafe data exposure.API hookingIntercepting or modifying API behavior to observe, block, or alter function results.API HuntingDefender log review focused on suspicious requests to application endpoints that may indicate exploitation attempts.API pricingThe cost charged for using an application programming interface, often measured by token volume in AI systems.API ProxyAn intermediary that forwards API requests between a client and an upstream service, potentially changing routing and visibility.API rate limitingA control that restricts how many requests a client can send in a given time.API responseData returned by a server to a client request, which can leak sensitive fields if poorly designed.API RouteA named endpoint an application exposes for requests such as management or data access.API SchemaA structured description of API endpoints, inputs, and outputs, often used to guide testing.API Security Top 10OWASP's risk taxonomy for the most important API security problems defenders should test.API service datainformation exchanged through application interfaces, which may reveal operational detail if exposed.API sessionA valid authenticated connection to an application programming interface used for device management.API session managementThe logic that tracks whether a request has a valid authenticated session.API-based scanningRetrospective inspection of SaaS settings and stored data through application programming interfaces.API-only accessA deployment model where users interact with a model through an interface, but cannot inspect or modify the underlying system.API-SSLThe encrypted version of MikroTik's API service, intended for safer remote administration.APISAdvance Passenger Information System, used to exchange traveler identity and flight data for border and security processing.APNAccess Point Name, a cellular routing label that points traffic toward a specific network or service.APN (Access Point Name)The network setting a mobile device uses to reach a carrier data service.App automationA macOS permission that lets one app control another app when the user allows it.App CloningDuplicating an app into another container or profile so it runs in a separate space.App distribution channelThe path through which software reaches users, such as an app store.App downloadThe transfer of an application package from a store to a device.App governanceAdministrative control over which third-party apps can access organization data.App impersonationa fake application made to resemble a trusted product or service.App IOA digital service channel used by Italian public administrations for citizen-facing communication.App marketplaceA platform used to distribute, discover, and install mobile applications.App passwordA long-lived application-specific password used by older apps or devices that do not support modern 2-step verification.App replacementAn attack method where a legitimate app is swapped or patched with a malicious version.App RouterThe Next.js routing model used to organize application paths and request handling.App SecurityThe Mendix area where user roles and permission settings are configured.App Store delistingRemoval of an app from a marketplace, which can block discovery, downloads, and reinstalls.App store governanceThe rules and controls that determine how software is listed, ranked, reviewed, and distributed.App Store listingthe official marketplace entry used to discover, install, and update a mobile app.APP_SECRETKimai’s application secret; in the technical advisory context, it is described as the Symfony kernel.secret.App-based bankingFinancial services that are opened and managed through a mobile application.App-based managementA service model where account and card functions are handled through a mobile application.App-based monitoringA feature that lets users check usage or status through a mobile application.App-in-appan embedded application that runs inside another platform or chat surface.App-only accessA model where an application uses its own identity and permissions without a signed-in user.App-plus-API pathsThe combined attack surface formed by a mobile app and the backend APIs it uses.App-store controlsReview and scanning systems used to block harmful mobile apps before release.Apparent AuthorityThe impression that an agent is allowed to act, which may influence how others treat its actions.AppArmorA Linux security module that limits what programs can do through policy profiles.AppContext switchA .NET setting that can turn a runtime behavior or workaround on or off.Appeals courta higher court that reviews decisions from a lower court.Appearance monitoringRepeated attention to looks, presentation, or visible traits.Apple ][An early Apple computer platform with its own software and hardware conventions.Apple BiomeApple’s framework for device-related data streams; not a biometric system.Apple depththe level of platform-specific support and control available for Apple devices.Apple EventsA macOS automation system that lets one app send commands to another app, usually after a user approval prompt.Apple notarizationAn Apple review process that scans software for known malware and issues a notarization ticket for distribution.Apple Threat NotificationA high-confidence alert that warns a user of possible targeting by advanced spyware.AppleDoubleA legacy Apple file format used to carry Macintosh-specific data and resource information.Appliance controlThe act of triggering or managing a household device through a command path.Appliance deploymentA packaged software or hardware unit that often has its own update path and versioning.Appliance Management ConsoleThe web-based administrative interface used to configure and monitor the SMA1000 appliance.ApplicabilityThe question of whether a vulnerability actually exists in a specific deployment.Applicant datapersonal and administrative information collected during a hiring process.Application access policyA control that can restrict which mailboxes an app is allowed to reach.Application accountThe service identity an application uses to run processes and access local resources.Application Bound EncryptionA Chrome security control that binds some local secrets more tightly to the browser application.Application containera packaged software unit that isolates an app from parts of the host environment.Application crashA failure mode where a program stops unexpectedly, often disrupting the service it supports.Application databaseThe internal datastore an application uses to keep core configuration, objects, and state.Application frameworkA reusable software foundation that provides common functions for building applications.Application IntegrityA control goal focused on ensuring only approved, unmodified software is allowed to run on a system.Application inventoryThe organized view of applications and projects used to assign ownership and track risk.Application passcodeA separate password issued for app or device access, often usable outside the main login flow.Application performance monitoringSoftware that tracks the health and response of business applications and supporting systems.Application permissionsApp-only privileges that let software access data without a signed-in user.Application rationalizationThe process of reviewing software to decide whether it should be kept, modernized, replaced, or retired.Application registrationThe step that creates an app identity for use with tenant-integrated authentication or access workflows.Application Security (AppSec)The discipline of finding, fixing, and reducing risks in software applications.Application tokenA credential-like token used by software to establish authenticated access.Application-layer protocol abuseMisuse of normal protocols such as web, DNS, or SaaS APIs to hide malicious traffic.Application-layer storageData kept by a website or plugin outside normal core credential handling, sometimes in custom fields, logs, or exports.Application-level kill switchA scoped control that cuts off a specific app path, credential, or workflow without shutting everything down.AppLockerA Windows feature for restricting apps, scripts, and installers by rule.Apply-time governanceEvaluating infrastructure changes at plan or deployment time before resources are actually provisioned.Appointment management systemsoftware used to manage bookings, scheduling, and related workflows.ApprenticeshipStructured on-the-job learning that turns supervised practice into real expertise.Apprenticeship layerThe early-career stage where people learn core operational skills through practice.Approval chainA sequence of authorizations required before a sensitive action can happen.Approval promptA user confirmation step before a tool performs a sensitive action such as running a command.Approvazione e controlloBoard activities focused on reviewing, authorizing, and monitoring decisions.Approved-provider listA controlled list of external services that security and procurement teams have authorized for use.AppSec validationSecurity-focused review of code, patches, or behavior by application security specialists.APRabbreviation used in the source for Sistemi Aeromobili a Pilotaggio Remoto, or remote-piloted aircraft systems.APRA CPS 230An Australian prudential standard focused on operational risk, operational resilience, and service-provider risk.APT36A threat group also known as Transparent Tribe; the cluster is linked to it with moderate confidence.Aquatic environmentswater-based settings such as rivers, lakes, or oceans.arbitrary file overwriteA condition where a program can replace files it should not be allowed to modify.Arbitrary File-System ReadA vulnerability that can allow unauthorized reading of files stored on a server.Arbitrary Script ExecutionThe ability to run attacker-influenced code or scripts on a target system.Arc flashA rapid release of electrical energy that can cause burns, injury, and damage when an arc forms between conductive parts.Arc-rated PPEProtective clothing and gear designed to reduce injury risk from electrical arc-flash exposure.Arcade topperA decorative or functional unit placed above an arcade-style machine.Architectural CGIComputer-generated imagery used to present buildings and spaces, often involving large project assets.Architectural lightingLighting planned as part of a building or interior design, not just added decoration.Architecture and integrationThe way a new application fits into existing systems, dependencies, and workflows.Architecture Decision RecordA short record that preserves a decision, its context, and its consequences.Archivea stored collection of files or documents that may be singled out in an extortion claim.Archive abuseMisuse of compressed files to hide payloads, steer file placement, or trigger execution during extraction.Archive Collected DataPacking stolen files into compressed or encrypted containers before transfer.Archive exploitationAbuse of compressed-file handling to place or run content in unintended ways.Archive exposurerisk that stored documents can be copied, leaked, or used for coercion.Archive extractionThe process of unpacking files from containers such as ZIP or 7z archives.Archive extraction boundaryThe intended limit of where files from an archive are allowed to be written during unpacking.Archive leakalleged exposure of stored files or records.Archive segmentationSeparating bulk file stores from core operational systems.Archive separationKeeping different categories of data in distinct storage locations.Archive systemA repository that stores older records not used in daily operations.Archive validationchecking whether claimed files are genuine, complete, and sensitive.Archived codepreserved historical website or application code that can reveal old routes and logic.Archived contentRecorded material that remains available after a live event ends.ArchivingThe preservation of digital material for future access, study, or reference.Argument collapseA failure mode where generated reasoning converges on a narrow set of arguments and structures.Argument handlingThe way a program receives and passes command-line parameters, critical for safe automation.Argument injectionA related issue where input alters command-line options or parameters rather than the command itself.Arm architectureA CPU design commonly used in efficient, low-power devices.ARM-based Windows devicesWindows PCs built on Arm processors, where app compatibility can differ from traditional x86 systems.AROSan open source operating system inspired by the Amiga architecture and user experience.ARRAnnual recurring revenue, a subscription-style metric that tracks predictable yearly income.Art. 25-viciesThe new article introduced by draft decree no. 418, based on available information baseline.Art. 43-bis L.A.the legal provision cited as the basis for the compensation regime.Art. 437-bisA newly discussed legal provision linked to AI-related security and oversight duties.ARTEXA contextual reference to an open-source penetration testing platform reportedly used in the campaign.Article 10 GDPRthe rule covering personal data linked to possible criminal offenses.Article 102 TFEUEU competition law provision that prohibits abuse of a dominant market position.Article 14The CRA provision that covers vulnerability and incident reporting.Article 17The Italian NIS2 provision discussed here, centered on formalized cybersecurity-information sharing and related notification steps.Article 22A GDPR provision that can apply to decisions based solely on automated processing.Article 24The GDPR provision requiring controllers to implement appropriate technical and organizational measures.Article 24 GDPRthe rule requiring controllers to implement appropriate technical and organizational measures.Article 32The GDPR provision requiring appropriate technical and organizational measures to secure personal data.Article 4The provision in the AI Act that requires providers and deployers to take measures for sufficient AI literacy, based on role and context.Article 48The DSA provision that covers voluntary crisis protocols for informational emergencies.Article 50 AI ActThe EU transparency rule set that covers certain AI-generated or manipulated outputs.Article 6The AI Act provision used to determine whether a system follows the high-risk classification route.Article 69The transitional rule that brings some reporting duties into effect before the full regime applies.Article 73The EU AI Act rule that requires providers of covered AI systems to report serious incidents within set deadlines.Article 9 GDPRthe EU rule that lists special categories of personal data requiring stronger protection.Artifact governanceRules and controls for where generated files are stored and who can access them.Artifact hygieneThe practice of reviewing, isolating, and retiring old files that may still carry risk.Artifact repositoryA system that stores and serves software packages, builds, and dependencies for development workflows.Artifact reviewThe process of inspecting model files, code, or packages before they are approved for use.Artifact storeThe storage layer used for files created by machine learning workflows, such as models and outputs.Artifact taphonomyThe study of how objects change from use to burial to discovery.ArtifactoryA repository manager used to store, manage, and distribute software packages and build artifacts in development pipelines.Artificial agencyA philosophical lens used to emphasize what systems can do - act, adapt, and affect environments - rather than whether they possess human-like consciousness.Artificial gravitythe effect of simulating gravity through motion, usually by rotation.Artificial Intelligence (AI)Software techniques that perform tasks associated with human judgment, such as classification, prediction, or language generation.Artificial Intelligence Management System (AIMS)The organizational framework used to govern policies, objectives, and processes for AI.Artificial StateA concept for describing governance that is increasingly mediated by platforms, data systems, and automated decision tools.ArubaOS-CXThe network operating system used on HPE Aruba Networking switches.ARXA design pattern using Addition, Rotation, and XOR, common in compact software routines and sometimes adapted for obfuscation.AS-pathThe sequence of autonomous systems a BGP route advertisement has traveled through or claims to have traveled through.ASARElectron’s archive format for bundling application code and assets into a packaged file.ASCGA Brocade support-connectivity component associated with secure proxy functions.ASCII smugglingAn evasion method that hides content by inserting invisible or non-rendering Unicode characters into text.ASCONFThe SCTP message format used for dynamic address reconfiguration.ASICApplication-Specific Integrated Circuit, a chip built for a particular task rather than general-purpose computing.ASLR (Address Space Layout Randomization)A defense that randomizes memory locations to make exploitation harder.ASMFActive Substance Master File, a regulatory file for active ingredient details.ASN.1A standard notation for encoding structured data in many security and telecom protocols.ASP.NET machine keyA secret used by ASP.NET applications to protect tokens and state; if abused, it can complicate cleanup and persistence.Aspect-Aware SummarizationA method that groups feedback by topic so users can inspect evidence more clearly.ASPMApplication Security Posture Management, a layer that consolidates and prioritizes application security findings.Assembly workflowThe step-by-step process used to put a design together correctly.AssertionA trusted statement used in federation to convey identity or authentication information between systems.Assessment boundaryThe defined set of systems and environments included in a compliance review.Assessment designThe way an exam or assignment is structured to measure learning and reasoning.Assessment pauseA suspension of certification timing that can delay verification without removing underlying obligations.Assessment preparationThe work of collecting evidence, scoping systems, and readying controls for review.Assessment recordsinternal security or audit material that can reveal weaknesses if exposed.Assessment scopeThe systems, controls, and operational practices included in a review.Assessment systemsinternal tools that can store hiring, scoring, and review records.Assessment toolA system that gathers inputs and turns them into an evaluation.Assessment validityThe degree to which an exam measures the skill or knowledge it is meant to test.Assessor standardsThe qualifications, rules, and methods used to judge whether a security control meets a required benchmark.AssetAny system, service, or resource that has value and needs protection.Asset contextInformation about what a device is, where it sits, and why it matters operationally.Asset dataMeasurements and status information collected from equipment or plant systems.Asset dependencyThe changing relationship between multiple financial instruments.Asset documentationthe records that identify, describe, and support ownership of a property or device.Asset EnrichmentAdding context such as device identity, product data, and lifecycle information to improve security decisions.Asset freezingrestricting movement of funds through custodial or exchange cooperation.Asset graphThe interconnected map of devices, services, workflows, and AI assets inside an organization.Asset IntelligenceEnriched device context used to identify, classify, and prioritize assets.Asset ownerThe organization responsible for operating and securing an OT environment.Asset pipelineThe workflow used to move art, audio, and other content into a finished build.Asset provenanceThe record showing where images, code, audio, and other content came from.Asset recoveryThe legal and administrative process of tracing, seizing, and managing property tied to proceedings or sanctions.Asset retrievalThe process by which macOS fetches downloadable components such as AI models to a device.Asset tracingThe process of following stolen funds across addresses, chains, and exchanges.Assets under managementThe total value of capital a firm oversees on behalf of investors or clients.Assistive audioaudio technology intended to help users hear, understand, or interact more effectively.AssumptionA condition a system relies on without fully verifying it in every case.Assurance boundaryThe exact systems, controls, and interfaces included in a security review.Assurance modelA control framework that proves a system stayed within approved purpose, boundaries, and operating conditions.AstarothA banking trojan family also known as Guildma, associated with credential theft and regional targeting.Astensionismo giovanilelow voter participation among younger age groups.Astrophysical plasmaplasma found in space, including stars, winds, and other high-energy environments.Asymmetryan uneven distribution of power or control between different actors.Async HttpClientA non-blocking HTTP client design that handles requests and responses without tying up the calling thread.AsyncOSCisco’s software platform for Secure Email Gateway.AT CommandA control instruction used to manage modem behavior and query cellular functions.AT&C lossesAggregate Technical and Commercial losses, a measure that combines physical energy loss and non-technical revenue loss.Atlassian CrowdAn identity and access management product used for centralized authentication and user management.ATmega32U4A microcontroller with integrated USB support, often used in compact embedded devices.AtmosphereA layer of gases surrounding a planet.Atomic StealerA macOS infostealer family associated with credential and data theft.ATSCThe digital television standard family associated with North America.ATT&CK T1090The MITRE technique family for proxy-based command-and-control and traffic relay behavior.Attachment blockingA mail security control that prevents selected file types from being delivered.Attachment deceptionA social-engineering trick that makes a malicious file look harmless by disguising its real type or purpose.Attachment filteringMail-security controls that inspect or block risky files before they reach users.Attachment ManagerThe Windows component that tracks file origin and helps decide when warnings should appear.Attachment parsingThe process of reading and interpreting attached files, which can become a security risk when the file is malicious.Attachment processingThe steps software uses to open, read, or modify files users send.Attack attributionthe process of linking activity to a specific actor.Attack deadlineA timed ultimatum used to intensify pressure on a target.Attack evidencetraces left behind that can help defenders understand what happened after an incident.Attack ExposureThe degree to which a system can be reached or contacted by a potential attacker.Attack graphA map of possible paths an attacker can follow through systems, identities, and services.Attack hash codea fixed digital fingerprint attached to a case record or artifact; its exact type is not specified here.Attack identifiera code used to label or track a reported or claimed incident.Attack orchestrationCoordination logic that sequences attack steps and routes actions across multiple targets.Attack Path AnalysisThe process of mapping how an attacker could move through a network toward a target.Attack timelineThe sequence and duration of stages in an intrusion, from initial access to follow-on actions.Attack validationThe process of checking whether a vulnerability is present, reachable, and exploitable in a specific environment.Attack-path analysisA method for identifying the reachable chains of weaknesses an attacker could combine to reach a target.Attack-path correlationA method for linking separate weaknesses into a likely route an attacker could take.Attack-path modelingPlanning possible chains of steps that connect findings into a follow-on testing route.Attack-path validationTesting whether separate weaknesses can be chained into a real compromise route.Attacker artifactsFiles or data recovered from adversary infrastructure that help reconstruct parts of an intrusion.Attacker attributionlinking activity to a group, which still requires verification.Attacker behaviorObservable actions that can indicate tactics such as lateral movement or command and control.Attacker emulationDefensive training that recreates adversary behavior in a safe environment to improve detection and response.Attacker SophisticationThe level of skill, resources, and experience an adversary brings to an operation.Attended AutomationAutomation that runs with a person present, often allowing human input during the process.Attention managementThe practice of organizing time and tools to support sustained concentration.Attention surfaceAny part of a digital interface that competes for a user's focus.Attivismo connettivonetworked mobilization built through sharing, linking, and online connection rather than centralized coordination.Attivismo informalepolitical engagement outside traditional party structures or formal organizations.Attività inventivaThe inventive work that gives a patentable idea its technical substance.Attribution confidencehow strongly evidence links an event to a specific actor.Attribution contextTechnical clues that may suggest a link to a threat cluster, but do not by themselves prove identity.Attribution granularityThe level of detail used to assign cost or activity to a user, project, request, or workload.Attribution indicatorA technical clue, such as shared infrastructure or delivery paths, used to connect related cyber activity.Attribution of ActionThe process of determining who is legally or operationally responsible for an action taken by a system.Attribution riskThe chance that viewers will wrongly associate content with a person, campaign, or organization.Attribution uncertaintythe gap between a named claim and confirmed technical proof.AttributionControlThe MapLibre UI component used to display map credits and attributions.Audience ModelingThe practice of estimating how different groups may react to content or products.Audio CaptureMalware collection of sound from a device microphone or audio input path.Audit consolidationThe process of combining logs and records from multiple systems into one monitoring view.Audit evidencerecords or observations used to verify that a control works in practice.Audit functionan independent review role that checks controls, evidence, and risk handling.Audit readinessThe state of being able to quickly produce evidence, records, and controls for inspection.Augmented Reality (AR)A technology that overlays digital content onto the physical world through devices such as headsets or tablets.Aura/API surfaceA Salesforce request surface discussed in portal-hunting contexts for guest-user enumeration and content retrieval.Auth proxyA setup where authentication decisions are delegated to an external process.Authenticated accessAccess obtained with valid credentials, often a stepping stone for deeper abuse.Authenticated account holderA user who has logged in successfully and can access permitted functions.Authenticated browser sessionA browser state in which a user is already logged in and the session carries their authority.Authenticated PairingA BLE security step that verifies devices before trust and encrypted communication are established.Authenticated Project MemberA logged-in user with access to a project, often enough to trigger trusted workflows.Authenticated RCEA remote code execution flaw that requires a valid login before the vulnerable path can be reached.Authenticated sessionA logged-in browser or app session that carries the user’s existing access and privileges.Authenticated session stateThe active proof that a user has already logged in and remains signed in.Authenticated user sessionA logged-in state where a system recognizes the user and applies their permissions.Authentication activitylogin behavior that can reveal suspicious access attempts.Authentication anomaliesUnusual login activity that can indicate account abuse or intrusion attempts.Authentication attacksrepeated attempts to test, reuse, or guess login details.Authentication callbackA server-side function that decides whether a login attempt can proceed.Authentication checksverifying that users, services, and devices are still validated correctly after change.Authentication codesOne-time verification values used to confirm identity during login or payment steps.Authentication controlA mechanism that verifies identity and limits access to approved users, systems, or actions.Authentication controlsChecks that verify whether a request or user is legitimate.Authentication eventslogin and access records that can help verify unusual account activity.Authentication filterA servlet-layer control that checks whether a request should be allowed past the login boundary.Authentication flawa weakness in access checks that may let an attacker bypass normal login controls.Authentication gapA mismatch where some access paths have stronger login controls than others.Authentication gatewayA system component that mediates login checks between users, directory services, and protected applications.Authentication HashA cryptographic representation of a secret used to verify credentials without storing plaintext passwords.Authentication hygienebasic practices that help verify user and device identity securely.Authentication logicthe rules a system uses to verify that a user is allowed to sign in.Authentication materialinformation a system uses to prove identity or authorize access.Authentication metadataInformation tied to login or access activity that can be sensitive if exposed.Authentication MethodA credential or approval path used to verify a user, such as a passkey or app prompt.Authentication policyA rule set that defines how users prove identity before getting access.Authentication Policy AdministratorA privileged role that can manage authentication method settings and related policies.Authentication recordslogs that can help confirm whether accounts or sessions were used legitimately.Authentication redirect flowThe part of a web app that sends users onward after login, often handling return or state parameters.Authentication SecretSensitive material used to prove identity, such as tokens or signing keys.Authentication servicesSystem components that handle identity checks and access decisions.Authentication SystemsMechanisms that verify identity, such as certificates, logins, tokens, and digital signatures.Authentication-as-a-Service (AaaS)Hosted identity services that manage sign-in, user accounts, and token handling for applications.Authenticator RevocationDisabling compromised passwords, tokens, or sessions so they can no longer be used.Authenticity checkA method used to confirm that a product, part, or component is legitimate.Authenticity VerificationChecks that help confirm software, firmware, or hardware is genuine and has not been altered.Author roleA WordPress role with content-creation privileges; capabilities can vary by configuration.Author-level accountA WordPress role that can publish content and, by default, upload files.Authorial responsibilityThe obligation to stand behind the content, decisions, and disclosures tied to a work.Authoritative DNSThe official DNS servers that answer for a domain zone.Authoritative name serverA DNS server that provides the official records for domains it manages.Authoritative sourcethe system treated as the trusted reference for a given data field.AuthoritativenessThe degree to which a source is seen as credible, reliable, and worth referencing.AuthorityThe ability to make decisions, direct action, and approve resources.Authority driftThe gradual shift of decision-making power from people to automated systems without a clear reassignment of responsibility.Authority requestA request that appears to come from a government or legal body and can trigger special handling.Authority signalA trust indicator that helps a system judge whether content appears credible or relevant.Authorization bindingThe practice of tying approval to one exact action, resource, and destination.Authorization chainThe formal sequence of approvals required before a sensitive security action can proceed.Authorization checkA control that verifies whether a request is allowed to perform a sensitive action.Authorization ChecksControls that decide whether a request or user is allowed to perform an action.Authorization controlsRules that decide which terminals or users are permitted to connect to a service.Authorization layerA control point that decides whether a requested action should be allowed at runtime.Authorization regimethe set of approvals required to build or operate network infrastructure.Authorization Regression TestingRepeated testing to make sure access-control fixes stay intact after code changes and feature updates.Authorization weaknessA flaw where software checks access incorrectly, allowing actions that should be blocked.Authorization workflowThe process used to approve and register devices or users before access is granted.Authorized attackerAn attacker who already has some valid access or trust relationship before triggering the flaw.Authorized paymentA transfer approved by the user, even if that approval was manipulated.Authorized viewsA warehouse feature that exposes only approved slices of data without opening the source dataset directly.AuthorshipThe responsibility and ownership of a piece of writing, including who created and edited it.Auto modeA higher-autonomy mode that uses automated screening to decide whether actions can proceed.Auto-configurationFramework-driven setup that enables features based on detected dependencies or settings.Auto-prepend fileA PHP setting that forces one file to run before the main script.Auto-propagating wormMalware that can replicate itself without manual copying, often by abusing trusted workflows.Auto-remediationA feature some CSPM tools may use to correct certain risky settings automatically, usually with policy controls.AutocatalysisA reaction in which the product helps drive its own formation, strengthening the reaction over time.AutofatturaSelf-issued invoice used in specific regulatory situations.AutoItA legitimate Windows automation language that attackers can abuse to run scripted malicious logic.Automated AI ValidationTesting that looks for unsafe or noncompliant behavior before or during deployment.Automated classificationA system that sorts or labels inputs based on learned patterns and predefined task goals.Automated CollectionThe use of scripts or software to gather files or information at scale before theft.Automated compliancecontrols and policy checks embedded in systems so governance can run continuously.Automated controlsSoftware-based checks that help enforce rules, detect anomalies, or approve transactions.Automated cyber attackA cyber operation in which software performs attack steps with little or no human intervention.Automated Decision-Making System (ADS)Software that makes or helps make decisions by scoring, ranking, or filtering people.Automated deletion requesta system-generated opt-out or removal notice sent on a user's behalf.Automated exploitationAttacks that use tools to scale scanning and abuse of weaknesses with minimal manual work.Automated fraudrepeated digital abuse designed to gain money, access, or advantage through machine-driven workflows.Automated indicatora metric computed by a system to help track performance or deviation.Automated patchingThe use of software or AI to generate and validate code fixes for vulnerabilities.Automated responseSecurity actions triggered by software without manual approval, such as isolating a host or disabling access.Automated submissionA report produced with scripts or other tooling, often at high volume and with limited manual verification.Automated Vulnerability TestingRepeated or scripted probing of systems to find weaknesses at high speed.Automatic backupA feature that copies files or photos to the cloud without manual upload each time.Automatic failoverA design that lets malware switch to a backup server when the primary path stops working.Automatic Identification System (AIS)A maritime radio system that broadcasts vessel identity and movement information.Automatic reconnectionA device feature that joins known networks without fresh user approval.Automatic Renewala billing setting that extends a subscription unless canceled.Automatic Speech Recognition (ASR)Software that converts spoken language into text, often used in voice assistants and call systems.Automatic updateThe browser’s built-in mechanism for receiving and applying security fixes quickly.Automatic updatesA patch delivery model that installs browser fixes without relying on users to update manually.Automatic verificationSoftware checks that can validate fields, consistency, or completeness, but not necessarily truthfulness.Automation abuseThe use of automated tools to increase the speed, scale, or adaptability of malicious activity.Automation ExposureThe extent to which a job or process contains tasks that could be machine-assisted or automated.Automation permissionA macOS setting that lets one app control another app or system function.Automation pressureThe tendency for software to replace or reshape tasks once done by people.Automation workflowscripted release steps that can be misused if credentials are stolen.AutomorphismA symmetry that maps a mathematical structure onto itself without changing its core form.Autonomous agentsSoftware systems that can carry out tasks with limited human intervention across a workflow.Autonomous AI agentAn AI system that can plan and take actions using tools with limited human input.Autonomous AI agent systemSoftware that can plan and carry out multi-step tasks with limited direct human input.Autonomous Completion RateAn article-proposed metric for the share of eligible tasks finished correctly without human intervention.Autonomous controlleran organization that determines its own purposes and means of processing.Autonomous cyber incidentA security event in which software behaves with limited human direction and produces unexpected or risky actions.Autonomous cyberattackAn attack chain that can be planned or executed by an AI system with little human direction.Autonomous daemonA background service that can keep running and making decisions with limited direct input.Autonomous defensesSecurity tools or workflows that use AI to analyze, decide, or respond automatically.Autonomous DetectionSecurity analysis or response that operates with minimal human intervention.Autonomous penetration testingAutomated security testing that simulates attacks with limited human input.Autonomous pentestingSecurity testing where software sequences tasks and adjusts actions with minimal human input.Autonomous responseAutomated security actions that a platform can take without waiting for a human analyst.Autonomous Security AgentAn AI-driven system that independently searches for vulnerabilities in software or systems.Autonomous vulnerability discoveryAI-driven identification of software flaws with limited direct human input.Autonomy debtRisk created when automation grows faster than oversight and recovery controls.Autopilot agentAn AI agent designed to take action in a workflow after policy checks or human approval, rather than only suggesting next steps.Autostart LocationA Windows path or setting that can cause a program to run automatically during login or startup.AutoTypeA Fastjson feature for automatic type resolution during parsing, historically sensitive from a security perspective.Aux inputa port that accepts an external audio signal from another device.AV/EDRSecurity tools designed to detect malicious activity and block ransomware execution.Availability errora message showing that a service or listing cannot currently be reached.Availability lossA service outage caused by overload or disruption of access.Availability regressionA software update side effect that disrupts access or service stability instead of adding a new feature.Availability targeta stated uptime level a service aims to maintain.Avatara digital figure or interface that mediates interaction between a person and a system.Average powerthe long-term energy output measured over time.Aviation communicationsThe systems and links used to exchange operational information between aircraft, air traffic control, and supporting services.AVIFA modern image format designed for efficient compression on the web.AvionicsElectronic systems used on aircraft for navigation, communication, sensing, and control.AvowalThe formal public acknowledgment of an intelligence or security role or identity.AWAITINGa status label shown on the listing, with no additional explanation in the source.AWAITING statusA label that can signal a pending or incomplete listing state.Awareness and trainingRelated but distinct education concepts used in cybersecurity programs.Awareness ProgramA structured effort to improve user behavior and decision-making through repeated security education.AWS BudgetsA cloud budgeting tool used to set spending thresholds and trigger alerts.AWS ConfigAn AWS service that records configuration changes for cloud resources and supports security and forensic review.AWS credentialsSensitive keys and tokens used to authenticate to Amazon Web Services.AWS Data ExportsAWS service for exporting cost and usage data into formats that can be queried and analyzed downstream.AWS EC2Amazon’s virtual server service, which attackers can abuse to spread login attempts across many source IPs.AWS IAMAmazon Web Services Identity and Access Management, the policy system that controls what identities can do in AWS.AWS IAM access keyA credential used to authenticate programmatic access to AWS services.AWS MarketplaceA service that can be involved in some Bedrock third-party model access and subscription flows.AWS OrganizationsAWS’s multi-account management service, which can help centralize or reduce root credential exposure.AWS root userThe top-level identity in an AWS account, with complete control over resources and billing.AWS Secrets ManagerA service for storing and retrieving sensitive data such as API keys and private keys.AWS-native toolsSecurity controls built into Amazon Web Services itself.AWSCompromisedKeyQuarantineAn AWS-managed policy that restricts risky actions after a key is treated as exposed.AxiosA JavaScript HTTP client library used in browser and Node.js environments.AzobenzeneA light-responsive molecule that can switch forms under certain wavelengths.Azure AutomationMicrosoft’s service for running scheduled and on-demand automation workflows in cloud and hybrid environments.Azure consumptionThe amount of Microsoft Azure services and resources used by customers or organizations.Azure Key VaultA Microsoft service for storing and managing secrets, keys, and certificates more securely than embedding them in code.Azure PolicyA governance service used to apply rules and standards across Azure resources.Azure resource lockA protection setting that can block deletion or modification of selected resources.Azure Storage account access keyA powerful secret that can authorize access to data in a storage account.Azure tenantThe identity and access boundary for an organization in Microsoft cloud services.Azure Virtual DesktopMicrosoft’s cloud desktop platform for delivering remote Windows sessions to users.B readth of blast radiusThe number of devices or services that may be affected when a single control point is weakened.B-rollsupplementary footage used to support narration and visual flow.B2B suppliera business that serves other companies, where disruption can affect procurement and operations.Bacha major composer often used as a reference point in classical music discussions.Back-connect proxyA design where an infected host relays attacker traffic instead of only receiving commands.Back-end serviceAn internal system that handles business logic behind a public interface.Back-office integrationlinks between the checkout device and administrative, reporting, or accounting tools.Back-office platforminternal system used to manage sales, inventory, and business operations.Back-office processingInternal systems that handle account setup, billing, and records.Back-office systemsInternal tools that handle administration, inventory, logistics, and other non-customer tasks.Backdoor deploymentPlanting unauthorized access on a server so access can continue later.Backend compromiseUnauthorized access to internal systems that manage services, approvals, or transaction workflows.Backend layerThe less visible systems that keep an online operation running behind the scenes.Backend servicesServer-side systems that process requests and enforce policy.Backend systemsthe server-side components that run behind a user-facing application.Backend verificationServer-side checks that validate app or request trust outside the device.Background accessApp access that can continue without obvious user interaction.Background activityApp behavior that continues while the user is not consciously aware of it.Background compilationProcessing that happens while the user continues interacting with the software.Background locationLocation access that continues when an app is not in the foreground.Background processingapp activity that continues even when the app is not in the foreground.Background serviceAn app component that can run outside the visible interface to handle longer-lived tasks.BackhaulThe links that carry traffic from radio sites into the wider network.BacklashSmall mechanical play in gears that can reduce positioning accuracy.Backlog driftThe gradual loss of connection between a work item and its original intent.BackoffA retry method that waits longer between attempts to reduce pressure on an unhealthy service.Backported fixA security patch adapted for older software branches that still need support.BacksourcingMoving outsourced software work back into the company so it can directly control code, delivery, and governance.BacktestingRunning a candidate detection against historical data to estimate alert volume and false positives before deployment.Backup agentSoftware installed on endpoints to manage backups, often with elevated privileges to reach protected files and services.Backup and recoveryThe process of preserving critical configuration or data and restoring it after loss, change, or compromise.Backup and restore testingThe practice of verifying that stored data can actually be recovered during an incident or outage.Backup anomaliesunexpected changes or failures in backup systems that can signal trouble.Backup copya stored duplicate of data kept for recovery or continuity purposes.Backup deletionthe removal of restore copies to make recovery harder.Backup disciplineThe practice of keeping an independent copy of important data outside the primary service.Backup freshnesshow recent a backup is compared with the latest live data.Backup infrastructureThe systems used to create, store, and restore backup data.Backup integrationA component that connects backup and restore functions to server management tools.Backup management planeThe administrative layer that controls backup, replication, and recovery functions.Backup mirrora copied storage set that may preserve more sensitive data than operators expect.Backup PluginSoftware that connects backup and restore functions to a hosting or management platform.Backup powerEmergency electrical supply used to keep critical systems running during a grid failure or utility interruption.Backup readinessthe ability to restore data quickly after disruption without relying on attackers.Backup recoverythe process of restoring systems and data after disruption.Backup recovery readinessthe ability to restore systems and data after disruption.Backup regressionA new defect introduced by an update that breaks a previously working backup function.Backup repositorya storage location for copied data used for recovery after loss or attack.Backup retentionThe period for which backup copies remain available before deletion or overwrite.Backup rotationa schedule for moving copies between primary storage and backup media.Backup servicea system that stores recoverable copies of data for restoration after an incident.Backup statusThe condition of recovery copies that can limit damage after an incident.Backup syncan automated process that copies data between services or devices for recovery.Backup ViewerA read-only role intended for monitoring jobs and session details.BACnetA standard used for communication between building automation and control devices from different vendors.BACSBuilding automation and control systems used to manage functions such as heating, cooling, and other facility operations.BacteriophageA virus that infects bacteria, often studied as a tool for antibacterial research.Badge securityprotecting event credentials from being copied, shared, or misused.BadIISA malware family associated with web-server implants that can alter or proxy HTTP traffic for fraud and theft.Balancing testThe review used to weigh privacy claims against public interest, expression, and other legal grounds.Ballot stuffingRepeated or fraudulent voting intended to distort results.Banded pricingA pricing model that changes by usage band or tariff band.Bandpass filterA circuit that passes a specific range of frequencies while reducing signals outside that range.Bandwidth-sharing appsoftware that compensates users for sharing idle internet capacity.Bandwidth-sharing applicationsoftware that lets users lend unused connection capacity, but can be misused if installed without consent.Bank account activationThe setup step required before a banking product can be used.Bank mandateinstructions that define who can authorize company payments.Banking correspondence templatesreusable message formats that may support impersonation or fraud.Banking desertificationthe gradual loss of local banking presence in a territory.Banking fraudFraud aimed at stealing credentials, approvals, or transaction value from financial accounts or apps.BAPLIEA shipping message format used for container stowage and vessel planning data.Bare metalsoftware that runs directly on hardware without a general-purpose host operating system.Bare RepositoryA server-side Git repository without a working tree, commonly used for hosting code.Bargaining powerA worker's ability to negotiate pay, conditions, and career progression.Barometeran instrument used to measure atmospheric pressure.Barrier to entryThe effort, cost, or expertise needed to start doing a technical task.Bartop arcadeA compact arcade cabinet designed to sit on a table or counter.Base imagethe starting image layer that other container content is built on.Base systemThe core components shipped with an operating system, separate from add-on packages.BasebandThe low-level communication system in a phone that manages cellular radio functions.Baseband modeA low-level signal-processing mode used to work with raw radio data.Baseband ProcessorA dedicated chip or subsystem that handles cellular and radio functions separate from the main processor.Baseboard Management Controller (BMC)An embedded controller that handles out-of-band server management independently of the main operating system.Baseline MonitoringThe practice of learning normal system behavior so anomalies stand out more clearly.Bash historyA file that records shell commands and can reveal operator activity or secrets.BASICA family of beginner-friendly programming languages designed for simple, readable code.Bastion hostA hardened jump server used to reach private systems without exposing them directly to the internet.Batch endpointA REST feature that groups multiple requests into one call for efficiency.Batch RequestA single API call that triggers multiple internal operations or subrequests.Batch RouteAn API endpoint that processes multiple virtual requests in a single call.Batch scriptA text-based Windows script that automates commands and can be abused for malicious execution.Batch-processing systembackend tooling that handles jobs or transactions in scheduled groups rather than live user sessions.BatchingCombining multiple inference requests to improve throughput and make better use of GPU resources.Battery Energy Storage System (BESS)A system that stores electrical energy and releases it when needed to support grid operations.Battery Management SystemThe software and electronics that supervise battery health, safety, and performance.Battery packA removable module that stores electrical energy for a device.Battery recyclingThe process of collecting used batteries and recovering materials from them.Battery technologythe hardware and chemistry that determine how an EV stores and delivers power.Battery testingChecks used to measure how a cell performs before reuse or assembly.Battle passA progression system that unlocks rewards as players earn in-game progress.Battle Pass timerAn in-game countdown tied to seasonal content access or progression.Battlefield dataOperational information collected from conflict environments and used to train, test, or improve military systems.BaudThe number of signal symbols transmitted per second on a channel.Baud rateThe speed of serial communication, measured in signal changes per second.BCBS 239Basel Committee principles focused on accurate, timely, and complete risk data aggregation and reporting.BCDRA general shorthand for continuity and recovery planning; the exact expansion is not confirmed in the provided material.BcryptA password-hashing scheme that uses salts and a work factor to make offline guessing more expensive.Bed adhesionThe grip between the first layers of a print and the platform below it.Bed levelingSetting the print surface so the first layer stays evenly spaced across the build area.Bed ManagementThe process of allocating, tracking, and optimizing the use of hospital beds to match patient demand and capacity.Beeper audioAudio produced through a basic internal speaker or buzzer.Behavior baseliningComparing current activity against normal patterns to spot unusual or risky changes.Behavior changeA training goal focused on changing day-to-day actions, not just delivering information once.Behavior TreeA structure used in game AI to decide how non-player characters react and act in different situations.Behavior-based assessmentselection methods that evaluate how a person acts in practice.Behavior-based filteringRules that look for suspicious patterns in actions, not just the content itself.Behavioral anomalyActivity that differs from a user’s normal pattern and may need review.Behavioral auditA structured test that checks how a model acts across many scenarios, not just single prompts.Behavioral BiometricsRisk signals derived from how a person interacts with a device, such as typing rhythm, swipes, or mouse movement.Behavioral cluesHuman and workflow anomalies such as inconsistent identity details, camera avoidance, or unusual communication habits that can suggest fraud.Behavioral dataInformation about actions or patterns of conduct that can be used to rank, monitor, or allocate work.Behavioral designProduct choices that shape how people act, decide, and return.Behavioral footprintThe pattern of actions a user leaves across apps, services and locations.Behavioral indicatorsObservable patterns that may suggest unusual or risky user activity.Behavioral influencethe way a system can subtly change how people respond or describe experience.Behavioral intelligenceAnalysis of how a user interacts with a session to identify unusual patterns.Behavioral metricsMeasures that track actions such as phishing reporting, secure workflow use, or risky clicks.Behavioral mismatchA difference between normal user patterns and a suspicious request.Behavioral monitoringThe observation of usage and workflow signals to detect friction, drop-off, or unusual patterns.Behavioral reviewAnalysis of actions and patterns rather than only known bad markers.Behavioral riskSecurity risk that comes from how people react, not only from software flaws.Behavioral scoringRisk analysis based on how a user or bot interacts with a site, not just where it comes from.Behavioral signala measurable action that can help a platform infer preference or interest.Behavioral signalspatterns in activity that can reveal abuse without malware.Behavioral testingA way of checking whether defenses can handle attacker actions and sequences, not only known indicators.Behavioral timelineA sequence view of events over time, used to reconstruct suspicious activity.Behavioral trackinglogs that record how users interact with emails, alerts, or listings.Behavioral validationTesting whether a model still performs as expected after a change.Below-threshold activityActions designed to stay under the level that would normally trigger a formal armed response, while still causing strategic harm.Belt fileA motor-driven abrasive tool used for shaping and smoothing surfaces.Bench servicingRepair work done at a workbench with tools, testing, and direct access to the device.Bench testA controlled check of equipment before it is used in the field.Benchmark cheatingAny behavior that makes a test score look better than the model’s real capability.Benchmark harnessThe controlled environment and rules used to evaluate a system’s performance.Benchmark methodologyThe rules, scoring, and test setup that determine what a performance result actually means.Benchmark metricsDefined tests or measures used to judge whether a system performs safely and effectively.Benchmark saturationThe point at which a fixed test becomes too easy for leading models and stops distinguishing performance well.Beneficial ownership registera database that identifies who ultimately controls or owns an entity.Beneficiary recordsFiles tied to eligibility, enrollment, or service access.Benefit-SharingMechanisms intended to ensure communities receive recognition or value when their knowledge is used.BES Cyber SystemA cyber system whose compromise could affect the reliable operation of the bulk electric system.Beta buildA pre-release software version used to test features that may still change before public rollout.Beta releaseA pre-final software build used to gather feedback and catch remaining issues.Betacam SPa professional analog video format used in older production workflows.BFLABroken Function Level Authorization, where a user can invoke actions they should not be allowed to use.BGP hijackA routing abuse in which false internet announcements divert traffic away from its intended destination.BI ConnectorA middleware layer that helps SQL-based analytics tools communicate with MongoDB.Bi-temporal dataA model that tracks both event time and system-record time for the same fact.Bias pointThe steady operating condition that shapes how a device responds to signals.Bidirectional SubstationThe interface that lets a building receive heat from or feed heat into the district network.Biennial planA subscription billed every two years, often at a lower effective price.Big FiveA shorthand for the largest U.S. tech platforms discussed in this market comparison.BIG-IP APMF5's access-control component used to manage protected access to applications and data.BigDecimalA Java type for precise decimal values, which can become security-relevant when bound from input and rendered back to users.BigDecimal renderingThe process of displaying precise numeric values, which can be abused for response amplification in affected cases.Bill of ladingShipping document that records cargo details and transfer of goods.Billing consistencythe alignment of pricing rules across invoices, account records, and contract terms.Billing dataThe records used to generate invoices and account charges.Billing governanceThe controls that bind usage, identity, and payment details to a legitimate account or organization.Billing IntegrityThe accuracy and reliability of charges, purchases, and account credit in a payment system.Billing logicThe rules a system uses to turn usage data into a customer bill.Billing provenanceThe traceable origin of who paid for a service and whether that payment was legitimate.Billing scheduleThe timetable that defines when charges or discounts are applied.Billing systemsoftware and records used to issue, track, and reconcile payments.Billing unitThe smallest metered quantity used to calculate a charge for a service.Binary authorizationA control that allows only approved, verified software to run in a protected environment.Binary brickingcorrupting selected system binaries to hinder recovery or remediation on the affected device.Binary digitA single 0-or-1 value used to represent information in digital systems.Binary dropperA compiled program that delivers or launches additional malicious payloads.Binary inspectionExamining compiled program files to find code structure, symbols, strings, and other useful clues.Binary loaderA component that starts an infection and retrieves or запуска other malicious pieces in later stages.Binary paddingA technique that adds nonfunctional data to a file to increase its size and can affect inspection workflows.Binary PlantingA flaw where a program runs an attacker-controlled file from a predictable or writable location.Binary provenanceVerification of where a compiled program came from and whether it was altered.Binary shadowingA technique where a malicious executable uses the same name as a trusted tool so the operating system may run the attacker’s file first.Binary sizeThe amount of storage a compiled program occupies on disk or in memory.BindThe LDAP authentication step where a client proves identity to the directory server.Bind identityThe account or identity used to authenticate to an LDAP directory.Bind mountA mount that makes one directory appear at another path.Bind variableA parameter passed into a query so user input is treated as data, not executable SQL.Binding commitmentsenforceable promises to change specific practices.Binding Corporate RulesInternal multinational transfer rules approved by regulators for moving personal data within a corporate group.Binding regulationA legal framework that creates enforceable obligations rather than voluntary guidance.Binding treatya legal agreement meant to create enforceable obligations.Bing resultsweb search answers pulled from Microsoft’s search service and shown inside Windows.BioBlitzA time-limited event where participants rapidly record species or natural observations in an area.BiofabricationMaking materials with biological systems instead of only traditional industrial methods.Biofoulingbuildup of living material on equipment that can interfere with normal operation.Bioinformaticscomputing work that may handle sensitive research data and shared workflows.Biological foundation modela large model trained on biological data to identify patterns and make predictions.Biological hypothesisA testable explanation about how a drug or target may affect a living system.Biological sampleA physical specimen that can contain or reveal medically relevant information.BiomarkerA measurable biological feature used to help describe disease or guide treatment decisions.Biometric identifiersPhysical or behavioral traits such as fingerprints or voice prints used to identify a person.Biometric liveness checkA control that looks for signs a real, live person is present during a biometric scan.Biometric matchingThe process of comparing facial or fingerprint data across systems to verify identity.Biometric recognitionAutomated identification or verification using physical traits such as facial features.Biometric surveillanceAutomated monitoring or identification based on physical or behavioral traits such as face, voice, or gait.Biometric systemTechnology that uses unique physical or behavioral traits for identity checks.Biometric unlockA design in which biometrics can unlock a local key or device function without sending the biometric data to a remote service.BIOS/UEFIMotherboard startup firmware that initializes hardware before the operating system loads.BIP-32Standard for deriving many keys and addresses from one master seed.BIP-39 seed phraseA human-readable recovery phrase that can recreate a crypto wallet if obtained.BIP32A Bitcoin standard for hierarchical deterministic wallets, allowing many keys and addresses to be derived from one seed.Bipartisan billA legislative proposal supported by lawmakers from more than one political party.BirdNETA research platform for identifying bird species from audio recordings.BirdNET-GoA self-hosted application built to analyze soundscapes and classify birds locally.Bit rateThe speed at which data is transmitted on a communication link.Bitcoin forfeitureA legal process that transfers cryptocurrency connected to criminal conduct to the government.Bitcoin ransoma cryptocurrency payment demand designed to be hard to reverse or trace.Black box AIAn AI system whose internal decision process is not fully visible or easily interpretable.Black box modelA system whose internal reasoning is difficult to inspect or translate into human terms.Black screen after sign-inA failure state where the system accepts login but does not fully render the desktop.Black-box extractionA technique for learning a model’s behavior through repeated queries without access to its internals.Black-box testingsecurity testing performed without access to internal source code or system internals.Blackmailforcing compliance by threatening to reveal damaging information.Blackout riskThe chance that electricity supply cannot reliably meet demand.Blame cultureAn environment where fault-finding discourages openness, reporting, and constructive review.Blast-radius analysisA method for estimating how far a failure or incident could spread across connected systems.Blended IdentityAn authorization model that evaluates both the human user and the agent when granting access.Blended ThreatA threat that starts in one domain, such as cyber, and creates effects in another, such as physical operations.Blind Prompt InjectionMalicious instructions that influence an AI system without the attacker needing direct feedback.Blind spotsAreas where weak coverage or poor interpretation hides important threats.Blind XXEAn XXE variant where the attacker may not see direct output, but the parser still processes the malicious entity.BlinkChromium’s rendering engine that processes web content such as HTML, CSS, and JavaScript.BlobA binary object in a registry, often representing an image layer or configuration data.Blob URLA URL that points to data generated in the browser or stored on a trusted service, depending on the implementation.Block diagramA diagram that shows a system as connected functional parts.Block graphicssimple image shapes built from large colored segments or tiles.Block themeA WordPress theme model built around blocks and the Site Editor, rather than only classic PHP templates.Block zeroingThe process of overwriting newly allocated storage blocks with zeros before they are handed to a user or workload.Blockchain C2A control method that uses blockchain infrastructure to help deliver commands or configuration.Blockchain dead dropA pattern where malware reads configuration or pointer data from a public blockchain.Blockchain intelligenceAnalysis of blockchain activity to understand transactions, addresses, and related risk patterns.Blockchain resolverA potential mechanism where a blockchain network may be used to store or update C2 information, which can make blocking harder if used that way.Blockchain signalingusing ledger activity to carry indirect operational meaning.Blockchain-backed servicesServices that use blockchain-based components to support operation or access.Blockchain-based domain resolutionA naming approach that relies on blockchain-linked records instead of standard DNS alone.Blockchain-hosted payloadsPayload delivery or reference methods that rely on blockchain infrastructure instead of a normal server.Blocking classifierAn automated policy filter that helps decide whether an AI model should answer a request.Blocking sanctionsRestrictions that freeze property and bar U.S. persons from dealing with designated parties.Blocking StatuteAn EU rule meant to reduce the impact of certain foreign sanctions within Europe.BlocklyA visual programming library that lets users build logic with drag-and-drop blocks.Blood hackA mod that restores or adds blood effects in a game.Blood processingLab handling steps used to separate or prepare blood-related samples.BloodHounda graph analysis tool used to map relationships and privilege chains in Active Directory.BlueKeepA remote code execution flaw in older Windows Remote Desktop Services, tracked as CVE-2019-0708.BlueNoroffA financially motivated threat cluster associated with North Korean cyber operations and cryptocurrency theft.BlueprintsUnreal Engine's visual scripting system for building gameplay logic without traditional source code.Bluetooth Classic (BR/EDR)The Bluetooth mode commonly used for audio devices and traditional device-to-device connections.Bluetooth stackthe software layer that manages wireless discovery, pairing, and communication.BNB Smart ChainA public, EVM-compatible blockchain network that supports smart contracts.Boardthe governing body that oversees strategy, accountability, and risk.Board committeea subgroup of directors that reviews risk, audit, or compliance issues.Board confidenceThe level of trust directors place in the organization’s security posture and reporting.Board readinessThe ability to brief directors clearly on strategy, risk, and business impact.Board revisionA specific hardware version that can change compatibility requirements.BOD 26-04A Binding Operational Directive focused on prioritizing security updates based on risk.Bodily regulationPractices that help stabilize arousal, breathing, and physical tension.Body perceptionHow someone sees and interprets their own physical appearance.Body-centric filteringEmail scanning that focuses mainly on visible message text rather than attachments or linked content.BOF (Beacon Object File)A post-exploitation format used to run operator code inside a target process.BOF loadingA method for running modular post-exploitation code inside a target process.BoilerplateRepeated setup code that developers often want to minimize.Bollinatoa budgetary clearance mark indicating the financial review stage has been completed.Bolloa stamp duty charge that may need separate handling in invoicing.BOMBill of materials, the parts list used to build a product.Bonda financial guarantee that may be forfeited if a contract is not fulfilled.BondingThe storage of shared Bluetooth keys so devices can recognize each other later without repeating the full pairing process.Bonifica logicaLogical remediation focused on restoring trustworthy system state.Boot ProcessThe sequence a computer follows when starting up and loading its initial software state.Boot promptThe first command interface a system presents after powering on.Boot SequenceThe startup phase when a system loads its initial state and security controls.Boot StorageThe storage layer involved in starting a system and loading its operating environment.BOOT_START driverA driver that loads during early system startup, before most user-mode security tools are active.Boot-time checkA validation step performed before the OS starts, often used to enforce hardware or security rules.Boot-time persistenceA trait of code that starts automatically when a device powers on, making it harder to remove than a temporary process.BooterA common term for a DDoS-for-hire platform, usually managed through a web interface.Bootstrap chainThe sequence of steps a platform follows to start running code and loading components.Bootstrappingthe first stage of preparing a new system for use.BosswareWorkplace monitoring software that tracks employee activity, productivity, or behavior.Bot accountAn automated or semi-automated social profile used to simulate human activity or amplify messages.Bot and fraud fusionA detection approach that combines bot signals with fraud-related behavior analysis.Bot automationSoftware-driven accounts or workflows that can perform actions automatically at scale.Bot flagA Wikimedia status used to identify approved automated editing accounts.Bot policyThe technical and community rules that automated clients must follow when interacting with a service.Bot verificationMethods used to confirm a crawler's identity, such as cryptographic checks, IP validation, or reverse DNS.Boundary conditionsThe assumptions that define how a simulation behaves at its edges.Boundary deviceA system such as a router or gateway that sits between local networks and external traffic.Boundary enforcementThe act of checking rules at the point where one system trusts another, such as payment authorization or network access.Boundary layerthe thin region where a liquid or gas directly interacts with a surface.Boundary managementThe practice of keeping instructions separate from untrusted data so one cannot override the other.Boundary testingTests designed to see whether a system can exceed its permitted scope or perform unapproved actions.Bounded autonomyA control model where an agent can act only inside predefined rules and permissions.Bounded crawlingCrawling limited by rules such as scope, depth, or request count.Bounded functionA capability that is intentionally narrow rather than general-purpose.Bounded outputA restricted set of allowed answers that makes machine action easier to control.Bounded workflowA process with a clear scope, start point, and end point that is easier to automate safely.BPFA Linux kernel mechanism used for filtering, tracing, and sandboxing, often with JIT support.BPF mapA kernel data structure used by eBPF programs to store and share state between kernel and user space.BPF mapsShared data structures used by eBPF programs to store state.BPMN 2.0A standard graphical notation for modeling business processes in a consistent way.Brain anatomythe study of the structure of the brain and its regions.Brainstemthe lower part of the brain that helps control essential functions.Branch Target Buffer (BTB)A CPU structure that helps predict where indirect branches will go.Branch-specific fixA patch released for a particular software line or version family.Brand authenticationthe practice of making a public-facing channel easy to verify as genuine.Brand consistencythe degree to which a product keeps its visual and editorial identity stable across experiences.Brand consolidationThe process of bringing products or operations under one public identity.Brand recallthe ability of an audience to remember a brand after seeing it.Brand safetythe practice of keeping messaging and placements away from misleading or harmful associations.Brand templatingReusing one attack layout across many victim brands with small changes.Breachunauthorized access to a system or account.Breach counta reported total of incidents linked to one actor or campaign, which may still leave technical details unresolved.Breach detectionMonitoring that helps identify whether personal data appears in leak datasets.Breach indexA tracking resource that groups incidents by importance, impact, or relevance instead of only by technical detail.Breach Notification RuleThe HIPAA rule that governs notices after a breach involving unsecured protected health information.Breach scopethe confirmed boundaries of what was affected in an incident.Breached scopeThe full extent of data, systems, or users affected in a security incident.Breached-password screeningChecking passwords against known leak lists to block weak or reused secrets.Break-even pointThe transaction level at which a plan’s savings balance out its monthly cost.Breaking newsInformation presented as newly available and potentially time-sensitive.Breakout boardA small board that makes an electronic component easier to connect and test.Breakout timeThe interval between an attacker’s initial compromise and the start of lateral movement inside a network.Bribery probean investigation into whether money or favors were used to influence official actions.BrickingRendering a device unusable because its software cannot start correctly.BridgeA protocol that moves assets between blockchains, sometimes used to complicate tracking.Bridge contractA smart contract that moves or represents assets between blockchains or network layers.Bridge riskSecurity exposure that appears when assets move between two connected systems.Bridge subsystemThe Linux kernel component that implements software bridging for Ethernet networks.Bring Your Own EDRA technique class that repurposes a legitimate endpoint security agent as part of the attack path.Bring-your-own-toolsA model where a service works with the customer’s existing security stack.BrittlenessA tendency to break or crack with limited bending.Broadcast mediumA communication channel where one transmission can be received by many listeners.Broadcast playoutSystems that schedule and deliver media content for transmission.Broadcast spectrumThe radio-frequency space used to send television signals over the air.Broadcast sponsorshipPaid branding that appears during live event coverage.Broadcast televisionA traditional model where viewers receive scheduled content with limited control.Broken electronicsdevices that no longer work as intended but may still contain useful parts.BrokerThe server component in MQTT that routes messages between publishers and subscribers.BrownfieldPreviously used land that can be repurposed for new infrastructure.Browser AutofillA browser feature that stores and enters saved personal or login data, which malware may target.Browser automationSoftware control of a browser through scripted actions, which can be abused to drive hidden sessions.Browser cacheLocal storage used by browsers to keep fetched content for faster reuse.Browser chromeThe browser-controlled interface area, including the address bar and security indicators.Browser compartmentalizationSeparating browsing activities so one identity or task does not blend with another.Browser compatibilityThe degree to which a website or web app works correctly across different browsers and operating systems.Browser credential theftThe extraction of usernames, passwords, or session material saved by a web browser.Browser DLPData loss prevention controls that help restrict sensitive information from leaving through the browser.Browser encryptionA storage protection layer that helps protect saved browser data at rest.Browser exploit windowThe period between patch release and full deployment, when unpatched systems remain targetable.Browser FingerprintA set of browser and device characteristics that can help distinguish one client session from another.Browser hijackA condition where a page makes the browser seem locked or controlled, often through deception rather than real system compromise.Browser hijackerSoftware that changes browser settings, redirects searches, or alters web traffic without proper user consent.Browser history APIA browser interface that allows extensions to read a user's history when granted the proper permission.Browser lock screenA page or overlay that makes a browser appear stuck or unusable.Browser memoryThe temporary working space used by a browser while running scripts and handling page content.Browser persistenceTechniques that help malicious activity survive user navigation or short-term browser resets.Browser phishingA phishing method that presents the fake login or credential page inside the browser session.Browser policy engineA browser layer that applies rules about what content can load or execute.Browser profile dataStored browser information such as saved logins, autofill entries, and session artifacts.Browser protectionsSecurity controls inside browsers that are meant to make stored secrets harder to steal.Browser ProxyAn intermediary that routes browser traffic through a defined path for control or inspection.Browser restartThe point at which a downloaded update becomes active, which is essential for actual risk reduction.Browser session hijackingReusing a victim's authenticated browser state, such as cookies or tokens, to act as that user.Browser settingsthe configuration area where users can enable or adjust browser features.Browser signalssettings or data points a browser exposes that can shape privacy and access decisions.Browser telemetryData about what happens inside a browser session, including requests and page interactions.Browser toolA web-based interface that lets users interact with software or connected devices.Browser trafficthe requests and responses sent by a web browser while loading sites and services.Browser trustThe habit of checking whether a website and its content come from a reliable domain.Browser trust boundaryThe line between user expectations and what installed software can actually control.Browser-accessibleA page or service that can be opened directly in a web browser.Browser-accessible admin consoleA management interface that can be reached through a web browser, often increasing exposure if not tightly restricted.Browser-basedSoftware that runs inside a web browser rather than as an installed desktop program.Browser-based attackA technique where a web browser becomes part of the exploit path, often through a malicious page or web-delivered trigger.Browser-based linkA web invitation that can open a session in a browser.Browser-based office softwareproductivity tools that run through a web browser instead of a desktop app.Browser-based sign-inAn interactive login flow that runs inside a web browser rather than through an API-only path.Browser-capable agentAn AI assistant that can browse webpages or use web search as part of its workflow.Browser-delivered exploit chainA multi-step attack that starts in the browser and may escalate into deeper system control.Browser-in-Browser (BitB)A phishing method that fabricates a login window inside a webpage to mimic real browser UI.Browser-in-the-BrowserA phishing trick that creates a fake login window inside a browser page to mimic a real sign-in prompt.Browser-level controlsDefenses that monitor or restrict risky actions inside the browser itself.Browser-level filteringSecurity controls built into a browser to help spot or block risky content.Browser-like rendererSoftware that displays HTML content and may process scripts or embedded elements.Browser-session controlManipulation of an active browser session after login, often more valuable than stolen passwords alone.Browser-session hijackingTaking over an authenticated web session by abusing browser state or session material.Browser-side assemblyA delivery method where the browser helps combine smaller components into a final payload.Browser-side stagingA delivery method that assembles or prepares payload components inside the browser.Browser-side theftAttacks that capture data inside the victim's browser during web use.Browser-stored credentialsPasswords and login data saved by web browsers, which can be valuable to infostealers after initial access.Browser-to-shell handoffThe moment a web interaction leads to command execution in a local terminal or shell.Browser-to-shell transitionA process path where a browser leads into a command-line tool such as PowerShell or cmd.exe, often a red flag.Browsing history databaseLocal storage that records browser activity and related data.Brute-force DefenseProtections that slow or disrupt repeated attempts to guess authentication credentials.bSDDA shared construction dictionary that helps different tools and teams use the same terms and properties.BSONA binary-encoded serialization format used to store and exchange documents in MongoDB.BTR.sysMicrosoft Defender's boot-time remediation driver, used to remove stubborn malware during startup.Budget controla spending approach that helps keep purchases within a set amount.Budget creepThe tendency for a project’s total cost to rise after parts and integration are added.Budget-neutral decreeA legal measure introduced without extra funding attached to it.Buffer over-writeA memory corruption bug where data is written past the intended boundary of a buffer and can alter nearby memory.Buffer pre-allocationReserving memory in advance for incoming data, which can become risky if the size logic is not tightly controlled.Bug Bounty ProgramA security initiative that pays researchers for responsibly reporting vulnerabilities.Bug fixA change that corrects a software error or unstable behavior.BugTraqA long-running mailing list associated with public vulnerability disclosure.Builda specific compiled state of Windows used to identify a system version.Build agentA worker that executes jobs sent by a CI/CD server.Build ArtifactA file or package produced by a software build, such as an installer or binary.Build environmentThe system where code is compiled, tested, packaged, or prepared for deployment.Build logThe recorded output from compilation and linking jobs, which can sometimes retain sensitive diagnostics.Build ManifestChainguard’s vendor-specific metric for a verifiable build or artifact event; not a standard OCI object name.Build phaseA step in compilation where scripts or tasks can run, creating a potential abuse point in a poisoned project.Build platformThe surface where a print begins and where adhesion is managed.Build processThe stage where source code is compiled into software, often with access to local files and environment data.Build scriptCode that Cargo can run automatically during compilation to perform custom build tasks.Build serverA system that coordinates compilation, testing, packaging, and release tasks in software pipelines.BuilderA tool that generates customized malware builds, often with selectable options or modules.Builder FrameworkA configuration system that lets an operator generate customized malware variants.Building AutomationControl systems that manage facility functions such as HVAC, lighting, and environmental conditions.Building Automation System (BAS)Technology used to monitor and control facility systems.Building Energy ModelingA simulation method used to estimate how a building uses energy under different design or operating conditions.Bulk accessLarge-scale queries or downloads against a database that can signal unusual or suspicious activity.Bulk access loggingRecording large-scale queries or exports so unusual data activity can be investigated later.Bulk data accessUnusual large-scale reading or copying of records that can signal theft activity.Bulk data exposurethe release or theft of many records at once, often magnifying privacy harm.Bulk exfiltrationthe large-scale removal of data from a network.Bulk lookupLarge-scale querying of a database, often a warning sign in breach investigations.Bulk power systemThe large-scale network that moves electricity across regions and interconnections.Bulk queryA large-scale request for records that can signal unusual data access.Bulk-mail toolingSoftware used to send large volumes of email, often reused in phishing operations.Bulk-power systemThe generation and transmission network, plus related components needed to keep the electric grid reliable.Bulk-Power System (BPS)The high-voltage transmission and generation network needed to maintain electric reliability.Bulletin boarda shared surface for public notices and community messages.Bundlea combined commercial offer that packages multiple services together.Bundled licensingA pricing model where security features are included inside a larger product or subscription.Bundled offera package that combines a core service with optional extras.Bundled offeringA product included with a broader software package, which can reduce adoption cost.Bundled security suiteA subscription package that combines multiple tools, such as VPN and antivirus.BurdenThe load connected to a current transformer's secondary circuit, which can influence measurement accuracy.Burp Suite ProfessionalA licensed desktop platform used for web application penetration testing and security validation.Business accountA bank or fintech account designed for company payments and financial operations.Business AcumenThe ability to link project decisions to strategy, value, and organizational goals.Business AgentAn AI assistant designed to handle customer conversations and routine business tasks.Business analysisThe discipline of defining needs and recommending solutions that deliver value to stakeholders.Business analystA professional who translates business needs into requirements that guide technology or process change.Business AngelAn individual who invests personal money in early-stage companies, usually alongside mentoring or network support.Business ArchitectureThe discipline of defining business capabilities, value streams, and structures before choosing systems or org charts.Business Associate Agreement (BAA)A contract that defines how a vendor must handle protected health information on behalf of a covered entity.Business continuity management systemThe set of policies, processes, and controls used to keep essential operations running during disruption.Business credit cardA payment card used for company or professional expenses rather than personal spending.Business CriticalityThe degree to which a system matters to revenue, operations, compliance, or other core outcomes.Business dataoperational records that can affect finance, continuity, and internal workflows.Business ExceptionA policy waiver or carve-out that temporarily allows deviation from standard security controls.Business FlowA sequence of steps that drives a real application task, such as booking or canceling a reservation.Business glossaryA managed list of approved business terms and definitions, often used to reduce confusion across departments.Business impact metricsMeasures that link technical activity to outcomes such as revenue, cost savings, or customer experience.Business intelligence platformSoftware used to query, visualize, and report on organizational data from connected sources.Business logic integrityThe security of an application’s rules and workflows, especially where data or outcomes must not be altered.Business logic layerThe part of a workflow where rules, calculations, and transformations are applied.Business lossesFinancial harm tied to interruption, recovery, or operational disruption after an incident.Business messagingThe use of chat platforms for sales, support, and other company-customer workflows.Business modelThe financial structure that explains how a project pays for itself over time.Business model changeA shift in how a project is funded, supported, or offered that can alter its compliance posture.Business operationsThe everyday processes an organization depends on to work effectively.Business outcome metricsMeasurements tied to real operational or financial results, not just usage counts.Business ownershipClear accountability from a non-IT leader for outcomes, adoption, and process change.Business planA subscription tier designed for organizational use and team administration.Business ProcessA structured sequence of work steps that produces an outcome or decision.Business process modelingA method for mapping how work moves through an organization, including tasks, handoffs, and decision points.Business process reengineeringThe fundamental redesign of a process to improve performance rather than just speed up old steps.Business rescuea legal restructuring process used when a company is in financial distress.Business riskThe operational, financial, safety, or compliance impact of a technical issue.Business rule engineSoftware that applies validation or substitution rules during transactions.Business serviceA capability delivered to customers or internal users that the business relies on.Business Servicesa sector label that can point to customer-facing and workflow disruption risk.Business subscriptionA paid service tier that bundles features for company use under one account.Business systemsinternal tools that support administration, finance, or operations.Business translationTurning technical risk into language that leadership can act on.Business value realization frameworkA structured method for defining expected benefits and checking whether a technology investment delivers them.Business WalletA policy and technical framework for trusted business identity and digital interaction across borders.Business-impact analysisA method for identifying critical functions, recovery priorities, and acceptable downtime.Business-logic tamperingManipulating application rules or workflows so outputs change without obviously breaking the program.Busy boardA tactile panel built for hands-on interaction through simple controls.BusyBoxA compact multi-call utility suite for embedded Linux systems that bundles many command-line tools into one binary.Buy Boxthe marketplace placement that often determines which seller is shown first.Buyer verificationBasic checks that help confirm whether a seller, platform, or offer appears legitimate before payment.BylineThe named author credit shown on a page.BYOLBring Your Own License, a model that lets customers use existing software licenses in another environment.BYOTCBring Your Own Trusted Caller, a pattern where a trusted user-mode application is abused to reach privileged driver functions.Bystander privacyThe privacy risk faced by people near a device that can capture data.Byte addressingBackground term for a system where addresses refer to individual bytes.Bytecode interpreterA program that executes custom instructions instead of native machine code, often used to hide how a sample works.C-ITSCooperative Intelligent Transport Systems for connected communication between vehicles and road infrastructure.C-suiteThe senior executive layer where security decisions compete with business priorities.c-toxcoreThe reference implementation of the Tox protocol, used by Tox-compatible clients.C2 APIA command-and-control interface that lets operators issue instructions to compromised systems.C2 check-inA periodic outbound connection used by malware to receive instructions or send status.C2 serverCommand-and-control server used by malware to receive instructions or send stolen data.C2 trafficCommand-and-control communications used to direct malware or compromised systems.CACertificate Authority, the entity that issues digital certificates and signs them for trust validation.CA-agnosticAble to manage certificates from multiple certificate authorities rather than relying on a single issuer.CACCustomer acquisition cost, meaning the total spend required to win a new customer.Cache ComponentsA Next.js feature related to caching and prerendering in the App Router.Cache dataTemporary web data that can help confirm recent browsing.Cache foldera temporary storage location used by software to stage data or files.Cache hitA request that reuses stored context, often reducing computation and cost.Cache Hit RateThe share of requests that reuse cached content, which can strongly affect total AI spend.Cache integrityThe trustworthiness of stored cached content, meaning the cache contains the expected data and not altered material.Cache keythe identifier a cache uses to store and retrieve a response.Cache missA request that cannot reuse prior context and must be processed from scratch.Cache storageA browser-side storage layer that can retain web responses associated with a site’s origin.Cached tokensReused prompt material that some AI systems track separately for usage and billing.CAD drawingstechnical design files that can be highly sensitive in industrial work.CAD modelsdigital engineering files used to design and refine products.Cadastrea public register used to manage property, land, and ownership-related records.CAEcomputer-aided engineering tools used for simulation and design work.CageFSAn isolation layer used in shared hosting to separate one user’s environment from another’s.CAI digitaleThe digital version of the amicable accident report used to document a road incident and support an insurance claim.CAISIThe U.S. Center for AI Standards and Innovation, a Commerce Department office focused on AI standards and evaluation.CalcLibreOffice’s spreadsheet application, used to create and open workbooks and tables.CalDAVA protocol used to sync calendar data between a server and client devices.Calendar agingCapacity loss that occurs as a battery gets older, even when it is not heavily used.Call redirectionA feature or abuse pattern that reroutes calls to another destination or handler.Call scriptA prepared set of lines used to guide a fraudulent or deceptive phone call.Call transferA feature that moves an active call from one endpoint to another.Callback verificationA control that confirms a request through a separate, known-good contact path before money moves.Caller contextExtra information shown about an unknown caller to help a user judge trust before answering.Caller locationThe mechanism that helps emergency services determine where a call is coming from, especially important when networks fail.Caller verificationChecking a caller’s identity through an independent trusted channel.Caller-context signalsExtra information shown about an incoming call to help users judge whether it may be suspicious.Caller-ID spoofingFalsifying the number shown on a call so it appears to come from a trusted source.Calliopea steam-powered musical instrument associated with loud, distinctive tones.Camera conversionThe process of adapting an existing camera into a new operating form or use case.Camera repairWork done to restore a camera to usable condition.Camera systemThe software logic that defines what the viewer sees and from which angle.CampaignA coordinated wave of malicious activity aimed at a specific target set or region.Campaign labelAn analyst-assigned tracking name used to group related malicious activity.Campaign missionA story-driven gameplay segment used to test narrative and gameplay systems.Campaign scopeThe exact outreach activity a permission covers.Canary buildan early software release channel used to test features before wider deployment.Canary deploymentA staged release method that exposes a fix to a small group before wider rollout.Candidate patchA proposed fix that still needs review and testing before it can be trusted.Canned airPressurized air sold in a portable can, often used for dust removal.CanonA recurring fee in a software contract, often tied to service and support obligations.CanoneA recurring fixed fee paid to use a service or device.Canone mensilea recurring fixed payment made every month for access to a service.Canonical originThe single server-defined base URL an application should use for security-sensitive links and callbacks.Canonical pageThe preferred version of a page that a site wants search systems and users to treat as authoritative.Cap TableA record of who owns equity in a company and how ownership is divided across stakeholders.Capability benchmarksRepeatable tests used to compare how well different AI tools perform on the same task.Capability evaluationA targeted assessment that checks whether a model crosses a risk-relevant threshold.Capability gapA shortfall in staffing, skills, tools, or operational maturity that limits defense.Capability gatingA review process that slows or limits release when a model crosses a risk threshold.Capability profileA living view of a worker's strengths, gaps, and readiness for specific kinds of work.Capability roadmapA living plan for how a business function will improve over time after implementation.Capability-based regulationA policy model where legal obligations increase as a system becomes more powerful or risky.Capability-level viewAn approach that asks what business capability a system should improve before choosing the technology.CapacitanceThe ability of a system to store electrical charge, which can change when touched.Capacitive touch sensorA component that detects touch by sensing changes in capacitance.CapacityThe maximum amount of work or output a system, process, or plant can handle.Capacity buildingtraining and institutional support that helps organizations or countries adopt and govern technology more effectively.Capacity gatingLimiting access to a service when demand, compute, or operational limits are reached.Capacity headroomExtra infrastructure room that helps a service survive sudden traffic spikes.Capacity lossproductive time consumed by fixes, checks, and exception handling.Capacity reservationA mechanism for holding cloud compute capacity in advance so a workload has a better chance of running when needed.CAPEC-242A code injection attack pattern describing how input flaws can lead to executed code.Capillary electrophoresisA laboratory method used to separate DNA fragments for analysis.Capital allocationThe disciplined choice of where to place limited budget, time, and talent across competing technology priorities.Capital ImprovementA long-term business investment that is typically treated differently from ordinary maintenance for tax purposes.Capital incomeIncome earned from assets, such as profits, dividends, rents, and intellectual property.Capital intensityThe amount of money a business must keep spending to build and sustain a product or platform.Capital Markets UnionAn EU initiative aimed at making capital flow more easily across member states.Capitalized expectationsFuture profit expectations that become reflected in asset prices today.Capitolato di garaThe technical specification in a public tender that sets requirements, obligations, and acceptance criteria.CAPMA PMI entry-level certification that tests basic project management knowledge and requires no prior experience.CaporalatoIllegal labor recruitment or exploitation, especially where workers are subjected to unfair or degrading conditions.CAPSSCyber Assurance of Physical Security Systems, a certification scheme for cyber mitigations in network-connected security products.CAPTCHA spoofingA fake verification prompt designed to look legitimate while driving user action.Captive portalA guest-network access gate that controls connectivity until certain conditions are met.Capture-ReplayAbuse of previously obtained authentication material by sending it again to a target.Capture-the-Flag (CTF)A cybersecurity exercise where participants solve tasks to retrieve hidden markers, often used to measure offensive skill.CAPWAPA protocol used to manage wireless access points through centralized control traffic.Carbon creditA unit representing a quantified climate contribution, usually tied to one metric ton of CO2 equivalent.Carbon offsetA mechanism used to balance emissions by funding equivalent reduction projects.Card datainformation linked to a payment card that can increase fraud risk if exposed.Card expiry dataThe date information used to determine whether a payment card should still be accepted.Card governancethe rules and controls for issuing, limiting, freezing, and revoking cards.Card-present fraudFraud involving a transaction that is treated like an in-person tap or chip payment.Card-present transactionA payment made when the customer’s card is physically present at checkout.CardDAVA protocol used to sync contact data between a server and client devices.CardingA form of payment fraud that involves testing or using stolen card data, often in small initial transactions.Cardiology practicea medical provider specializing in heart and circulatory care.Care sectora healthcare and elderly-care environment that can face elevated operational and data sensitivity.Career anxietystress or worry linked to job uncertainty, progression, or long-term employability.Career capitalSkills, experience, and connections that increase future job options.Career planningthe process of setting goals and choosing steps that support long-term work growth.CargoRust’s package manager and build tool, responsible for fetching, compiling, and building crates.Cargo transportationThe movement of goods through logistics networks, including rail freight.Carrier-grade NAT (CGNAT)A large-scale address translation method used to share public IP space across many private devices.Carrier-side enforcementA control applied by the telecom network instead of the user device.Carriera incertaa professional path without clear progression, often reducing motivation and retention.Cascade RiskThe chance that a disruption in one service spreads into other connected sectors or operations.Case archivea stored collection of legal or administrative records that can contain sensitive personal details.Case management dataInternal records used to track requests, incidents, or service workflows.Case-opening siteA service built around paying for randomized in-game item rewards.Cash dispenserThe ATM component that releases banknotes during a withdrawal.Cash forecastingEstimating future cash positions using current balances, expected inflows, and expected outflows.Cash-outthe point at which criminals try to withdraw or convert stolen funds into usable value.Cash-out pathThe route used to turn digital proceeds into spendable value.Catalog consolidationThe merging of publishing portfolios into fewer owners, which can increase market leverage.Catalog pipelineThe backend process that publishes and updates products across sales channels.CatalystA substance that can speed up a chemical reaction without being consumed in it.CatastoItaly’s administrative property registry used to identify buildings, land parcels, and related fiscal records.Catastrophic forgettingThe loss of previously learned knowledge when a model learns new tasks.CATVcable television infrastructure and the equipment used to support it.CC-Link IE TSNAn industrial Ethernet network designed for real-time control and scheduled traffic.CCaaSContact Center as a Service, cloud software used to run customer service operations and call handling.CCBHCCertified Community Behavioral Health Clinic, a care model centered on coordinated behavioral health services.CDMOa contract development and manufacturing organization supporting specialized production work.CDN/WAFEdge layers used to deliver content and filter malicious requests before they reach services.CDRCloud Detection and Response, a security discipline for spotting and responding to threats in cloud environments.CDSCore Data Services, SAP's model for defining structured data views and business logic foundations.CE-TCOsCyber-enabled transnational criminal organizations, a category for foreign groups tied to cybercrime and fraud.Cellular authenticationThe process a carrier and device use to confirm network access.Cellular backupA backup communication path that uses mobile networks when primary connectivity is unavailable.Cellular downgrade attackA tactic that pushes a device onto a less secure mobile network mode.Cellular-at-seashipboard mobile infrastructure that can distribute connectivity when normal land networks are out of reach.Center of excellenceA cross-functional group that reviews, standardizes, and guides AI adoption.Center of gravitythe balance point that affects stability in vehicles and other physical systems.Center-pivot irrigationa rotating watering system that creates circular crop patterns.Central bankA public institution that manages monetary policy, financial stability, and payment infrastructure.Central consoleA single dashboard for managing security settings across many devices.Central infrastructureThe core servers and systems that keep a platform running and coordinated.Central loggingCollecting activity records in one place so security teams can audit and investigate events.Central Person Register (CPR)Denmark’s civil registration system for core identity data.Central storageShared file location that can concentrate high-value project documents in one place.Centralized credential managementA model where an organization stores and governs employee secrets from one admin-controlled system.Centralized enforcementThe use of management tools to apply the same security policy across many endpoints.Centralized finance managementa setup where one system or admin view oversees multiple payment functions.Centralized serviceA remote platform that controls access, storage, or authentication for many users at once.Centralized subscription managementa model where many device connections are administered from one control point.Centralized systemsshared platforms that support many users or locations from one core environment.CentrifugeA device that spins samples so denser material moves away from lighter material.Centripetal forcethe net inward force required to keep an object moving in a circle.CEO impersonationA social-engineering tactic that mimics executive authority to pressure staff into acting quickly.CEO transitionThe transfer of top leadership from one chief executive to another.Certificate bindingThe process of tying an identity claim to the exact certificate that was actually authenticated.Certificate fingerprintA short cryptographic identifier used to compare whether two certificates are identical or closely related.Certificate governanceThe management of digital certificates used to authenticate systems and protect secure exchanges.Certificate hierarchyThe chain of trust that connects a certificate to its issuing authorities.Certificate impersonationA situation where a fake or mismatched certificate is used to pose as a trusted server.Certificate inventorya complete record of certificates, their owners, and their expiration dates.Certificate issuanceThe process of validating domain control before a certificate is signed.Certificate migrationThe process of moving from older cryptographic trust material to newer trusted certificates.Certificate Revocation List (CRL)A signed list of certificates that should no longer be trusted.Certificate rotationThe scheduled replacement of cryptographic certificates to keep trust systems current and secure.Certificate validityThe period during which a digital certificate is considered trusted and usable.Certification guideStructured study material meant to help candidates prepare for a credential.Certification programA structured process used to assess whether a service meets defined security or compliance criteria.Certification schemeA formal framework for evaluating whether a service meets defined security or compliance criteria.Certification scopeThe exact product, module, or environment covered by a security validation or approval.Certification testingFormal testing used to check whether a component meets required standards.Certified communicationsmessages handled with stronger delivery and evidentiary guarantees than ordinary email.Certified DataAn inferred technical reading for validated, authoritative, and controlled datasets used as a trusted AI input base.Certified renewable sourcesEnergy traced to approved renewable generation under a recognized certification process.CFDComputational Fluid Dynamics, a simulation method for analyzing airflow and related behavior.CFIUSA U.S. review body that examines some foreign investments for national-security risk.CFOChief Financial Officer, the executive typically responsible for financial planning, budgeting, and capital decisions.CGI endpointA web handler that processes HTTP requests, often used by embedded devices for administration or diagnostics.CGI programA web-handling component that processes browser or HTTP requests on a device.cgroupA Linux control-group mechanism that tracks and constrains processes.Chain of commandthe formal line of authority that defines who can direct actions and approvals.Chain of controlThe sequence of parties and actions that determines who can govern or verify a process.Chain of thoughtStep-by-step text generated by a model to resemble reasoning.Chain-of-Thought (CoT)A prompting pattern that asks a model to solve a task step by step.Chain-of-thought monitoringReview of a model’s intermediate reasoning to help spot suspicious behavior.Chained exploitA sequence of vulnerabilities combined to reach a deeper target than any single flaw could.Chained exploitationcombining multiple weaknesses in sequence to reach a larger objective.Chained flawsMultiple weaknesses combined to create a more powerful attack path than either flaw would provide alone.Chained URLa sequence of linked web addresses used to guide automated browsing.Chained VulnerabilitiesMultiple flaws combined so the output of one bug helps trigger another.Challenge PageA legitimate anti-bot interstitial used by web security systems to verify traffic before granting access.Chamber pressureThe pressure inside a combustion chamber that affects performance and safety.Change approval workflowa process that reviews and authorizes network policy edits before deployment.Change authorityThe right to make a system modification, separate from the ability to recommend one.Change detectionMonitoring that spots modifications to security rules or configurations.Change fatigueReduced organizational capacity caused by too many overlapping changes and demands.Change monitoringSecurity checks that look for unexpected modifications in files, updates, or admin activity.Change requesta formal workflow used to request and approve modifications to security policy or infrastructure.Change validationTesting updates before broad rollout to catch breakage early.Channel Awardsindustry awards tied to partners, resellers, and service providers.Channel ecosystemthe network of resellers, integrators, and service partners that help deliver security products and services.Channel enablementVendor programs that train and support partners so they can sell, deploy, and service security products.Channel governanceThe rules, permissions, and controls that manage how sales channels share and update data.Channel incentivesThe sales pressures or rewards that shape how partners and resellers behave.Channel mappingThe process of assigning captured data to specific output color channels.Channel orchestrationThe coordination of multiple delivery paths so notices move through the right route in a controlled way.Channel surfingMoving between channels without choosing specific programs in advance.Character rigThe underlying digital structure that lets animators pose and move a character in production software.Characteristic curveA graph showing how one electrical quantity changes in relation to another for a component or circuit.Charged dropleta liquid drop that carries electrical charge and may interact differently with a surface.ChargemasterA hospital pricing and billing file that maps services, supplies, and procedures to billable entries.Charging failureA condition where a battery will not accept power from its charger.CharismaPersonal influence that can inspire trust and action, while sometimes reducing critical scrutiny.Chart integrityThe reliability of music rankings when streams and metadata are not distorted by abuse.Chart of AccountsThe structured list of accounts used to organize financial reporting.Charter party recordsshipping contracts that define voyage terms, cargo obligations, and liability details.ChassisThe outer case that protects internal hardware components from physical damage.Chat logStored conversation data that may include sensitive or personal information entered by users.Chatbot governanceThe policies, roles, and controls used to manage a conversational AI system over time.Cheat sellera person or service that markets game-bypass tools.Checkout datainformation collected during purchase that can link identity, contact details, and order history.CheckpointA predefined point where extra review or safeguards are required.Checksum fileA file of hash values used to confirm that a downloaded file has not been altered.Checksum validationA network integrity check used to detect corrupted or malformed data.Chest strapa wearable band that keeps a sensor positioned against the body.Chief AI officerAn executive role that coordinates AI strategy, governance, and cross-functional execution.Chief executive officerThe top executive responsible for overall company direction and management.Chief Information Security Officer (CISO)The executive responsible for setting and running an organization’s security strategy.Child process chainA sequence of programs launched by one another, often useful for spotting suspicious execution.Child safety reviewan assessment of whether a product may create risks for minors.Children’s privacylegal and operational protections for personal data belonging to minors.Chimney effecta vertical channel that helps rising warm air escape from an enclosure.China-nexusAn attribution label indicating suspected alignment with China-linked activity, not proof of state sponsorship.Chip efficiencyThe amount of useful computing work a processor can deliver for each unit of energy consumed.Chip fabricationThe manufacturing of integrated circuits on silicon wafers using specialized equipment and processes.Chip shortageA supply condition where demand for chips exceeds available manufacturing output.ChipletA small semiconductor die that can be combined with others inside one package to build a larger system.ChiralityA property where a molecule exists in two mirror-image forms that can behave differently in biology.Choker designA neck-worn style that places hardware close to the body in a compact layout.Chosen plaintextData an attacker can select and ask a system to encrypt, often used in lab attacks.Chrome DevTools Protocol (CDP)A legitimate browser debugging and automation interface that malware may abuse for control or inspection.Chrome extension storageA browser API where extensions keep persistent data separate from normal browsing history.Chrome Stable ChannelThe production release track for Chrome, where security updates reach regular users and managed fleets.chrome.proxy.settingsA Chrome setting that lets an extension change how browser traffic is routed.Chromium BrowserA browser built on the Chromium project, including Chrome-like products that share similar profile storage patterns.Chromium sessionAn authenticated browser state that can preserve access through cookies and tokens.ChromotingThe Chrome component named in the fix, associated with Chrome Remote Desktop functionality.Chronic patientsPeople who need ongoing monitoring or long-term treatment.Chunk isolationSeparating retrieved content into controlled pieces to reduce instruction leakage across context.Chunked prefillA method that breaks long prompts into smaller pieces to reduce memory pressure during processing.Chunked transfer codingA way to send HTTP data in pieces when the full length is not known in advance.CIContinuous integration, the automated testing and build stage for code changes.CI FortifyA guidance term discussed in relation to isolating vital systems and planning for resilience in critical environments.CI integrationConnecting security checks to continuous integration pipelines so they run during builds.CI metadataconfiguration and operational details from continuous integration systems.CI workflowAn automated build-and-test process that may also run code generation or publishing tasks.CI/CD control planeThe management layer that coordinates builds, tests, and software delivery.CI/CD EnvironmentAutomated build and deployment systems used to test, package, and release software.CI/CD jobAn automated task in a pipeline, such as building, testing, or deploying code.CI/CD supply chainThe chain of tools, actions, and automation that can be abused if one trusted component is compromised.CI/CD workflowautomated build and release pipeline used to ship software changes.CIAMCustomer Identity and Access Management, the systems used to register, authenticate, and govern external user accounts.CIO readinessThe blend of skills and judgment needed to step into the chief information officer role.CIPCommon Industrial Protocol, a core industrial communications protocol used for device and control messaging.CIP SecurityA Rockwell-supported security layer for authenticated and protected industrial communications.CIP-002A NERC standard focused on identifying and categorizing BES Cyber Systems.CipherThe rule set or algorithm used to encrypt and decrypt a message.Circuit architectureThe overall structure and organization of an electronic design.Circuit boardthe flat board that connects electronic components into a working system.Circuit breakerA resilience pattern that pauses requests to a failing service before repeated errors cascade.Circuit theoryThe branch of electrical engineering that studies how components and networks behave under voltage and current.CircuitPythona Python variant for microcontrollers that emphasizes ease of use.Circular energyAn energy model that aims to reuse resources and reduce waste within a local system.Circular FinancingA funding pattern where money may loop through related parties and obscure true demand.Circular sawA rotating blade tool commonly used for cutting wood and other materials.Circular supply chainsProduction loops that reuse materials to reduce waste and resource demand.Circular validationA loop where the same system creates an artifact and then helps certify or explain it.CISA advisoriesOfficial cybersecurity notices that summarize vulnerabilities and defensive guidance for critical systems.CISA Known Exploited Vulnerabilities CatalogA U.S. government list used to prioritize patching for vulnerabilities believed to be exploited in the wild.CISA performance goalsA set of high-impact cybersecurity practices designed to help organizations focus on measurable risk reduction.Cisco ISECisco Identity Services Engine, a platform for centralized network access control and policy enforcement.CISO burnoutA deeper state of exhaustion that can reduce focus, resilience, and judgment.CISO fatigueOngoing strain caused by sustained pressure, high expectations, and constant decision load.CISO gapThe shortage or absence of dedicated security leadership inside an organization.CitationA reference to a source used to support an AI-generated response.Citation signalA reference marker that can influence whether content is surfaced inside a generated answer.Citation verificationThe process of checking that a referenced case, quote, or authority is real and accurate.Citizen engagement portala public-service interface where residents submit reports or requests.Citizen scienceScientific work that relies on participation from volunteers or non-professionals.Citrix NetScalerAn application delivery and access platform commonly deployed at the network edge.Civic addressthe specific service location used to determine what networks or technologies are available.Civil registryA government system that stores official identity and status records for residents.CJISThe FBI framework for protecting Criminal Justice Information across participating agencies and partners.Claim validationchecking whether an allegation is backed by independent evidence.Claim-only postingA threat statement that has not been independently verified.Claimed attackan allegation that still needs independent verification.Claimed data volumeA reported amount of files or storage attached to a victim entry.Claimed incidentan asserted event that has not been independently confirmed.Claimed responsibilityan allegation by a threat actor that still needs verification.Claims deadlineThe final date by which eligible people must submit a request for compensation.Claims PlatformA system that processes insurance or benefit claims and often stores identity and payment-related records.ClamAVAn open-source antivirus engine used to scan files, email, and archives for malware.Class actionA civil lawsuit brought on behalf of a larger group with similar claims.Class-action settlementA legal agreement that resolves claims brought by a group of plaintiffs.Classe di rischioThe level of AI risk used to determine how strict the relevant obligations will be.Classic OutlookMicrosoft’s desktop Outlook client for Windows.Classical computera standard computer built on conventional binary processing.Classical computingConventional computing based on bits that are either 0 or 1.Classical hardwareconventional computing systems built around standard processors.Classification taskA machine learning task where the system assigns a label, category, or score to an input.Clavichorda small keyboard instrument known for delicate touch and intimate sound.Claymore minea directional military device associated with forward-projected fragmentation.Clean backupsBackups trusted for restoration after an attack, ideally isolated and tested to reduce the risk of reinfection.Cleanroom recoveryan isolated restore environment used to rebuild systems with less risk of reintroducing threats.Cleanup toolsoftware intended to remove malware or help restore systems after an infection.Cleartext trafficNetwork data sent without encryption, making it easier to read or alter in transit.Click rateThe percentage of recipients who click a link in a phishing message or simulation.Click-RateThe percentage of recipients who interact with a simulated phishing message, usually by clicking a link or opening an attachment.Click-through rateThe share of users who interact with a lure, often used to judge phishing risk.Clickbaitingcontent designed to attract clicks through exaggerated or misleading framing.ClickFix CAPTCHAa fake verification prompt used to trigger harmful user interaction.ClickOnceA Microsoft Windows deployment technology that can install and run applications with minimal user interaction.ClientThe player-side software that renders the game and can be modified by cheats.Client Code ExecutionRunning attacker-influenced code on an end-user workstation or application client.Client confidentialitythe obligation to protect sensitive client records from unauthorized access or release.Client datarecords tied to customers that can create legal and financial risk.Client data breachalleged exposure of customer-related records.Client executionA class of attack where the vulnerable application on the endpoint runs attacker-controlled code.Client librarySoftware used by applications to communicate with an external service, such as a database.Client recordsinformation tied to service relationships, often sensitive and time-critical during incidents.Client SecretA private value used to identify and protect an app during authentication flows.Client startup chainThe sequence of components and checks an app needs before it opens successfully.Client tax datasensitive financial records that may carry legal and privacy risk.Client trust accountfunds held for clients under strict handling and access controls.Client Trust BoundaryThe point where software decides whether remote data or an external server should be trusted.Client-keyAn authorization token used by a device or service to recognize a trusted client.Client-server architectureA design where one component stores or provides data and another component accesses it.Client-sideSoftware logic that runs on the device itself rather than relying on a remote server.Client-side authenticationAuthentication logic handled by the client or browser, which is unsafe if the server does not independently verify it.Client-side checksSecurity logic that runs inside the app on the user’s device.Client-side codelogic that executes in the user's browser instead of on a server.Client-side exposureRisk that data shipped to a user's device can be inspected and recovered outside the developer's control.Client-side filteringDecisions made on the user device about what content to load, show, or suppress.Client-side middlewareLocal software that helps a browser or application handle security, authentication, or encryption tasks.Client-Side RiskSecurity exposure that occurs in the user’s browser or device before data reaches a server.Client-side runtimeThe environment in which code executes on the user's device through the browser.Client-side stateData a web app stores or sends with the browser and later trusts on the server side.Client-side trackingTracking behavior carried out in the user’s browser rather than on a server alone.Client-side validationChecks performed in the browser that can be bypassed if the server does not enforce the same rule.Client-side verificationA check performed by the local application to confirm that downloaded code matches the expected version.Client-visible dataInformation shown inside the app or game that users and observers can read directly.Climate disinformationmisleading or false content that distorts understanding of climate-related risks or data.Climate marketingBrand communication shaped by climate pressure, adaptation, and environmental context.Climate neutralitya state in which remaining greenhouse gas emissions are balanced by removal or offsetting.Climate riskthe chance that weather-related events will affect assets, people, or operations.ClingSTUNA Linux backdoor that exploits IoT vulnerabilities, provides remote command access, and can turn infected devices into proxy nodes.Clinical AIsoftware used to support diagnosis, triage, or treatment decisions.Clinical benchmarka test used to measure whether a medical AI system performs safely and accurately.Clinical databaseA structured collection of health-related records used for analysis or operations.Clinical pathwaysStructured steps that guide diagnosis, treatment, and follow-up in patient care.Clinical settingA supervised medical environment with defined safeguards and procedures.Clinical trial simulationthe use of models to explore possible outcomes before real-world testing.Clinical workflowthe practical sequence of tasks used by healthcare professionals in routine care.Clipboard abuseUsing copied text as a delivery step for attacker-controlled commands.Clipboard clipperMalware that watches copied text and swaps it, often to hijack crypto transfers.Clipboard dataText or other content temporarily stored by a user’s copy-and-paste actions, which malware may try to capture.Clipboard hijackA lure that places a malicious command on the clipboard so the victim pastes it into a local tool.Clipboard managerSoftware that stores, organizes, or recalls copied content for reuse.Clipboard pathThe internal route software uses to copy and paste data between locations or applications.Clipboard permissionsBrowser settings that let an extension read from or write to copied data, which can be sensitive in wallet workflows.Clipboard redirectionAn RDP feature that synchronizes clipboard data between the local machine and the remote session.Clipboard synca feature that moves copied content between devices.Clipboard textData temporarily copied by a user, which can include secrets, tokens, or sensitive text.Clipboard theftCapturing copied text or objects, which can expose passwords, tokens, and other secrets.CLIPRDRThe RDP clipboard redirection channel that transfers clipboard data between client and server.Clock driftGradual divergence between clocks that should stay synchronized.Clock stabilityHow accurately a radio stays on frequency over time, which is important for reliable reception and transmission.ClockworkA mechanical system of gears and parts that regulates motion or timekeeping.Clone modeA safer workspace mode that keeps the host-side copy read-only and reduces writable exposure.Clone websitea copied site used to imitate a legitimate business online.Cloned repositoryA copied project page or code base that can resemble a legitimate software project.Closed cooling loopA cooling design that recirculates water rather than relying on open evaporation, depending on site design.Closed systemA deployment where the model remains on the provider side and users interact through a controlled interface.Cloud abuseMisuse of cloud services, accounts, or features to support intrusion, persistence, or data access.Cloud account compromiseUnauthorized use of a valid cloud identity to access systems or data.Cloud account exploitationmisuse of online tenant or identity accounts to reach data or services.Cloud accountingonline financial software used to manage bookkeeping, invoicing, and reporting.Cloud AI infrastructureCloud-hosted model endpoints, API keys, and related services used to run AI systems.Cloud ALMA cloud-based application lifecycle management platform used to monitor and coordinate hybrid enterprise operations.Cloud API keyA secret used to authenticate software or scripts to cloud services.Cloud backlogContracted cloud revenue expected to be recognized in future periods, used as a commitment metric rather than a usage metric.Cloud bindingThe linking of a local controller or device to a cloud account for remote management.Cloud business platformonline software that supports core customer operations.Cloud C2Command-and-control that uses legitimate cloud platforms to hide malicious traffic.Cloud canonA recurring fee for using cloud services, typically paid as part of ongoing operations rather than a one-time purchase.Cloud chatTelegram’s cloud-based chat mode, separate from its end-to-end encrypted Secret Chats.Cloud complianceThe practice of mapping cloud controls, evidence, and monitoring to security or regulatory requirements.Cloud compromiseUnauthorized access to cloud systems, often through stolen credentials or misconfigurations.Cloud computeRemote processing power used to run tasks on a provider's servers instead of a local device.Cloud creditsPromotional compute or API allowances offered to new users or startups to encourage adoption.Cloud data estateData stored across cloud services, platforms, and backups under shared administrative control.Cloud data warehouseA hosted analytics platform used to store and query large datasets, such as Snowflake or BigQuery-class systems.Cloud databasean online database service hosted by a provider.Cloud dependencyReliance on remote servers for core features, storage, control, or authentication.Cloud directoryA centralized service that stores or brokers identities, groups, and access policy across connected systems.Cloud directory serviceA directory platform delivered from the cloud that can centralize identity records and access control.Cloud discovery policyA security rule that helps identify and alert on unfamiliar or risky cloud app usage.Cloud EntitlementsAccess rights and permission relationships that define what identities can do in cloud systems.Cloud environmentShared computing resources delivered through internet-based services, often with centralized identity controls.Cloud interoperabilityThe ability of different cloud systems to work together through compatible interfaces and governance.Cloud keysCredentials used to access cloud services and APIs, often high value if exposed on a public server.Cloud modelThe way cloud services are delivered and managed, including how responsibility is divided between provider and customer.Cloud modernizationUpdating applications and infrastructure so they can run more effectively in cloud environments.Cloud platformA remotely hosted computing service used to run applications, store data, or manage operations.Cloud postureThe current security state of cloud settings, identities, workloads, and configurations.Cloud posture managementContinuous visibility into cloud configurations, risk, and policy alignment.Cloud posture toolSoftware that assesses cloud settings and configurations against security expectations.Cloud providerA company that delivers computing, storage, and platform services over shared infrastructure.Cloud ProxyA broker that mediates traffic between users and protected resources.Cloud qualificationThe process of checking whether a cloud service meets required security and governance standards for public use.Cloud regionA geographic area where a cloud provider groups infrastructure for deploying services and workloads.Cloud relayA remote management path that routes traffic through a vendor service so devices can be reached over the internet.Cloud save workflowthe sequence of steps an app uses to move a file into online storage.Cloud secretSensitive credential material such as a password, API key, token, or certificate.Cloud securityPractices and controls that help protect cloud-hosted data, identities, and workloads.Cloud security platformA broader product stack that combines multiple security functions into one system.Cloud Security Posture Management (CSPM)A category of tools focused on finding and tracking cloud misconfigurations and policy drift.Cloud serviceA remote system that provides features, storage, or account functions over the internet.Cloud sessionA remotely hosted working session that can hold application state, user context, or runtime activity.Cloud SOCA security operations center focused on monitoring and responding to cloud-based threats.Cloud spendMoney spent on public cloud services such as compute, storage, networking, and managed platforms.Cloud stagingThe use of cloud services as temporary infrastructure for hosting, redirecting, or delivering malicious content.Cloud storage quotaThe amount of data a service lets an account store at a given time.Cloud switchingThe process of moving data and workloads from one cloud service to another.Cloud syncThe process of copying data between a device and remote servers.Cloud tenancyThe way a cloud service separates customers, permissions, and stored data.Cloud tenantA customer or workload running inside a shared cloud environment with assigned resources and permissions.Cloud trustThe assurance that cloud services meet required security, reliability, and governance expectations.Cloud workflowBusiness processes run through online applications, often spanning multiple linked services.Cloud workloadAn application, service, or process running in a cloud environment.Cloud-assisted detectionUsing remote infrastructure to help identify suspicious activity, often alongside local checks.Cloud-based pathA route through cloud-hosted infrastructure that can be reachable from the internet or from connected services.Cloud-based softwareapplications delivered over the internet rather than installed locally.Cloud-based solutionA service delivered through cloud infrastructure rather than installed only on local hardware.Cloud-based TMSonline trucking management software used to organize logistics workflows.Cloud-hosted stagingUsing cloud content or services to distribute malware stages or supporting files.Cloud-linked featurea function that depends on remote services as well as local hardware.Cloud-Managed SecurityProtection operated through a provider platform instead of local hardware.Cloud-native automationPatch orchestration delivered through cloud services, often with centralized policy control.Cloud-native certificate automationAutomated certificate handling built for cloud platforms and their deployment workflows.Cloudflare TunnelA persistent outbound connection used for remote access that can remain active until the connector is removed.Cloudflare WorkerServerless code that runs at the network edge and can modify web responses.CloudWatch metricsOperational measurements used to track activity, latency, errors, and usage trends in AWS services.Cluster-adminThe highest practical Kubernetes role, with full control over cluster resources, policies, and access rules.Cluster-proxy-addonA Red Hat component that relays requests between a hub cluster and managed clusters.Clustered deploymentA setup where several servers work together as one service for resilience and scale.CLVCustomer lifetime value, the total value a customer is expected to generate during the relationship.CMOS sensorA common silicon-based image sensor that converts light into electrical signals.CMPCertificate Management Protocol, a protocol for automated certificate enrollment and lifecycle management in PKI systems.CMS AuthEnvelopedDataA Cryptographic Message Syntax structure used to carry encrypted content and related parameters.CNACVE Numbering Authority, an organization authorized to assign CVE IDs and publish records for vulnerabilities in scope.CNABA standardized Brazilian banking file format used in remittance and return workflows.CNAME chainA sequence of DNS aliases that can make infrastructure ownership and routing harder to trace.CNAME recordA DNS alias that points one hostname to another hostname.CNC machinerycomputer-controlled industrial equipment used in manufacturing.CNSICBrazil’s committee that issued Resolution No. 20 and set new critical-infrastructure protection guidelines.Co-ownershipa legal arrangement in which two or more people share ownership of the same asset.CO2 emissionsCarbon dioxide released into the atmosphere, often used as a key measure of climate impact.Code baseThe shared underlying source code that different product editions or versions are built from.Code commentNon-executable text in source code meant for humans, not for the program at runtime.Code diffA side-by-side record of source code changes, commonly used to review patches before they are merged.Code generatorSoftware that automatically produces source code from schemas, templates, or definitions.Code golfThe practice of solving a programming task in as few bytes or characters as possible.Code indexingA system for cataloging source code so searches and AI tools can retrieve relevant context from large repositories.Code integrityThe reliability of code as written, without transcription errors or unauthorized changes.Code of PracticeA voluntary framework meant to help organizations apply AI transparency obligations in a practical way.Code ownershipAn assigned person or team responsible for reviewing and maintaining a codebase or document.Code pathA route through software that runs under specific conditions.Code repositoryA managed store for source code and related development files.Code-capable modelA model designed to help write, edit, or reason about software.Code-generation libraryA tool that automatically creates source code or client wrappers from a specification such as OpenAPI.Code-switchingMixing languages within one prompt or conversation, which can change how a model interprets instructions.Code-to-cloudA security approach that links source code, delivery pipelines, cloud posture, and runtime context.Codebase auditA broader review of an entire repository to find patterns, flaws, or risky logic.Codebase scanautomated inspection of source code to find security issues, secrets, or risky patterns.Codebase-wide reviewAn examination of an entire project rather than only the latest change set, useful for finding broader security issues.CodecSoftware that compresses and decompresses audio or video data.CODECOA port message type used for gate and container movement events.CodecsThe media components that decode and encode audio or video data.Coded identifierA label that hides the real name of the victim.CodeQLA code analysis engine used to find security flaws through query-based scanning.codice ATECOthe business classification code used to categorize an economic activity.Codice dell’amministrazione digitaleThe Italian legal framework that governs digital administration.Coding assistantAn AI tool that helps write, review, or modify code inside developer workflows.Coding emotivocoding activities designed to support engagement and emotional response.Coercive exploitationThe use of pressure, threats, or control to force people into harmful activity.Cognitive artifactsTraces that may suggest AI integration, such as prompts or provider references.Cognitive biasA systematic tendency in human thinking that can distort judgment and decision-making.Cognitive capitalThe organizational knowledge and judgment needed to oversee AI effectively.Cognitive flexibilityThe ability to shift thinking, strategies, or interpretation when the task or context changes.Cognitive GovernanceA governance approach focused on protecting human judgment and agency in AI-assisted decisions.Cognitive laborWork centered on thinking, analysis, judgment, and problem-solving rather than physical tasks.Cognitive rust beltA metaphor for the slow loss of analytical capability under repeated reliance on AI.Cognitive securityProtection of human judgment, trust, and decision-making from manipulation.Cognitive shortcutA fast mental rule people use to make decisions with limited attention or information.COGSCost of goods sold, the expenses directly tied to producing the goods or services a company sells.CoherenceThe consistency between risk analysis, chosen measures, and the final security program.Cohort analysisA method for comparing groups of users that share a common starting point or behavior over time.Cohort retentionA method that groups users by a shared start event and tracks whether they return over time.Coil whinea high-pitched buzz or whine produced by some electronic devices.Coinvestmenta funding arrangement where multiple investors back the same company in a coordinated way.Cold data storagestorage for information that is kept long term and accessed infrequently.Cold plateA heat-transfer surface attached to a chip so coolant can absorb heat at the source.Cold storageOffline key storage used to protect crypto assets from direct internet access.Cold walletAn offline wallet used for stronger storage isolation and reduced internet exposure.CollaborationShared work between people or teams, often supported by digital tools and communication platforms.Collaboration estateShared workspaces where files and content are exchanged across teams.Collaboration suiteSoftware that combines email, calendars, chat, and related workplace functions.Collaborative editingMultiple users working on the same document or spreadsheet in near real time.Collaborative robot (cobot)A robot designed to work in shared space with people under controlled safety conditions.Collaborative roboticsRobots designed to work alongside people in shared environments.Collateral damageUnintended impact on systems or users not meant to be targeted.Collateral harmunintended impact on systems, users, or services not meant to be involved.Collateral impactunintended effects on systems or users outside the intended target.Collective responsibilitythe idea that multiple stakeholders share duty for reducing a common risk.CollectorSoftware that gathers, processes, and forwards telemetry from one or more sources.Collector’s seta premium edition that usually includes physical extras beyond standard retail packaging.Color 3D printingAdditive manufacturing that produces parts with more than one color.ColorimeterAn instrument that measures color numerically instead of by eye.CombatPlayer-versus-environment or player-versus-opponent action built around attacks and defense.CombinationThe SECI phase where explicit knowledge is reorganized and integrated into new usable forms.Combined Heat and Power (CHP)A system that produces electricity and useful thermal energy from the same fuel source.CombosquattingRegistering a domain that mixes a real brand with extra words or characters to create a deceptive lookalike.CombustionThe process of burning fuel to produce heat.Command and Control (C&C)The system attackers use to send instructions to compromised devices and receive data back.Command APIAn application interface used to issue management or control actions to software.Command approval promptA safety control that asks for human confirmation before an agent executes risky commands.Command argumentsValues passed directly on a command line, which may be visible in logs or process listings depending on the environment.Command busThe operational path used to issue mission commands through the toolkit.Command integrityAssurance that control instructions are authentic and have not been altered.Command interpreterSoftware that reads and executes typed or pasted commands, such as a shell.Command line interfaceA text interface where users type commands instead of clicking menus.Command linkerA JupyterLab mechanism that turns certain links into executable commands.Command serverA system used to send instructions to malware or receive data from it.Command verificationChecks that confirm an instruction is authorized and valid before it is executed.Command-and-control pathThe communication route used to send operational instructions to a satellite.Command-and-control serverInfrastructure used to coordinate malicious activity and manage compromised systems.Command-Line AccessDirect local execution of a program, often relevant in local exploit paths.Command-line argumentA value passed to a program when it starts, which may be recorded or inspected in some environments.Command-line interface (CLI)A text-based way to run software and administrative tasks by typing commands.Command-line telemetryLogs and signals from terminal or shell activity that can reveal suspicious execution.Comment moderationA control that determines whether comments appear immediately or wait for review.Comment surfacethe user-facing area where replies, reactions, and related interactions happen.Commerce automationtechnology that handles parts of the buying journey with limited human intervention.Commerce runtimeThe operational environment where a commerce platform processes business logic and requests.Commercial deviceAn organization-managed endpoint used in a business or enterprise setting.Commercial devicesOrganization-managed endpoints used in business environments.Commercial feea recurring fixed charge for supply and service management.Commercial intelligenceThe process of turning market data, text, and signals into actionable business decisions.Commercial mortgage servicingThe operational records used to manage loans, payments, and reporting.Commercial originThe business source behind a product, service, or brand message.Commercial plan nameA marketing label used to package a service offer, which may not describe technical details on its own.Commercial real estatea sector where document handling and partner coordination can raise operational pressure.Commercial structureThe sales and organizational setup used to operate in a market.Commercialization componentThe service fee or supply margin included in the tariff.Commercialization costa fee tied to managing and supplying the energy service.Commercialization feea recurring charge that covers retail service costs and affects the real bill.CommercializzazioneThe retail charge tied to selling and managing the electricity contract.Commission chainthe linked payment structure that rewards referrals, conversions, or sales across multiple actors.Commission ratethe percentage charged on each transaction processed through a payment service.Commissionea fee charged on each transaction, usually as a percentage or fixed amount.Commitment periodthe minimum time a user agrees to stay subscribed.Commitment-based discountA pricing model that reduces unit cost when an organization agrees to a predictable level of usage or spend.Commodity pricethe market cost of the underlying electricity or gas.Commodity RATA widely used remote-access trojan reused across campaigns because it already provides control and persistence features.Common Data Environment (CDE)A shared digital workspace used to manage project information across teams and stages.Common operating pictureA shared view of the incident that helps teams act on the same facts.Common practiceA shared interpretive approach used to support more consistent assessment across cases.Common Weakness Enumeration (CWE)A taxonomy used to classify the root causes behind software vulnerabilities.Common-Mode FailureA situation where one shared weakness can affect many systems at the same time.Communication obligationsRules that can require sharing certain information in defined circumstances.Communication protocolThe agreed method for exchanging messages in a consistent way.Communications BackboneThe core network paths that carry traffic between major services, sites, and users.Communications blackoutA scenario in which normal digital connectivity is heavily restricted or unavailable.Communications continuityThe ability to keep trusted coordination channels working during disruption or network separation.Community EditionA free product tier that usually includes limited licensing terms but can still provide useful security functions.Community infrastructureThe informal systems, venues, and routines that help a specialist community keep operating over time.Community Investment Framework (CIF)A state framework intended to guide community-benefit expectations and local negotiations for large projects.Community-poweredA product model that relies on shared input or collective data to improve outcomes.Comodato gratuitoA loan arrangement where equipment is supplied for use without a purchase transfer.Compaction SummaryA compressed form of prior context used to support long-running AI tasks.Companion softwareAn application used to configure a hardware device after installation.Companion toolA supporting application, such as a GUI or driver, that connects software to a database or service.Comparable indicatorsmetrics designed so different places or systems can be measured against the same standard.Comparative advantageAn allocation idea that assigns people to the tasks where they have the greatest relative strength.Comparative claimA statement that contrasts one product, service, or company with another.Comparative mappingSide-by-side analysis used to examine similarities and differences.Compatibility AppraiserA Windows component that checks software and hardware compatibility before or after updates.Compatibility breakA change that causes older clients, plugins, or integrations to stop working correctly.Compatibility checkA validation step to confirm that different software versions can work together safely.Compatibility flagA label that indicates which hardware or system a product is intended for.Compatibility issuea failure caused when software, firmware, or hardware does not work well together.Compatibility regressionA new bug introduced when an update breaks something that previously worked.Compatibility toolSoftware that helps different systems or applications work together.CompatTelRunner.exeA Windows process used for compatibility and diagnostic tasks tied to app and driver inventory.Compensating mitigationA temporary control used to reduce risk when immediate patching is not possible.Compensation transparencyClear information about pay structure, which helps reduce confusion and uneven bargaining power.Competence measurementThe process of evaluating whether training actually improves knowledge or performance.CompetenciesThe formal powers and responsibilities assigned to an institution.CompetencyThe human skills needed to build, manage, and safely use AI systems.Competency-based frameworkA workforce model that defines work through tasks, knowledge, and skills, making gaps easier to identify and address.Competenze digitaliThe knowledge needed to understand how technology affects business decisions and risk.Competenze sottoutilizzateskills that are present but not fully applied, lowering the return on training.CompetitionMarket pressure that can influence price, access, and investment discipline.Compiacenza algoritmicaModel behavior that tends to agree with or flatter the user rather than challenge them.Compiler backendThe lower-layer implementation that turns an intermediate form into code for a specific target system.Compiler front-endThe part of a compiler that reads, parses, and validates source code before later stages process it.Completion achievementA marker that recognizes finishing a game or related objectives.Complex adaptive systemA system whose behavior emerges from many interacting parts and feedback loops.Complex valueIn NGINX, an expression combining static text and variable expansions, evaluated at runtime during stream or request processing depending on context.Complexitythe set of hidden constraints and tradeoffs that make a simple idea harder to implement.Compliance automationSoftware that helps teams collect evidence, manage controls, and prepare for audits with less manual effort.Compliance BaselineA set of required controls or checks used to measure whether cloud settings match a security standard.Compliance consistencyThe degree to which different reviewers reach similar conclusions when applying the same standard.Compliance controla process that helps ensure a business meets legal or regulatory requirements.Compliance controlsPolicies and technical checks used to meet legal and regulatory obligations.Compliance documentaleCompliance focused on storing records and forms rather than proving how work was actually carried out.Compliance documentationRecords and evidence showing that a system meets legal, regulatory, or internal rules.Compliance driftThe gradual departure of a live environment from approved security or governance settings over time.Compliance duplicationRepeated controls or obligations that create extra administrative work.Compliance governanceThe internal controls used to review, approve, and monitor regulated statements.Compliance notificationA required or expected report to a regulator after a security incident, depending on law and context.Compliance obligationsLegal or regulatory duties that apply to a system depending on jurisdiction and use case.Compliance overheadthe extra work needed to follow different legal or administrative requirements.Compliance planningPreparing systems and processes to meet legal or regulatory obligations.Compliance policyrules that define whether a device can access company services.Compliance reviewInternal checking to see whether a company’s conduct matches legal requirements.Compliance riskThe chance that a practice conflicts with legal, regulatory, or internal obligations.Compliance roadmapA plan that tracks legal milestones, internal tasks, and evidence needed to meet regulatory duties.Compliance signala data point used to help an app meet legal or policy requirements.Compliance traceabilitythe ability to prove that a business process followed the required rules.Compliance verificationA review that checks whether required security measures are present and effective.Compliant foota flexible contact surface that can absorb shock and adapt to uneven ground.Component HashA cryptographic fingerprint that helps identify a specific software component without relying on names alone.Component inventoryA record of what parts are present in a software product.Component labelA tag used to group a vulnerability by the area of code it affects.Component placementThe arrangement of parts on a board so they fit and function together properly.Component pricinghow the market value of parts affects final product cost.Component supplyThe availability of critical parts needed to assemble and scale a product.Component-level repairTroubleshooting and fixing individual electronic parts instead of replacing the entire device.Componente energiaThe part of an energy bill tied to the commodity cost of electricity or gas, separate from other charges.Composable infrastructureA model that pools compute, storage, and networking resources for software-driven allocation.Composite benchmarkA score built from multiple tests or categories, often with different weights.Composite indexA score built from several evaluations rather than one single test.Composite materialA material made by combining two or more components to create new performance properties.Composite monitorA display that accepts composite video, often from older hardware.CompositingThe process of combining page layers into the final image a browser shows on screen.Composition effectsChanges in the mix of jobs or applicants that can influence statistical wage results.CompostableA material that can break down under defined composting conditions, not automatically in every setting.Compounding pharmacya pharmacy that prepares customized medications and may depend on sensitive operational workflows.Compressed airPressurized air used to move, shape, or stabilize material flow.Compressed archivepackaged data set that may be large but is not self-verifying.Compressionreducing data size to make transfer lighter and faster.Compression side channelA leak that infers secrets from changes in compressed data size.CompressorA machine that supplies pressurized air for tools or cleanup tasks.Compromise HuntingThe process of checking systems for signs that an attacker already gained a foothold.Compromise indicatorsSigns in logs, files, or behavior that suggest a system may have been breached.Compromise scopethe real extent of any affected systems or data.Compromise validationchecking logs, access patterns, and system changes before treating a claim as confirmed.Compromised infrastructureLegitimate systems that attackers repurpose after gaining unauthorized access.Compromised mailboxan email account taken over and used in place of the legitimate owner.Compromised websitea legitimate site that has been altered or abused by an unauthorized party.CompTIA Security+A cybersecurity certification focused on core security knowledge.Computational costThe time and processing resources needed to complete a calculation.Computational modela mathematical or algorithmic representation used to analyze complex behavior.Computational patienta digital representation used to simulate likely treatment responses.Computational problem solvingthe ability to break down unfamiliar tasks and work toward a solution.Compute accessAvailability of the processing power needed to train, tune, and run large AI models.Compute financing platformA funding structure designed to help reserve or build AI infrastructure capacity over time.ComputerA local device that can run installed applications outside the browser.Computer historyThe study of how machines, ideas, and engineering practices developed over time.Computer-aided engineering (CAE)software-based engineering work used to design, test, and analyze products or systems.Computer-use toolsFunctions that let a model interact with screens, clicks, typing, and web interfaces.Comunicazione ObbligatoriaThe mandatory employment notice used to formalize a hiring event.Concealed lensa camera lens hidden inside another object or enclosure.Concealed recording deviceA hidden microphone or recorder used to capture speech without notice.Concentrated dependencyA risk pattern where many services rely on the same provider or control layer.Concierge modela service style built around named specialists and hands-on support.Concrete examplea specific past experience used to support a claim about ability.ConcurrencyThe number of users or sessions active at the same time.CondaAn open-source package and environment manager used to install and isolate software dependencies.CondensationThe phase change when vapor turns into liquid and releases heat.Condensed fonta typeface with narrow letterforms designed to fit more text into limited space.Condition checkA quick assessment of whether a device is worth fixing.Conditional Access for workload identitiesPolicy controls for non-human identities such as service principals and app registrations.Conditional activationA design where malicious functions run only after a specific trigger is met.Conditional clauseA term that applies only if specific conditions are met.Conditional pricingA fee or reward model that changes depending on product type, transaction type, or account settings.ConductiveAble to carry electric charge or respond strongly to electromagnetic fields.Conductive surfaceA surface that can carry electric current and receive an electroplated coating.Conferencea scheduled event where people gather to share ideas, research, and practical experience.Conference room sweepA check for unauthorized electronics or recording gear before sensitive meetings.Conference showcaseAn event setting where companies present tools and messaging to an industry audience.Confidence calibrationThe alignment between a model’s stated certainty and the real accuracy of its output.Confidence gapThe self-doubt that can make capable students hesitate to pursue demanding subjects.Confidence thresholdA cutoff used by AI systems to decide whether a prediction is reliable enough to keep.Confidential informationSensitive data such as source code, tokens, private notes, or internal configuration.Confidential VMa virtual machine designed to keep data and code hidden from privileged infrastructure.Confidentiality boundaryThe security line that separates protected data from people or systems that should not see it.Confidentiality BreachAn incident where sensitive data is accessed or taken without permission.Confidentiality controlA process or rule that limits who can access sensitive technical or business information.Confidentiality EventAn incident where sensitive information may be revealed without changing or destroying the data itself.Confidentiality failureA security problem where information is revealed to someone who should not be able to see it.Confidentiality leakUnauthorized disclosure of data, such as information read from a program’s memory.Confidentiality riskThe chance that sensitive information may be exposed to unauthorized parties.Confidentiality, integrity, availabilityThe three core security goals used to judge whether data stays secret, correct, and accessible.Config ConnectorA Kubernetes integration that manages Google Cloud resources through custom resources.ConfigsConfiguration settings that shape how a platform behaves in a specific customer environment.ConfigurabilityThe ability to change system behavior through settings or rules.Configurable rulesSettings that let organizations adapt a control to different payment scenarios.Configuration analysisReview of settings and files that can reveal how a system is deployed or connected.Configuration archiveA saved backup of device settings that can contain credentials, keys, and trust data.Configuration changeAn adjustment to how a feature behaves by default or after setup.Configuration directiveA setting that controls how software behaves, often in a server configuration file.Configuration disciplineThe practice of keeping system settings consistent, documented, and securely maintained.Configuration errora wrong setting that can change how a system is exposed or protected.Configuration mismatchA settings conflict that can cause systems to behave unexpectedly.Configuration overwriteA change that replaces trusted device settings with malicious or altered ones.Configuration persistenceThe ability of a system to preserve settings after updates or restarts.Configuration preconditionA feature, mode, or setting that must be present before a vulnerability can be triggered.Configuration profileA management file used to apply settings and restrictions on Apple platforms.Configuration recordsinternal files that may describe how a process or system is arranged.Configuration Secretscredentials, keys, or tokens that can unlock systems or services.Configuration stateThe actual settings in use on a system, which can determine whether a vulnerability is reachable.Configuration tamperingUnauthorized changes to app settings that alter behavior without changing the program itself.Configuration TheftThe unauthorized copying of device settings and operational files that can aid follow-on intrusion.Configuration trackingRecording changes so a build or system can be understood and reproduced later.Configuration-dependent riskExposure that changes based on which modules, features, or directives are enabled.Configuration-sensitive flawA vulnerability that affects only certain settings, roles, or enabled features.Confirmed accessevidence that an attacker has already entered a victim environment.Confirmed malicious activityEvents that survive investigation and are judged to be genuinely harmful or unauthorized.Conflict managementThe ability to handle disagreements in a constructive way without blocking progress.Conflict of interestA situation where one role’s duties can compromise the independence of another role.Conflict resolutionThe process of addressing disagreements so teams can move forward with shared priorities.Confluence Data CenterAtlassian's self-managed collaboration platform for enterprise deployments.ConfusableA character that visually resembles another character, often across different scripts.CongestionPerformance loss that can happen when shared capacity is heavily used.Connected Building SystemsNetworked building controls such as HVAC, lighting, security, and elevators.Connected carA vehicle that exchanges data with external services, apps, or infrastructure.Connected cityAn urban area where digital tools and networked systems help coordinate services and public life.Connected deviceHardware that can communicate with other systems through a network or pairing link.Connected EnvironmentsNetworks where operational systems are linked to IT, cloud, or remote-access tools.Connected foldersUser-selected directories an app is allowed to access instead of the whole filesystem.Connected medical devicesClinical devices that communicate with networks or other systems and therefore need lifecycle security controls.Connected servicesshared systems or third-party tools that can raise the stakes if an incident is real.Connected systemsOther services or devices that rely on the same platform for access, trust, or data flow.Connected toyA toy that links to apps or online services, expanding the device into a broader data and security ecosystem.Connection gapA condition where intelligence exists, but the formal decision process does not require it to be used.Connection poola shared set of reusable network connections.Connection privacylimiting what network intermediaries can learn from a session.Connection recordslogs that can reveal relationships between users, services, and systems.Connection trackingThe mechanism used by network devices to monitor flow state and enforce per-connection handling.Connection-tracking stateThe record a network device keeps to follow active sessions and their mappings.ConnectomeA map of how neurons connect within a nervous system.Connector governanceThe policies and controls that decide which systems an integration can reach and what it can do.Connector paththe route a signal or cartridge follows between the device and its interface.Connector permissionsThe access rights granted to an integrated service, which can determine whether it can read, write, or share data.Connector/CMariaDB’s C/C++ client library used by applications to communicate with MariaDB or MySQL servers.ConntrackShort for connection tracking, a firewall or router feature that monitors session state for network flows.Consensus managementThe process of building agreement inside a group, which can improve coordination but may also mute dissent.Consensus rulea negotiation process that depends on broad agreement to move forward.Consent decreea court-approved agreement that can impose compliance obligations.Consent handlingThe process for obtaining and recording permission to collect or use data.Consent lifecyclethe sequence from collection to update, restriction, or withdrawal of permission.Consent sprawlThe buildup of too many app approvals and permissions, making review and revocation difficult.Consequence analysisA method for identifying the worst-case effects of system failure or manipulation before controls are selected.Consequential actionAn operation that changes data, sends a message, or moves money and therefore needs stronger oversight.ConservationThe long-term preservation of a record so it remains available when needed.Conservation documentaleThe long-term preservation of documents so they remain accessible and verifiable over time.Conservazionethe retention period for collected data before deletion or secure disposal.Conservazione a normaRegulated digital preservation that keeps electronic records usable and evidentiary over time.Consigli di disciplinaDisciplinary bodies that handle conduct issues within professional regulation.Consignmenta sales model where goods remain with the supplier until they are sold.Console modA hardware or software change that alters how a game console looks or works.console-script entry pointA metadata-defined command wrapper that Conda may generate during installation.ConsoleLoginThe AWS authentication event for console sign-in, useful for spotting suspicious login attempts.Constitutional AIAn alignment approach that guides model behavior using explicit principles or rules.Constrained hardwaredevices with limited memory, storage, and processing capacity.Constraint-driven designbuilding software by starting from the platform's limits rather than its ideal capabilities.Constructive frictionSmall design hurdles that slow decisions enough to encourage review and verification.Consultancy roleA limited advisory position that can still carry political or security significance if the mandate is unclear.Consumablea material or part that wears down during normal use and must be replaced.Consumer CodeItalian rules that protect consumers in commercial relationships.Consumer electronicsEveryday electronic products designed for general public use.Consumer hardwarephysical technology built for personal use rather than purely industrial or server environments.Consumer privacy riskThe chance that a product's behavior or disclosures may conflict with user expectations.Consumer protectionA legal framework focused on preventing unfair or harmful products and practices.Consumer support channelA help, dispute, or safety path used to resolve problems after purchase.Consumer-contract frameworkThe EU legal basis that shapes information duties, withdrawal rights, and remedies in online sales.Consumption bandA pricing or benchmarking category based on how much energy a customer uses.Consumption managementTools or services that help users monitor and control how much energy they use.Consumption patternthe way a household uses energy over time.Consumption trackera tool that helps users monitor energy use over time.Contact degradationLoss of reliable electrical connection caused by wear, oxidation, or residue.Contact patchthe area where a moving object actually touches the surface beneath it.Contact pointThe person or role designated to receive and manage official security-related communications.Contact recordspersonal and work details that can support impersonation and phishing.Contact resistanceElectrical resistance caused by poor or degraded connections.ContainerAn isolated runtime package that bundles an application with its dependencies.Container filesystemThe isolated file space inside a container, separate from the host system.Container gate movementoperational data tracking cargo entry, exit, and handoff activity.Container hardeningThe practice of reducing risk by tightening settings, permissions, and exposed services.Container image scanningAnalysis of container images to find vulnerabilities, misconfigurations, and secrets before deployment.Container isolationA security boundary that separates processes, but still requires hardening and least privilege.Container manifestA shipping record that lists cargo details tied to a container.Container RCERemote code execution inside a containerized application environment, often a stepping stone to wider compromise.Container startup logicThe first-run behavior that initializes settings and secrets inside a container.Container Storage Modules (CSM)Dell software that connects enterprise storage arrays to Kubernetes environments.Container-to-host copy workflowA process that moves data from isolated container space onto the host machine.ContainerizationPackaging software and its dependencies so it can run more consistently across environments.Containment authorityThe permission to take immediate defensive action, such as isolation or blocking.Containment boundaryThe security line meant to keep a test system from reaching unauthorized external targets.Containment planningSteps taken to limit damage while an incident claim is being checked.Containment reviewa rapid check to limit potential spread and verify account or system exposure.Containment timeThe period required to isolate an intrusion and stop further spread.ContaminationThe presence of benchmark content, or closely related material, in training data or model memory.Contamination riskThe chance that test data leaks into training or tuning, weakening the benchmark.Content amplificationthe process of increasing how widely or frequently a post is shown.Content authenticityThe quality of being verifiably genuine rather than synthetic, altered, or misleading.Content classificationA system for sorting material by age, sensitivity, or subject matter.Content delivery networkA distributed system that helps deliver large files and updates efficiently.Content Disarm and Reconstruction (CDR)A preventive technique that removes risky active elements from files and rebuilds safer versions.Content disseminationthe process by which posts or messages are spread to users on a platform.Content distributionThe way material spreads across posts, pages, and links online.Content LabelingTags or metadata attached to content to indicate origin, risk, or compliance status.Content lifecycleThe full path of digital material from creation to retention, access, and eventual deletion or archival.Content persistenceThe tendency for online material to remain visible, reappear, or keep influencing perception over time.Content rankingA system that orders posts or items based on predicted relevance or user interest.Content restorationThe practice of bringing back material that was removed or softened.Content roadmapthe planned sequence of future updates and releases for a product.Content Scanner ToolsA supporting component that helps process and inspect content inside the gateway.Content validationChecking a file’s real format and structure, not just its name or header.Content-Security-Policy (CSP)An HTTP header that restricts what resources a page is allowed to load.Contenziosoa formal legal dispute over an assessment, interpretation, or obligation.Contestationthe formal challenge to an alleged violation in an administrative process.Context analysisthe review of internal and external factors that shape an organization’s risk profile.Context captureCollecting relevant information from tools and documents so an AI system can work with real business data.Context continuityAn AI design that preserves information across apps or sessions so the system can respond with more memory of prior activity.Context framingThe way season, theme, or presentation changes how an object is perceived.Context governanceRules that limit what information an AI system can see, retain, and use.Context graphA structured model that links related data points, such as employees, skills, jobs, and tasks, so AI systems can reason with more business context.Context hygieneThe practice of limiting what information an AI system can see during a task.Context menuThe right-click menu that exposes actions for files and folders.Context of useThe specific situation in which a response is meant to be interpreted and applied.Context packagingThe practice of assembling the right instructions, data, and constraints for an AI tool.Context ProvenanceThe practice of tracking where AI inputs came from and how trustworthy they are.Context shiftwhen a message changes meaning as it moves from one setting to another.Context-Aware AccessAccess decisions that depend on signals such as device state, user identity, or session risk.Context-aware analysisEvaluation that combines content with user, app, or destination context to improve decisions.Context-aware authorizationAccess decisions that factor in task purpose, data sensitivity, and current risk, not just a fixed role.Context-aware encodingThe practice of escaping data differently depending on where it appears in HTML, such as text, attributes, or scripts.Context-aware securityDefensive logic that adapts to the current state, role, and risk profile of an environment.Context-aware translationTranslation that uses surrounding text to preserve meaning across sentences and paragraphs.Contextual access signalA factor such as IP reputation or geolocation used to inform access decisions, but not treated as proof of identity.Contextual advertisingAdvertising that matches a message to the content or situation around it.Contextual analysisReviewing how surrounding facts change the meaning or sensitivity of information.Contextual enforcementA control approach that evaluates content, labels, and surrounding context instead of relying only on identity.Contextual evidenceClues whose meaning depends on where and how they were found.Contextual sensitivitythe idea that data becomes sensitive based on situation, use, and possible consequences.Continual learningA training approach where a model keeps learning over time without restarting from scratch.Continuing development unitsOngoing learning credits used to keep some certifications active.Continuity of OperationsPlanning that keeps essential services functioning during and after disruption.Continuity of Operations PlanA recovery plan that keeps essential services running during or after a disruption.Continuous AvailabilityA product pattern where a system is reachable at any time, which can intensify use.Continuous compliancea model that checks security and governance controls on an ongoing basis.Continuous controlsongoing checks designed to track system behavior after it goes live.Continuous cybersecurityA security model that extends beyond periodic checks toward ongoing monitoring and validation.Continuous discoveryongoing identification and remediation of vulnerabilities instead of periodic checks.Continuous evaluationOngoing review of signals such as device trust and session risk, used to refine access decisions over time.Continuous evidenceOngoing proof that security controls remain active and effective.Continuous extrusionA process that produces output without frequent stops and restarts.Continuous fuzzingrunning fuzz tests repeatedly in automation so new bugs are caught as code changes.Continuous Glucose Monitoring (CGM)A system that tracks glucose levels over time using a body-worn sensor.Continuous health dataHealth information collected over time rather than only during clinic visits.Continuous improvementAn ongoing cycle of updating controls, processes, and governance as conditions change.Continuous Integration (CI)Automated testing and build systems that run code checks whenever a project changes.Continuous supportRepeated follow-up that helps patients stay engaged with care.Continuous testingRepeated validation of security controls over time instead of a single one-off check.Continuous validationrepeated testing that security controls and recovery steps still work as intended.Continuous verificationongoing checks that a security control still behaves as expected after changes.Contract clarityThe degree to which an offer clearly defines what is included and excluded.Contract dataThe stored terms that define price, duration, and service conditions.Contract durationThe length of time during which the agreed pricing conditions apply.Contract expirythe date when a promotional or fixed term ends and conditions may change.Contract for Difference (CfD)A contract that stabilizes revenue by compensating the gap between market price and an agreed strike price.Contract manufacturingoutsourced production work that can increase business and partner exposure.Contract metadatathe structured details that define a service agreement in digital systems.Contract nullitya legal outcome in which an agreement may be treated as invalid.Contract research organizationa company that supports research and development work for clients.Contract termThe rules, duration, and conditions that govern a service agreement.Contract variationA formal change to a contract’s scope, timing, price, or terms.Contractor GovernanceControls used to define, monitor, and limit third-party access, responsibility, and administrative authority.Contributed moduleA third-party Drupal extension that is not part of the core codebase.Contribution feedThe live video path that moves a match from the venue into a production environment.Contributo umanoThe human input that must be identified when an invention is developed with AI assistance.Control assuranceEvidence that a security control is not only documented, but operating effectively in practice.Control boundaryThe defined set of systems, users, and data flows covered by a security assessment.Control cabinetAn enclosure that houses electrical and control components for a machine.Control channelThe part of a protocol used for commands and session handling rather than file content.Control coverageThe share of systems, users, and processes actually protected by a security control.Control evidenceProof that a security control exists, is active, and remains effective over time.Control frameworkA structured set of security practices used to manage risk consistently.Control libraryA structured set of security controls used to map policies, assets, and compliance requirements.Control modelThe set of permissions, checks, and oversight rules that limit what a system can access or change.Control pathThe route through which a device receives instructions or triggers action.Control prioritya defensive safeguard that receives emphasis because it reduces risk in a high-value area.Control screenA dedicated display used to operate a system without relying only on a phone or computer.Control selectionThe step where an organization maps identified risks to specific safeguards.Control sequenceThe order of commands used to move components correctly.Control stackthe combined people, tools, and procedures that help govern a system.Control systemA system that influences real-world behavior, where errors can matter more than fluent language.Control taxonomyA classification system that groups security issues so they can be reviewed consistently.Control UIThe operator-facing interface used to manage sessions, permissions, and browser-linked actions.Control-flow hijackAn attack outcome where execution is redirected in a way the program did not intend.Control-flow hijackingAn exploitation outcome where execution is redirected away from the intended program path.Control-Plane EventA security issue that affects the systems used to administer other systems, often increasing impact.Controlled AreaA protected physical space where entry is restricted and monitored to reduce unauthorized access.Controlled changeA careful, traceable modification that limits unintended side effects.Controlled descenta managed return through the atmosphere intended to reduce damage and maintain stability.Controlled Unclassified InformationSensitive government-related information that is not classified but still requires protection.Controlled update ringA staged deployment group used to test updates before wider rollout.Controller BindingThe process of linking a device controller to an account or cloud service for remote management.Controller layoutthe arrangement of buttons and controls on a gaming device.Controller-to-device trustThe relationship that lets a managed device accept instructions from an authorized controller.Controls-by-designEmbedding security, compliance, and oversight into architecture during development rather than after deployment.ControlServletThe OFBiz request router that maps HTTP traffic into application actions.Convectionheat transfer through the movement of air or another fluid.Converged networkA shared infrastructure that carries multiple services such as Wi-Fi, operations, and digital media.ConvergenceThe tendency for different AI outputs to become similar when inputs and defaults are alike.Convergent evolutionindependent evolution of similar traits in different species.Conversation historyA service-managed record of prior AI interactions and generated items.Conversational agentAn AI system that interacts through natural language to collect input or guide users.Conversionthe point at which interest turns into an actual purchase.Conversion processThe series of steps used to change one material into another product.Conversion rateThe share of eligible visits or interactions that result in a desired action, such as a purchase or signup.Converter stationEquipment that changes electrical characteristics so power can move efficiently between grids.ConvertibilityThe ease with which a technology can be repurposed for a different use case.Cookie theftStealing session cookies so an attacker may reuse an authenticated browser session.CookiesSmall pieces of data sites store in a browser to manage sessions and settings.CoolantThe liquid that circulates through the loop and absorbs heat.Coolant distribution unit (CDU)The subsystem that controls coolant temperature, pressure, and flow in a liquid cooling loop.CooldownA built-in waiting period before an automated update is allowed to proceed.Cooldown PeriodA delay before newly published packages are widely trusted, giving defenders more time to inspect for abuse.Coordinated inauthentic behaviorOrganized activity by deceptive accounts acting together to mislead audiences.Coordination rulesThe technical and regulatory conditions that help different services share spectrum without conflict.Coordination structureAn organized channel for sharing alerts, priorities, and response duties.COPASIRItaly's parliamentary oversight committee for the intelligence system.Copilot accessPermission to use Microsoft 365 Copilot within the data and files available to the signed-in user.Copilot ChatThe chat-oriented interface for interacting with Copilot.COPPAU.S. children’s privacy law requiring notice, parental consent, and parental rights for data collected from children under 13.Copper cablinga cable that carries data through electrical signals.Copper oxidea family of compounds made from copper and oxygen, some of which can show useful electrical behavior.CoprocessorA secondary processor that handles specialized tasks alongside the main CPU.Copy and pastea basic workflow that moves data from one place to another inside an application or between applications.Copyright compliancefollowing legal rules that govern the use of protected works.CORDICAn iterative method for trigonometric calculation using shifts and adds.Core architectureThe underlying model design that powers different product variants.Core isolationThe Windows Security area that groups protections designed to keep critical system processes and memory more tightly separated.Core Technology Feea per-install charge associated with app distribution in the EU context.CoreGraphicsApple’s graphics framework used by multiple operating system branches.Corner liftwhen the edges of a printed part start to rise from the bed.Corporate powerThe ability to steer decisions, priorities, and behavior within an organization.Corporate serveran internal business system that may store or process sensitive organizational data.Corporate systemsinternal business infrastructure used for operations, storage, and communications.Corrective actionsspecific follow-up tasks created to close gaps found during the review.Corrective orderAn official instruction to fix a compliance problem or change a system or process.CorrosionChemical damage that can weaken contacts, connectors, and conductive traces in electronics.Cortex XSIAMPalo Alto Networks’ platform for centralized security operations, combining data, analytics, and automation.Cortex-M33an Arm-based microcontroller core commonly used in embedded devices.CorundumA crystalline form of aluminum oxide that includes both ruby and sapphire.Cosmetic itemA visual reward that changes appearance without affecting core gameplay.Cosmic rayshigh-energy particles from space that can interfere with ultra-sensitive experiments.CosmicPulseA backdoor mentioned in the technical analysis as part of the delivery chain discussed in the report.Cosmos DBMicrosoft’s managed database service for Azure that supports multiple APIs and data models.Cost and frictionThe expense and delay a process step adds to operations.Cost and Usage Report (CUR)A detailed export for reconciling cloud usage and cost data.Cost attributionThe process of mapping spend back to the team, product, task, or workflow that caused it.Cost ExplorerAWS service for analyzing usage trends and estimating future cloud spend.Cost per resultA unit metric that measures how much it costs to produce one useful output.Cost per Unique OutcomeTotal AI spend divided by the number of distinct useful results produced.Cost per verified outcomeThe total cost to produce a result that has been checked and can be shipped.Costi di commercializzazionemonthly service fees added to the energy price.Coulomb’s lawA rule describing the force between electric charges.Counter-surveillanceTools or tactics used to detect secret monitoring, including hidden cameras.Counterbalancea weight arrangement that offsets motion so an object can stay in place.Counterfeit consumableA fake replacement item that imitates a legitimate product but may not meet expected standards.Counterfeit hardwareFake or cloned devices and accessories that can pose safety or security risks.CounterfeitingMaking fake goods, documents, or credentials that are meant to be accepted as genuine.Counterintelligence valueThe usefulness of stolen or exposed information for mapping people, relationships, and operational patterns.Counterparty RiskThe risk that a customer or trading partner will not meet its obligations.CounterspaceCapabilities used to deny, degrade, disrupt, or defend against the use of space systems.CounterterrorismSecurity operations aimed at preventing, disrupting, or responding to terrorist activity.CounterweightA mass that stores potential energy and helps drive mechanical motion.Coverage obligationA rule requiring a provider to serve a specified area or population.Coverage obligationsRegulatory requirements that push operators to extend service availability across a defined area or population.Coverage validationThe process of checking whether detections actually fire on known malicious behavior.Coverage-guided fuzzinga method that uses execution feedback to steer test generation toward new code paths.Covered entityA healthcare organization, insurer, or clearinghouse regulated under HIPAA.Covert communicationsHidden or disguised data exchange used to avoid detection.Covert RecorderA hidden device used to capture audio without the knowledge of the people being recorded.Covert recordingSecret capture of audio or video without the knowledge of the people being recorded.CoWoSChip-on-Wafer-on-Substrate, an advanced packaging method that integrates chips and memory in one high-performance module.cPanel & WHMA Linux hosting control panel suite used to manage servers, accounts, and administrative tasks.cPanel WHMserver management tools used to administer hosting environments.cPanel/WHMA hosting control panel environment used to administer Linux servers.CPEA naming scheme that helps map vulnerabilities to specific products and versions.CPRCardiopulmonary resuscitation, a lifesaving technique used when breathing or heartbeat stops.CPR numberA 10-digit national identifier used to distinguish people in Danish public services.CPSCyber-physical systems that combine digital, physical, analog, and human components to support real-world operations.CPT/HCPCS codesUS medical billing code sets used to describe procedures, services, and supplies.CPythonThe reference implementation of Python, including its standard library and default runtime behavior.CQLCommon Query Language, a filter syntax used to express geospatial search conditions.Crafted HTTP requestA deliberately shaped web request designed to trigger unexpected behavior in a server or interface.Craftsmanshipthe combination of practice, care, and technique that turns tools into reliable results.CrashAn unexpected application failure that forces a program to close or stop responding.Crash triagethe process of sorting, reproducing, and prioritizing failures found during fuzzing.crates.ioThe default package registry for Rust, where developers publish and fetch reusable libraries.crawl accessPermission for a search bot to fetch a page’s content for indexing or previewing.CrawlabilityThe ability of a search engine bot to reach and inspect a page or resource.Crawlersoftware that visits web pages and follows links automatically.Crawler provenanceThe evidence that a bot really came from the operator it claims to represent, such as verified IP ranges or reverse DNS.CrawlingThe automated fetching of web pages by a search engine bot.CRDCustom Resource Definition, a Kubernetes extension that adds new resource types to the API.CRDMOa contract research, development, and manufacturing organization in life sciences.Creative rotationThe process of showing different ad variants to see which performs best.Credential activitylogin behavior that can reveal abuse of stolen or weak access.Credential attackAttempts to access accounts by guessing, spraying, stuffing, or testing usernames and passwords.Credential AttacksAttempts to obtain or test usernames and passwords to gain unauthorized access.Credential brokeringA system role that stores, injects, or relays secrets for remote access.Credential crackingThe act of trying to recover usable login secrets through automated guessing, reuse, or other abuse.Credential decryptionRecovering stored login data in usable form if protections are weak.Credential enrollmentThe process of adding a new login method or authenticator to an account.Credential exchangeA standardized process for moving credentials between trusted providers or applications.Credential exporta file set containing saved logins or password data that can be abused for account access.Credential extractionthe collection of secrets that can help an intruder reuse access.Credential handlingThe way software stores, protects, and passes passwords, tokens, and API keys.Credential isolationUsing separate, narrowly scoped credentials so one agent or workflow cannot overreach its intended permissions.Credential LayerThe combined set of credentials, secrets, and access controls that connect users, services, and automated systems to resources.Credential managerA system feature that stores and helps use sign-in credentials across apps and devices.Credential maskingA control that keeps secrets such as passwords or API keys out of logs, chats, and model context.Credential protectionControls that reduce the chance that passwords, keys, or tokens are exposed or reused unsafely.Credential providerThe device or service that stores and presents login credentials such as passkeys or passwords.Credential scopeThe specific permissions attached to a token, key, or login used by a system.Credential scopingLimiting what a token or login can access so misuse has a smaller blast radius.Credential sharingThe controlled distribution of passwords or secrets to authorized users.Credential snifferA module that searches for or identifies default access credentials; the exact mechanism is not specified here.Credential vaultAn encrypted container used to store passwords and related secrets securely.Credential verificationThe process of confirming that a digital certificate or badge is authentic and valid.Credential-probingRepeated attempts to test or guess valid usernames, passwords, or account access.Credential-theft utilitysoftware used to harvest usernames, hashes, or other login material from compromised systems.Credentialed ScanningTesting done with authorized access to reveal deeper configuration and patch issues.Credentialing fraudUsing fake documents or badges to make a lie look official.Credibility launderingThe use of branding, fake institutions, or copied material to make false claims seem trustworthy.Credible alternativeA replacement option that is realistic, tested, and available within the needed window.Credit card informationpayment data that can create fraud and compliance risk if exposed.Credit incentiveA financial benefit that encourages a specific type of borrowing or investment.Credit limitThe maximum amount that can be spent on a card, subject to the product’s terms.Credit modelA scoring framework banks use to estimate borrower risk and pricing.Credit reporting firma company that handles sensitive financial identity data and is often operationally sensitive.Credit scoringAn automated assessment of risk or eligibility based on structured information.Credit uniona member-owned financial institution that can face high-impact trust and access risks.Credit-based licensingA pricing model where protected assets consume abstract units that must be translated into actual coverage.CreditsPrepaid or pooled units that are consumed as AI features or workflows run.Creditworthiness assessmentThe review lenders use to judge whether a borrower can likely repay a loan.Criminal infrastructureThe systems, locations, and processes that support organized crime at scale.Criminal Justice Information (CJI)Sensitive data used in criminal justice operations and protected under CJIS policy.Criminal liabilityLegal exposure where conduct may be treated as an offense under law.Crisi della rappresentanzaloss of confidence in parties or institutions that are meant to speak for citizens.Crisis communication channelA formal line for rapid clarification during tense incidents to reduce escalation risk.Crisis Communications PlanA заранее prepared plan for who communicates what, when, and through which channels during an incident.Crisis deconflictionCommunication channels designed to reduce misunderstanding and escalation between rival military forces.Crisis protocolA pre-agreed process for coordinating action during a fast-moving emergency.Criteri comuniShared standards used to make assessments more consistent across firms and cases.Critical Capability LevelA safety threshold used to judge whether an AI model has reached a level of cyber capability that needs tighter controls.Critical cyber thresholdA risk level used for models that may autonomously support advanced exploit discovery or attack planning.Critical cybersecurity capabilityA threshold where a model may be able to carry out advanced cyber offense tasks with minimal human help.Critical cybersecurity thresholdA higher-risk category in the framework, described here as the maximum "critical" threshold.Critical digital infrastructureSystems whose failure can affect essential services or broad organizational resilience.Critical Information Infrastructure (CII)regulated systems that support essential services under Singapore’s cybersecurity regime.Critical informational infrastructureGeneral background term for systems that help society communicate and process information, such as government and media channels.Critical Infrastructure Protection (CIP)NERC’s set of mandatory reliability standards covering certain BES cyber systems.Critical Infrastructure ResilienceThe ability of essential services to withstand disruption and restore operations quickly and safely.Critical materialsMaterials identified as strategically important and potentially vulnerable to supply disruption.Critical mineralsRaw materials that are difficult to replace and are essential for advanced technology manufacturing.Critical servicesessential digital functions that support core business or public operations.Critical temperatureThe threshold below which a material enters the superconducting state.Critical transmission facilityA transmission asset whose loss could create major grid stability risk.CRLFCarriage return and line feed, control characters that mark line endings in HTTP text formatting.CROcontract research organization, a company that supports research and related operations.CronA Linux scheduling system that runs tasks at set times and is often checked during compromise investigations.Cron jobA scheduled task used on Unix-like systems for automated actions.crontabThe file or command interface used to define cron jobs for a user or system.Cross-border fraudA scam operation that involves people, victims, or infrastructure in more than one country.Cross-border remunerationPayment rules for works used in one jurisdiction but created, performed or managed across multiple countries.Cross-border transfera payment moved between countries, often complicating enforcement.Cross-chain bridgeA tool that moves crypto assets between blockchains, sometimes used to complicate tracing.Cross-chain tracingFollowing assets as they move between different blockchains.Cross-cloudSecurity tools or policies designed to operate across AWS, Azure, GCP, or similar environments.Cross-compilingBuilding software on one system so it runs on a different CPU or operating system.Cross-device supporta feature that lets access extend across more than one platform or hardware type.Cross-Domain SolutionA controlled mechanism for moving data between separated security domains without creating unrestricted connectivity.Cross-domain transfermovement of data between systems with different trust or classification levels.Cross-functional teamA small group that combines different roles, such as subject matter expertise, product direction, and engineering.Cross-origin data accessA flaw that may let content interact with data from a different website origin when browser isolation is broken.Cross-origin data disclosureA flaw that allows data from one site to be accessed by another site or component.Cross-platform abuseHarmful activity that uses several services to avoid easy detection on any single one.Cross-platform amplificationThe practice of pushing the same message across multiple services to increase reach and perceived legitimacy.Cross-platform buildsmalware versions designed to run across different operating systems.Cross-platform depththe ability to support different operating systems and device classes from one console.Cross-platform loaderA component designed to run on more than one operating system and fetch or launch a payload.Cross-platform managementsupport for more than one operating system within the same management framework.Cross-platform payloadMalware built to run on more than one operating system, often with separate variants.Cross-platform supportSecurity coverage that works across Windows, macOS, and Linux.Cross-platform workflowA product design that lets one account or task move across multiple devices and interfaces.Cross-Profile ControlAndroid restrictions that limit how apps and data move between personal and work profiles.Cross-sectioningCutting through a specimen to reveal its internal structure.Cross-site cookieA cookie that can be sent on requests between different sites, often used for measurement or attribution.Cross-site data exposureA flaw that can let data from one site or context leak into another.cross-site propagationThe spread of malicious access or code from one WordPress site to another environment.Cross-tenant accessPolicy-governed interaction between identities or resources that belong to different organizations.Cross-tenant exposureA failure where one customer can see data that belongs to another customer on shared infrastructure.Cross-tenant issueA flaw that may let actions or data cross the boundary between separate customer environments.Cross-tenant vulnerabilityA flaw that can let data or actions cross from one tenant into another.Cross-trainingPreparing multiple staff members to handle critical tasks so recovery does not depend on one person.Cross-user contaminationA failure mode where one user’s stored context influences another user’s session.Cross-user data disclosureA flaw where one user's data appears in another user's response, breaking confidentiality across requests.Crosstool-NgA tool for building cross-toolchains for non-native target architectures.CrosswalkA mapping between two frameworks so teams can compare controls, requirements, or practices.Crowdsourcinggathering observations from many people to spot shared patterns.CRUDA shorthand for Create, Read, Update, and Delete, the core operations used to manage data.Cryptanalytic techniqueA mathematical method used to analyze or break cryptographic systems.Crypter-as-a-serviceAn underground service that wraps or modifies malware to make detection and analysis harder.Crypto off-rampa service that converts cryptocurrency back into fiat currency.Crypto on-rampa service that converts fiat currency into cryptocurrency.Crypto signerA device used to approve blockchain transactions while keeping private keys isolated.Crypto theftthe unauthorized taking of cryptocurrency or access to digital assets.Crypto wallet extensionA browser add-on that manages wallet keys, addresses, or signing workflows.Crypto wallet hijackingUnauthorized takeover of a wallet app or its secrets so funds can be accessed or moved.Crypto-drainingTheft activity designed to move cryptocurrency out of a victim wallet.Crypto-ransomwaremalware that encrypts data and seeks payment for recovery.Cryptocurrency minerSoftware that hijacks computing resources to generate digital currency.Cryptocurrency miningUnauthorized use of computing power to generate digital currency for an attacker.Cryptocurrency scamFraud that uses tokens, wallets, or investment bait to steal money or assets.Cryptocurrency walletSoftware or a device used to store keys and manage digital assets.Cryptocurrency wallet theftStealing keys, seed phrases, or account access used to control digital assets.Cryptographic authenticationA login method that uses public-key methods to prove identity without revealing the private key.Cryptographic Context InjectionA prompt-injection technique that hides instructions inside encrypted content.Cryptographic Context Injection (CCI)A method that hides malicious instructions inside encrypted content so the agent reveals them only at runtime.Cryptographic DiscoveryThe process of finding where cryptography is used across applications, devices, services, and infrastructure.Cryptographic infrastructurethe keys, certificates, algorithms, and protocols that protect data in transit and at rest.Cryptographic IsolationUsing encryption and trust boundaries to protect communications when physical separation is not possible.Cryptographic keyA secret mathematical credential used to prove identity during authentication.Cryptographic librarySoftware that provides encryption, decryption, hashing, and certificate-related functions to other programs.Cryptographic primitiveA basic building block such as encryption, hashing, or digital signing.Cryptographic protectionsEncryption and authentication methods that help protect data and commands from tampering.Cryptographic storageThe secure handling of encrypted data and the keys used to protect it.Cryptographic WeaknessA flaw in how secrets, signing, or randomness are handled.Cryptographically signed credentialA digitally signed record that can help verify identity or claims without relying on self-reported permissions.CryptonymA code-style name used to identify and track a threat cluster.Crystal growthThe process of forming an ordered solid structure from a melt, solution, or vapor.CSF 2.0NIST’s outcome-focused cybersecurity framework that helps organizations structure and communicate security priorities.CSIRTs NetworkThe European cooperation framework that helps incident response teams coordinate and build trust across member states.CSPUOracle’s monthly security patch update for selected products.csrss.exeA legitimate Windows system process name that malware may imitate to look trustworthy.CSS bombA crafted HTML and CSS payload designed to influence web rendering behavior in ways that can support data leakage or UI manipulation.CSS exfiltrationAbusing style rules and browser behavior to leak information from a rendered page.CSS selectorA pattern used by browser code to target page elements; unsafe input can change what gets selected.CTAPClient to Authenticator Protocol, the channel that lets browsers and apps talk to security keys.CTAP 2.3A newer FIDO authenticator protocol version associated with expanded device behaviors and emerging approval features.CTFCapture The Flag, a controlled cybersecurity exercise where participants solve challenges or exploit test systems.Cu2Ocopper(I) oxide, a semiconductor material used in light-sensitive experiments.CubeSatA small satellite built from standardized cube-shaped units, often used for testing new technologies.Cultural memoryThe way societies remember and reuse important moments from the past.Cumulative patchAn update that can include fixes for current and earlier vulnerabilities in the same product line.Cumulative patchingA patch model where the newest release includes prior security fixes.CUPSThe Common UNIX Printing System, a printing service stack used on Unix-like systems, including macOS.Curated feedA stream of selected content shaped by human or editorial judgment.Curated roundupA selected list of resources chosen for a specific audience or purpose.CuringThe final hardening stage that strengthens printed resin after it leaves the printer.Curl inwardthe inward bending that can appear as a warped print loses shape.Currency exchange commissionAn extra cost applied when spending in another currency.Current densityThe amount of electrical current applied per unit area during plating.Current directory hijackAn attack pattern where a program accidentally loads or runs a file from the working folder instead of a trusted location.Current remaining performance obligations (cRPO)Revenue already contracted but not yet recognized, usually over the next 12 months.Current transformerA device that scales high primary current to a lower secondary current for safe measurement and monitoring.Current-carryingconducting electrical current through a component or circuit.Current-state architectureThe live inventory of systems, sites, versions, and dependencies.Current-state inventoryA live map of systems, services, and ownership as they exist now.Curtailmentintentional reduction of power output when the grid cannot take all available generation.Curve bindingThe security requirement that a negotiated elliptic-curve algorithm must match the curve in the presented key.Curved foldA bend that follows a non-straight path across a sheet.Custody controlspolicies and technical safeguards that govern who can move assets and when.Custody layerThe part of a crypto platform that holds and moves user assets, including wallets, keys, and approval workflows.Custody stackThe collection of systems, policies, and controls used to store and move digital assets safely.Custom actionsInstaller routines that run extra code during setup or repair, and can become risky if they execute with elevated rights.Custom buildA one-off or heavily modified project made outside mass production.Custom ComponentsUser-defined extensions that add logic to a platform.Custom consolepurpose-built control hardware designed for a specific application.Custom content typesA WordPress feature for organizing site data beyond standard posts and pages.Custom CPUa processor designed and assembled from scratch rather than purchased as a standard chip.Custom executable file formatA non-standard binary layout used to complicate analysis and hinder signature-based detection.Custom fabricationBuilding a part to fit a specific need instead of using a standard component.Custom GPTA configurable ChatGPT instance that can combine instructions, knowledge, and tools to behave like a tailored assistant.Custom GPTsCustomized chatbot versions that can be tailored for a specific style, task, or workflow.Custom implantA purpose-built malicious tool developed for a specific campaign or operator.Custom InstructionsUser-provided guidance that shapes how an AI assistant responds.Custom malwareMalware built or adapted for a specific target or environment.Custom Protocol HandlerA component that opens and processes links using a nonstandard scheme such as sgbiz:.Custom ransomwareransomware adapted for a specific operation or target set.Custom recoveryAn alternative recovery environment that can support advanced maintenance tasks and device modification on Android-style systems.Custom rulesUser-defined detection logic that adapts a scanner to specific code patterns.Custom URL schemeAn app-specific link format used for deep-linking or app handoff between software components.Custom virtual machineA malware-controlled interpreter that can reconstruct or decode data in a nonstandard way to complicate analysis.Custom XML dataNon-visible document data that can be stored inside a Word file and may survive normal viewing.custom_generate/generate.pyA repository file used for custom generation logic in some model workflows.Customer AdvancesPayments received before delivery, recorded as a liability until earned.Customer careThe function that handles support requests, complaints, and service communication.Customer datainformation that can identify or relate to a user, account, or session.Customer experienceThe user-facing result of a service, including speed, clarity, reliability, and consistency.Customer Experience (CX)The full set of interactions a customer has with an organization, from first contact to support and retention.Customer Identity and Access Management (CIAM)The identity layer used to manage external users such as customers or partners.Customer order informationPurchase-related records that can include transaction context useful for fraud or social engineering.Customer perceptionthe buyer's impression of quality, reliability, and professionalism.Customer premises equipmentHardware installed at the user side of a service link, such as an optical network terminal.Customer recordsStored information linked to an account holder, such as identity or billing data.Customer-controlled environmentA deployment model where the customer retains primary control over the system boundary and operations.Customer-data lifecycleThe path data follows from collection to storage, use, sharing, and deletion.Customer-facing engineeringEngineering work that includes direct contact with users, support, or escalation paths.Customer-facing processAny workflow a client or partner uses to access support, services, or account functions.Customer-facing servicespublic websites or apps used by customers to access a company.Customer-Managed ComponentSoftware operated by the customer rather than fully hosted by the vendor.Customer-managed keysAn encryption setup where the customer controls the cryptographic keys, not the provider.CustomizationModifying a product so it behaves more like the user wants.Customization controlssettings that let users adjust how a feature looks or behaves.CustomizationsChanges made to standard software, such as custom fields, workflows, or code.CustomizerWordPress’s live-preview interface for testing design and settings changes.CV screeningAutomated review of resumes to filter or rank job applicants.CVE identifierA standardized public label used to track a specific cybersecurity vulnerability.CVE Numbering Authority (CNA)An organization authorized to assign CVE identifiers and publish vulnerability records.CVE publication dateThe date a vulnerability record becomes public, used as a rough awareness marker.CVE RootA management layer in the CVE hierarchy that oversees and coordinates CNAs within its scope.CVE-2013-4786An IPMI 2.0 authentication weakness that can reveal password-derived material during the login handshake.CVE-2021-35394A vulnerability referenced in connection with the Realtek Jungle SDK / UDPServer exposure.CVE-2021-36260A Hikvision flaw involving command injection in affected products.CVE-2023-49105An ownCloud Server 10 vulnerability that can bypass authentication through WebDAV request handling.CVE-2023-6448a default-password weakness on certain Unitronics devices that can allow remote commands or unauthorized control.CVE-IDA public identifier used to track a specific vulnerability across vendors, scanners, and advisories.CVFSCommvault File System, the storage layer used within the Commvault platform stack.CVSS 4.0A scoring system used to rate the severity of security vulnerabilities.CVSS scoreA numerical severity rating used to compare the impact of security vulnerabilities.CW E-78A weakness category for improper neutralization of special elements used in OS commands.CWE Top 25MITRE's annual ranking of the most common and dangerous software weakness types.CWE-1189A weakness class for improper isolation of shared resources on a system-on-chip.CWE-119A weakness class covering operations performed outside the intended bounds of a memory buffer.CWE-121A weakness classification for stack-based buffer overflows.CWE-122MITRE’s classification for heap-based buffer overflow weaknesses.CWE-1284A weakness category for failing to properly validate a quantity-like input before using it.CWE-1285A weakness class involving poor validation of an index, position, or offset supplied in input.CWE-1287A weakness class for improper validation of the specified type of input.CWE-1325A weakness category for improperly controlled sequential memory allocation.CWE-201A weakness class covering sensitive information being inserted into sent data.CWE-258A weakness involving an empty password in a configuration file or account setting.CWE-269A weakness class for failures in assigning or enforcing privileges correctly.CWE-276A weakness category for incorrect default permissions on files or directories.CWE-277A weakness class for insecure inherited permissions that grant more access than intended.CWE-307A weakness class covering poor resistance to repeated failed authentication attempts.CWE-321A weakness class for hard-coded cryptographic keys that cannot be changed easily if exposed.CWE-338A weakness category for using a cryptographically weak pseudorandom number generator in a security-sensitive context.CWE-415MITRE’s classification for double free weaknesses in software.CWE-426A weakness class called Untrusted Search Path, involving unsafe file or command lookup behavior.CWE-506A weakness category for embedded malicious code, used to describe code that appears intentionally hostile or covert.CWE-540A weakness category for sensitive information appearing in source code.CWE-611The weakness category for improper restriction of XML external entity references.CWE-640A weakness class covering insecure password-recovery mechanisms.CWE-648A weakness category for incorrect use of privileged APIs that can lead to unauthorized access.CWE-732A weakness category for incorrect permission assignment on critical resources.CWE-835A weakness class for logic that gets stuck in an infinite loop without an exit condition.CWE-863A weakness class for incorrect authorization, where access checks exist but are implemented wrongly.CWE-916A weakness class for password hashes that are too cheap to compute, making cracking easier.CWE-95A weakness category for improper neutralization of directives in dynamically evaluated code.CWE-96A weakness category covering improper neutralization of directives in statically saved code.CWE-98A weakness category covering unsafe control of filenames used in PHP include or require logic.CyberThe digital domain where networks, systems, and services are defended, monitored, or attacked.Cyber activismdigital action intended to expose, protest, or challenge a political or social issue.Cyber AIAI systems used to assist with cybersecurity tasks such as analysis, prioritization, and remediation support.Cyber Asset ManagementA security practice for discovering, classifying and tracking assets so defenders know what is present and how it is used.Cyber benchmark testingControlled evaluation of a model’s cyber capability, often using tasks that probe offensive reasoning or exploitation paths.Cyber BlueprintThe EU framework for coordinating response to large-scale cyber incidents and crises.Cyber capabilitythe practical ability to carry out security tasks effectively in real conditions.Cyber capacity buildingEfforts to improve the skills, processes, and institutions needed for cyber defense.Cyber capacity-buildingInvestment in skills, tools, coordination, and processes that strengthen security operations over time.Cyber CommandA military organization responsible for cyberspace operations and coordination.Cyber communitythe network of practitioners, researchers, and organizers involved in cybersecurity.Cyber decoyA fake or deceptive asset placed in an environment to attract suspicious activity.Cyber diplomacyDiplomatic activity focused on cyber norms, cooperation, and risk reduction.Cyber espionagecovert intrusion aimed at collecting information rather than causing immediate destruction.Cyber evaluationA controlled assessment of how an AI system behaves in security-related tasks or scenarios.Cyber exposure managementThe practice of discovering assets, measuring risk, and prioritizing what needs attention first.Cyber extortionPressure campaign that uses threats or stolen data to force payment or compliance.Cyber fraudDigital deception used to steal money, access, or sensitive information.Cyber operationA coordinated digital action designed to collect information, disrupt systems, or influence an adversary’s environment.Cyber operationsThe employment of cyberspace capabilities to achieve objectives in or through cyberspace.Cyber personaAn online identity used to hide the operator’s real affiliation while collecting or influencing.Cyber recoveryThe process of restoring systems and operations after an incident while verifying integrity and trust.Cyber refusalsSafety controls that make a model less willing to comply with cyber-related requests.Cyber reportingThe process of notifying authorities or trusted recipients about a security incident or related condition.Cyber resiliencyThe ability of a system to anticipate, withstand, recover from, and adapt to adverse conditions.Cyber Risk ManagementThe ongoing process of identifying, protecting against, detecting, responding to, and recovering from cyber threats.Cyber sabotageDeliberate digital interference designed to damage, disrupt, or weaken systems and services.Cyber strategyA formal plan that sets priorities and methods for dealing with cyber threats.Cyber stress testA resilience exercise that measures how an organization responds to severe cyber pressure.Cyber supply chainThe network of outside vendors and services that support an organization’s digital operations.Cyber Supply-Chain Risk Management (C-SCRM)The practice of identifying and reducing security risks across suppliers, components, software, and support services.Cyber surveillanceCovert collection of information from systems or networks, often with strong legal and operational limits.Cyber threat intelligence (CTI)information used to understand threats, attacker behavior, and likely targets.Cyber toolsPrograms or utilities used to support security testing, monitoring, or defense.Cyber-biodirittoAn interpretive legal concept focused on how digital systems should protect vulnerability, diversity, and participation.Cyber-espionageCovert digital activity aimed at gathering sensitive information.Cyber-informed engineeringA design approach that embeds cybersecurity into the creation and operation of physical systems to reduce the impact of cyber compromise.Cyber-physical attackA technique that links digital activity to a physical effect in the real world.Cyber-physical eventAn incident where a physical action disrupts digital infrastructure or service availability.Cyber-physical systemsSystems where software interacts directly with physical processes and equipment.Cyber-risk assessmentA structured review of threats, vulnerabilities, and likely business impact.Cyber-risk governanceThe process of overseeing, reviewing, and updating security decisions over time.Cyber-risk management measuresPolicies and controls used to identify, reduce, and monitor security risk.CyberAIA blended field that combines cybersecurity skills with artificial intelligence concepts and applications.Cyberbullyingrepeated harassment, humiliation, or intimidation carried out through digital platforms or messaging tools.CybercitizenA person whose daily online behavior is treated as part of the wider security environment.Cybercrime damagesthe financial losses and costs associated with cyberattacks and related disruption.Cybercrime gangsorganized groups that carry out illegal digital activity for profit or disruption.Cybercrime groupa criminal network that runs hacking, fraud, extortion, or theft operations.Cybercrime investigationthe process of collecting and analyzing digital evidence in a suspected online offense.Cybercrime legislationLaws that define and punish offenses involving computers, networks, or digital data.Cybercrime loss estimatea high-level financial figure used to describe the cost of malicious digital activity.Cybercrime networkA linked set of people, services, and infrastructure used to carry out online fraud or theft.Cybercrime toolsSoftware or services designed to support phishing, fraud, intrusion, or data theft.Cybercrime-as-a-Service (CaaS)A criminal business model that packages tools, infrastructure, or workflows for other offenders to use.Cybercriminal groupA loosely organized set of actors suspected of profit-driven or disruptive attacks.Cyberextortionpressure campaign that uses stolen data or access to force payment.CyberGymA benchmark for testing whether agents can reproduce vulnerabilities from unpatched code.Cyberinsuranceinsurance designed to help cover costs linked to cyber incidents.CyberneticsThe study of control, communication, and feedback in systems.Cybersecurity ActEU framework for cybersecurity certification and related regulatory requirements.Cybersecurity assessmentA structured review used to evaluate risk, gaps, controls, and readiness in an environment or organization.Cybersecurity Awareness MonthAn annual campaign focused on practical behaviors that reduce common cyber risk.Cybersecurity careerA professional path focused on protecting systems, data, and users from digital threats.Cybersecurity Certification SchemeA formal framework used to assess whether a service or product meets defined security criteria.Cybersecurity Code of Practice (CCoP)a regulatory code issued by CSA for CII owners.Cybersecurity compliance gapA shortfall between required security controls and what an organization can show it has implemented or documented.Cybersecurity consolidationThe process of larger firms buying smaller or adjacent security vendors to expand their platform reach.Cybersecurity educationTraining and learning designed to prepare people for security-focused roles.Cybersecurity FrameworkA governance model used to organize risk management, roles, and security priorities across an organization.Cybersecurity Framework (CSF) 2.0A framework for managing cybersecurity risk across organizations through governance and operational outcomes.Cybersecurity Framework 2.0 (CSF 2.0)NIST’s outcomes-based framework for managing and communicating cybersecurity risk.Cybersecurity hiringThe process of recruiting people for roles that protect systems, data, and users.Cybersecurity hygieneRoutine security behaviors such as strong passwords, training, and careful verification.Cybersecurity incidentAn event that disrupts or threatens digital systems, data, or operations.Cybersecurity investmentMoney spent on tools, people, and services intended to reduce digital risk.Cybersecurity leadershipThe practice of directing security teams, policy, and risk decisions at an executive level.Cybersecurity lifecycle managementSecurity controls that extend across design, deployment, maintenance, monitoring, and response.Cybersecurity modelAn AI model intended to support tasks related to digital defense or security analysis.Cybersecurity oversightThe review and guidance process used to assess security-relevant risks in systems and deployments.Cybersecurity Performance GoalsVoluntary healthcare security baselines designed to help organizations prioritize practical defenses.Cybersecurity postureThe overall strength and readiness of an organization's defenses.Cybersecurity RoadmapA planning document that sets priorities, ownership, and implementation steps for a security program.Cybersecurity ruleA requirement that sets baseline protections for digital systems, access, monitoring, or resilience.Cybersecurity supply-chain risk managementThe practice of identifying, assessing, and reducing cyber risk across suppliers, products, and services.Cybersecurity thresholdA capability line that helps determine when a model may be too risky for broad release.Cybersecurity Workforce FrameworkA taxonomy that helps map security roles, skills, and tasks for education and hiring.Cyberspace operationsPlanned actions in digital environments that can support defense, intelligence, or active effects.Cycloidal gearboxA gear mechanism that uses an offset motion path to transfer rotation in a compact design.CypherNeo4j's query language for reading and changing graph data.D.lgs. 51/2018Italian framework for personal-data processing in law-enforcement contexts.D2Ddirect-to-device connectivity that links non-terrestrial systems with consumer devices.DaaSDesktop-as-a-Service, a model where virtual desktops are hosted and managed as a cloud service.DaemonSetA Kubernetes workload that runs one pod on each node, often used for security agents.DAMDatabase Activity Monitoring, the collection and analysis of database actions for visibility, compliance, and threat detection.Damage management recordsrecords identified by the listing as exposed.Damages claimA request for compensation tied to a perceived loss or harm.Dangerous-goods documentationoperational paperwork for handling regulated cargo safely and in compliance.Dangerous-goods recordsdocuments tied to hazardous cargo handling and safety controls.Dangling DNSA DNS record that still points to a resource or service that no longer exists or is no longer owned.Dangling DNS recordA DNS entry that still points to a removed or deprovisioned resource.Dark leak sitea public-facing site used to publish stolen data or extortion messages.Dark modea display setting that uses darker colors for interface elements.Dark web extortion portalA leak site used to pressure victims after alleged theft.Dark web marketAn underground marketplace used to trade illicit goods and services.Dark web marketplaceAn illicit online market where stolen data, credentials, and other illegal goods are bought and sold.Dark-web marketplaceAn online trading space, often hidden from normal search, where stolen data and other illicit goods may be sold.Dark-web monitoringA breach-alerting feature that checks whether account-related data appears in leaked datasets.Data access governancePolicies and controls that decide who can see specific data.Data analyticsThe use of data to identify patterns, trends, and anomalies that are hard to see in raw records.Data availabilitythe ability to access information and services when they are needed.Data blockingan undefined label that may describe interference, but whose meaning depends on context.Data Center deploymentA self-managed enterprise installation model that usually requires direct patching by the operator.Data center efficiencyHow effectively a facility converts electricity into computing work, including the cost of cooling and operations.Data Center revenueSales tied to servers and infrastructure used for AI and cloud computing workloads.Data centreThe physical infrastructure that houses servers, storage, cooling, and network systems for digital services.Data collectionThe act of gathering files, logs, configs, or other useful artifacts from a system for later use.Data completenessThe degree to which required information is present and usable.Data consistencyThe degree to which the same information matches across forms, systems, and records.Data continuitythe preservation of accurate information from one lifecycle stage to the next.Data ContractA machine-verifiable agreement about what a dataset should contain and how it should behave.Data disclosureUnauthorized exposure of information from memory or files that should not be visible to an attacker.Data discoveryThe process of finding and mapping sensitive data across an organization’s systems.Data engineeringThe technical work of collecting, transforming, and preparing data for analysis.Data environmentThe systems, storage, and services where an organization keeps and processes information.Data exchangedInformation shared between users, teams, or systems inside a platform.Data exfiltration claiman assertion that files were taken, which still needs verification.Data extractionUnauthorized copying or export of information from a system.Data flow mapA description of how information moves through a system, including storage, access, and retention points.Data flow mappingthe process of tracing where information goes inside and outside a system.Data flow monitoringTracking how information moves between users, devices, and external services.Data in UseInformation actively being processed by a system, rather than stored on disk or moving over a network.Data ingestionthe process of collecting and importing data into a system or pipeline.Data intelligencesoftware that aggregates and analyzes large datasets to support investigation or decision-making.Data layoutBackground term for how information is arranged in memory.Data leak claiman allegation that files were stolen or published, not always independently verified.Data Leak MonitoringTools that scan for exposed personal information and alert users when data may have surfaced publicly.Data leak threata coercive promise to publish information unless demands are met.Data loggingSaving measurements over time so they can be reviewed later.Data necessityThe principle that data should be used only when it is needed for a defined purpose.Data opacitylimited visibility into how platforms measure, rank, or value content use.Data parsingThe process of turning structured input into usable information.Data pathThe route information follows as it moves through a system from storage to delivery.Data preparationThe cleaning, reshaping, and combining of raw data before analysis or reporting.Data preservationThe practice of keeping information accessible over time, even after a platform changes or shuts down.Data processing chainthe sequence of parties and steps involved in handling personal data.Data processora party that processes personal data on behalf of the controller.Data profilingThe analysis of personal data to infer behavior, preferences, or identity details.Data protection by designbuilding privacy safeguards into a product before deployment.Data protection lawRules governing the collection, storage, transfer, and processing of personal data.Data protection platformSoftware used to control, secure, and monitor sensitive information.Data reconciliationThe comparison of records across systems to keep them consistent after changes or retirement.Data remanenceResidual information that remains on storage after deletion or reallocation and may still be recoverable.Data representationThe structured form that turns real-world events into inputs an AI system can process.Data resiliencethe capacity to keep data available and reliable during disruption.Data retention controlsPolicies and technical settings that determine what the system stores, for how long, and whether users can delete it.Data roomA controlled repository for documents shared during a transaction or review.Data samplea small set of files used to support a theft claim.Data scienceMethods for collecting, cleaning, analyzing, and modeling data to support decisions or automated systems.Data ScopeThe set of files, systems, and records that may have been accessed during an incident.Data scopingLimiting which datasets a model or workflow can access to reduce exposure and misuse risk.Data scrapingAutomated collection of information from web pages or portal content at scale.Data securityThe practice of protecting sensitive information from unauthorized access, loss, or misuse.Data segregationSeparating sensitive records from general business systems to reduce blast radius.Data sharingthe controlled exchange of information between participants or systems.Data SpaceA governed environment for data sharing that emphasizes controlled access, privacy, and common interoperability rules.Data SpacesGoverned environments for sharing data across organizations while preserving interoperability and control.Data sprawlthe uncontrolled spread of copies across files, devices, and services.Data strategythe plan for collecting, managing, and using data across an organization.Data subjectthe individual whose personal data is being collected, processed, or reviewed.Data surfaceThe collection of data flows, storage points, and handling processes that can create security risk.Data theft campaignAn intrusion focused on stealing information rather than disrupting service.Data theft incidentAn event in which information is suspected to have been taken or accessed without authorization.Data timera countdown marker shown on some extortion listings.Data transfer restrictiona legal or technical limit on moving data to another party.Data transparencyHow clearly a service explains what data it collects and how it is used.Data triagesorting stolen files by sensitivity or value to prioritize coercion.Data visibilityThe ability to locate, identify, and monitor where data is stored and how it is used.Data volumeA size figure that may describe files, but its exact meaning is not always clear.Data volume claimA stated amount of allegedly stolen data that may not be verified.Data volume markercounts or size figures used to signal alleged impact.Data warehouse exportA dataset exported from a data warehouse environment.Data-centric monitoringA security approach that focuses on activity around sensitive information and its access patterns.Data-centric securityA protection approach that follows the data itself, regardless of where it is stored or transmitted.Data-leak activityThreat actor threats or actions involving stolen data publication for pressure.Data-leak vectora route attackers can use to pull sensitive information from a system.Data-processing boundaryThe point at which information is handled by a vendor, cloud service, or internal system, often shaping privacy and security risk.Data-stealing malwareMalware designed to collect and exfiltrate sensitive information from a device.Database attackan intrusion or abuse path aimed at stored records or backend access.Database backupa copy of stored data that can reveal broad internal records if stolen.Database dumpA copied set of records taken from a system and often used in extortion or resale.Database exfiltrationThe unauthorized copying of data out of a database.Database grantsPermissions that define what a database user can do.Database migrationA structured change to stored data or schema during a software upgrade.Database poolingSharing infrastructure across multiple databases so idle capacity can be reused instead of reserved per system.Database programmingUsing database features to express logic, not just store records.Database repairA recovery step that attempts to fix damaged or inconsistent data structures.Database rootThe highest administrative identity in a database system.Database schema migrationA structural database update that can rewrite data and complicate rollback planning.Database scriptscode that can reveal how internal data systems are structured.Database snapshota point-in-time copy of data that can preserve sensitive records or credentials.Database systemThe layer where structured data is stored, queried, and managed.Datacenter GPUa graphics processor originally used in server or datacenter environments.Datacentre optimizationA program that aims to improve cloud or infrastructure efficiency, often by reducing waste and improving governance.DatapathThe packet-processing path that matches traffic and applies forwarding actions.DataplaneThe traffic-processing side of a network device that handles packets and forwarding decisions.Dataset censusThe process of identifying and listing datasets held by an organization.Dataset inventoryA structured record of the data sources, licenses, and restrictions used in training.Dataset linkingcombining multiple data sources to reveal identities or sensitive patterns.Dataset-processing pipelineThe sequence that loads, transforms, and prepares data for use.Dataset-processing vulnerabilitya weakness in data-loading or data-handling code that can create security exposure.DataverseMicrosoft’s data layer for business records used by Dynamics 365 and Power Platform.Dataverse tablesCloud data tables that can become exposed if access rules are too open.Date codea marking that indicates when a component was manufactured.DawnChromium’s implementation layer for WebGPU, translating browser graphics requests into native GPU operations.DAXThe formula language used in Power BI to write calculations, measures, and business logic.Day 2 tokenomicsThe ongoing cost and efficiency of running AI systems after initial deployment.Daybreak BlueA controlled access tier used for limited testing of advanced model behavior.Daybreak platformOpenAI’s platform name for the expanded access offering mentioned in the announcement.Db2IBM’s database platform used to store and process structured data in enterprise environments.DC circuitA direct-current path used in solar systems, often requiring careful isolation before maintenance.DCF77A German long-wave time signal broadcast at 77.5 kHz.DCIMData Center Infrastructure Management, software and processes for tracking capacity, energy, and operations inside a data center.DCRatA Windows remote access trojan family used for operator-controlled malicious activity.DCSDistributed Control System, a platform used to manage complex industrial operations across multiple controllers.DCSyncA directory replication technique that can be abused to request sensitive credential data from Active Directory.DDL Concorrenzaa competition bill used to amend or clarify parts of Italy’s regulatory framework.DDoS attackA distributed denial-of-service attack that overwhelms a target with traffic or requests so legitimate users cannot access it.DDoS botnetA network of compromised devices controlled to generate distributed traffic for denial-of-service attacks.DDR4A common memory standard whose configuration properties matter in this reported technique.DDR5a memory standard whose traffic can become a target when physical access is available.De-agingA broad term for efforts aimed at reducing age-related biological changes.De-linked dataData processed so it is separated from direct user identity markers.De-riskingA compliance choice to limit or end relationships judged too risky.Deactivation CriteriaPredefined conditions for disabling or restricting a system when risk or misuse crosses a threshold.Dead Drop ResolverA covert method where malware and operators exchange data through a trusted third-party service.Dead reckoningEstimating position from course, speed, and elapsed time when external signals are unreliable.Deadline messagingpublic urgency used to increase pressure on a target or audience.Deadline pressurea tactic that narrows response time to increase urgency.Deadline timera fixed time intended to heighten urgency for the target.DeadlockA state where two or more execution paths wait on each other’s resources and no progress is possible.Deal flowthe movement of business opportunities through meetings, demos, and negotiations.DeauthenticationA wireless denial-of-service action that breaks the connection between a device and its access point.Deauthentication AttackA Wi-Fi disruption technique that forces devices off a network by sending forged disconnect frames.Debit card programThe set of terms that govern how a card is issued, used, and charged.DebounceA method for filtering noisy button signals so one press is read correctly.Debt held by the publicU.S. government debt owned outside federal accounts, a key measure of sovereign borrowing burden.Debug loggingDetailed diagnostic output that can accidentally store sensitive user input or metadata.Debug modea state that DDRop may force Intel TDX confidential VMs into, enabling memory exposure in the reported attack.Debuggera tool used to inspect program behavior while code is running on real hardware.Decentralized architectureA design that spreads control and routing across many nodes rather than one server.Decentralized decision-makinga model in which local teams can make certain decisions without waiting for central approval.Decentralized exchangeA trading platform that runs through blockchain-based logic rather than a central operator.Decentralized IdentityAn identity model that distributes trust across issuers, holders, and verifiers.Decentralized infrastructureA distributed setup that avoids dependence on one central host.Decentralized networka group structure without a single central command point.Deception technologySecurity controls that use fake or monitored assets to study attacker behavior.Deceptive alignmentA case where compliance is only apparent, not genuine.Deceptive appsoftware that misrepresents its purpose, value, or behavior to users.Deceptive associationA misleading impression that a brand and an event are formally connected.Deceptive recovery offera false promise of help designed to lure victims into payment.DECIDE-AIa guideline for early clinical evaluation of AI decision-support systems.Decision AssuranceEvidence and review practices that help show how an AI-influenced decision was made and approved.Decision fatigueReduced judgment quality after many repeated decisions or reviews.Decision flowThe path an AI system follows from input data to output or action.Decision integrityThe security property that a system’s outputs are not improperly manipulated.Decision LedgerA log of human decisions made during exceptions, used to improve future versions of a process map.Decision lineA practical boundary that separates decisions AI may make, decisions it may advise on, and decisions that must remain human-led.Decision LoggingRecords that preserve what the system did, when it did it, and who approved it.Decision makersThe people who influence or approve a purchase in a business setting.Decision modelAn AI system that returns a bounded choice or score instead of open-ended text.Decision Model and Notation (DMN)A standard for representing business decisions in a structured and auditable form.Decision ParalysisDelayed or stalled decision-making caused by too many options or too much uncertainty.Decision platformSoftware that ranks operational choices by priority, impact, or risk.Decision rulesThe policies or control logic that shape what an AI system can do.Decision signalModel output that is used to trigger or guide a follow-on action in a workflow.Decision windowthe short period during which a response can still change the outcome.Decision-making centerthe place where final authority sits for investment, design, procurement, and program direction.Decision-making infrastructurethe data, systems, and procedures used to support operational choices.Decisioning LayerThe control layer that decides what an AI system may access or execute.Decoder pathThe specific code branch that interprets an input file format, often a high-value target when handling untrusted files.DecodingThe generation process that controls how a model turns probabilities into text.DecompositionBreaking a complex task into smaller parts that are easier to understand and manage.DecompressionThe process of restoring compressed data to its original form, often while parsing attacker-controlled input.Decompression stubThe built-in code that extracts files from an SFX package and starts execution.Decontextualized contentMaterial shared without its original setting, making it easier to misread or weaponize.Decoy endpointA deceptive service or target meant to mislead an automated system into bad decisions.Decoy installerA legitimate setup file included to make a malicious package look harmless.Decreto Fintechan Italian legal framework linked to digital financial services and tokenized market models.Decreto legislativo 179/2026The Italian implementing decree discussed here, tied to the adaptation of national rules to the EU AI framework.Decrypt samplea partial file offered to suggest recovery capability.Decryption keya credential or artifact used to unlock encrypted files.Decryption keystools that unlock encrypted files, but claims about them require verification.Dedicated VPSA virtual private server reserved for one customer or organization.Deep LinkA link that opens an app or assistant with pre-filled context or parameters.Deep neural networkA machine learning model with multiple layers that learns patterns through distributed parameters.Deep ResearchA Copilot feature for structured research-style output that is being retired in the consumer app.Deep techcompanies built on advanced scientific or engineering research.Deep useAI applied to judgment-heavy work with context, review, and feedback.Deep-space communicationsSystems used to send data across extreme distances with long delay.Deepfake detectionSecurity controls that attempt to identify AI-generated or manipulated audio and video.Deepfake scama fraud attempt that uses synthetic audio or video to impersonate a real person.Deepfake websiteA fake or impersonated site designed to look legitimate enough to pass casual inspection.DEERSDefense Enrollment Eligibility Reporting System, a centralized repository used for personnel and medical data support.DEETA commonly used comparison point for insect repellents.Default access credentialsFactory-set usernames and passwords that remain a common attack surface if not changed.Default assistantThe built-in voice or AI helper a device uses unless the user changes it.Default behaviorThe settings or actions a system uses before a person changes them.Default enrollmentA policy state where users are included unless they actively change a setting.Default policyA preset behavior that applies unless an administrator changes it.Default privacyA setting that makes accounts or interactions private unless the user changes them.Default protectionsSafety settings applied automatically without requiring users to enable them manually.Default stateThe setting a feature has before a user changes it.Default trust biasThe human tendency to accept familiar or urgent cues too easily.Default-denyA security model where everything is blocked unless it is explicitly allowed.Defender AntivirusMicrosoft’s built-in antivirus component for Windows environments.Defender automationThe use of automated tools to help security teams triage, validate, and respond faster.Defender exclusionA security setting that tells Microsoft Defender to skip scanning certain files or paths.Defender-only accessA control pattern that restricts a security tool or model to verified defensive users.Defense contractorA company that provides goods or services to defense organizations.Defense Industrial BaseThe contractor ecosystem that supplies goods and services to the U.S. defense establishment.Defense Manpower Data Center (DMDC)A DoD personnel data center that holds central personnel records and related identity information.Defense rightsthe protections that allow a party to contest a decision.Defense-tech ecosystemthe network of companies, labs, suppliers, and agencies building defense capability.Defensive assuranceevidence that security controls or services work as intended.Defensive cyber researchSecurity work focused on testing, validation, and resilience rather than harm.Defensive fitHow well a tool or control matches a specific environment, workflow, or risk profile.Defensive playbookA predefined response plan that helps teams react consistently during security incidents.Defensive resilienceThe ability of a system to continue operating, recover quickly, or fail safely under attack.Defensive workflowThe routine used by security teams to turn information into action.Deferred paymentA payment method where the charge is settled at a later time.Deferred RevenueRevenue collected in advance but not yet recognized in earnings.Definer’s-rights procedureA routine that runs with the privileges of its owner, not the caller.Definitive accertamentothe final finding that can start a procedural deadline.Definitive EditionA release label that usually signals a fuller packaged version of a game.DefragmentationA disk maintenance method that reorganizes file fragments to improve access efficiency.Defrost CycleA programmed interval that clears ice buildup in cooling equipment; changing it can affect temperature stability.Degraded Mode OperationsPreplanned fallback procedures that keep critical functions running when normal digital systems are unavailable.Degraded operationsLimited business functioning used when full service is not available.Degraded performanceA service still works, but more slowly or unreliably than expected.Degraded servicereduced functionality that still leaves some parts of a platform working.Deindexingremoving a page from search results without deleting the underlying webpage.Delegation boundaryThe line between AI-only tasks, human-reviewed tasks, and human-only work.Delegation chainThe sequence showing how authority moves from one identity or system to another.Delegation of authorityThe rule set that defines who may approve specific business actions.DelistingRemoval of a company from a stock exchange, which can change public-market visibility and reporting obligations.Delivery chainThe sequence of steps used to move a payload from a lure to execution on a victim device.Delivery evidenceproof that a message was sent and received within a controlled messaging system.Delivery gapA failure in timing, format, or routing that keeps useful intelligence from reaching the right person.Delivery-themed lurea scam message that imitates parcel or shipment notifications.Delta plotterA plotting machine that uses a delta-style motion layout instead of straight X-Y axes.Demand ResponseA system that changes electricity use in response to grid conditions or price signals.Demand validationA process for checking whether real buyers exist before major investment.Demilitarized Zone (DMZ)A buffer network that separates sensitive systems from less trusted or external connections.Democratic scrutinyPublic or institutional oversight of major technology decisions through transparency and accountability.Demographic changeShifts in population structure, such as aging societies and changing workforce composition.Demonstrated performanceevidence of what a person can actually do on the job.Demurragecharges tied to delays in loading or unloading cargo.Denial-of-walletA cost attack where repeated requests drive cloud spending upward.Deno runtimeA JavaScript and TypeScript runtime used to execute code outside the browser, with permission-based security controls.DeobfuscationThe process of undoing obfuscation to recover clearer program behavior.DepenalizationA legal shift that reduces or removes criminal penalties for certain conduct.DependabotGitHub automation that opens pull requests to update dependencies in a repository.dependabot.ymlThe repository configuration file that controls Dependabot behavior.DependenciesTechnical or business links that require one component to work before another can function correctly.Dependency auditingChecking third-party packages and libraries for known vulnerabilities, risky versions, or supply-chain issues.Dependency boundaryThe line between trusted core code and external components brought into a build.Dependency changeAny update to a software component that can affect downstream workflows.Dependency intakeThe stage where a package is chosen and admitted into a project or build workflow.Dependency RelationshipA record showing how one software component relies on another inside a product.Dependency timelinethe order in which a dependency was published, installed, or updated in a system.Dependency transparencyThe ability to see the software, service, or hardware components a system relies on.Dependency visibilityThe ability to identify and track the external components a system relies on.DeployersOrganizations that use an AI system in a real-world setting and may have disclosure duties of their own.Deployment boundaryThe technical line between different installation modes that changes exposure to a flaw.Deployment conditionsThe real-world environment in which a system or idea must operate successfully.Deployment decisionThe internal choice to release, delay, or block a model after reviewing risk evidence.Deployment gateA checkpoint used to decide whether a model is safe enough to release or expand into production.Deployment recordsinternal documents describing how systems are installed and set up.Deposit accountA savings product that typically follows fixed terms and eligibility conditions.Deposit guaranteeA legal protection framework that can reimburse eligible deposits if a covered institution fails.Deposit Guarantee SchemeA protection framework that covers eligible deposits up to a legal limit if a bank fails.Deposit limitthe maximum amount a customer can place into the product.Deputy CISOA senior security role that supports the CISO and may help manage security operations.DERA strict encoding format commonly used to store certificate data in binary form.DerateTo reduce a plant's output below its maximum level, often because of operational limits.DerivatiFinancial contracts whose value depends on an underlying event or asset.Derived SignalsNon-raw indicators such as classifier results, scores, or metadata that can help detect risk without keeping full conversation text.DescriptorA signed record that helps clients find and connect to an onion service.Descrizione del brevettoThe written patent description that explains the invention and its key features.DesensitizationA drop in receiver sensitivity caused by strong unwanted signals or excessive input power.Deserialization gadget chainA sequence of reachable methods or hooks that turns object reconstruction into execution.DesiccantA moisture-absorbing material used to reduce humidity in a container or space.Design clarityHow easily players can understand what a game expects them to do.Design documentsEngineering records that describe how a device was planned and built.Design envelopeThe operating range in which a system is intended to function safely and predictably.Design gapA mismatch between what a model predicts and what the real decision needs in order to be useful.Design principlea rule or goal that shapes how a system is built from the start.Design tradeoffA compromise where improving one feature can affect another.Design-time controlsSecurity checks applied during planning and development, before deployment.Designation regimeA legal mechanism that identifies specific entities for special obligations or restrictions.Designed dissentA workflow pattern that deliberately preserves disagreement so errors are easier to spot.DeskillingA reduction in the level of skill needed for a job because tools or processes take over key tasks.Desktop automationSoftware-driven control of a computer’s interface, including apps, windows, and forms.Desktop baselinethe expected standard look and behavior of a managed workstation.Desktop captureA feature that can expose screen or window content for recording or sharing.Desktop clientA local application installed on a computer to access a service or server.Desktop computerA personal computer designed to sit on a desk and be used by one person or a small group.Desktop estateThe collection of managed user workstations and installed applications.Desktop hypervisorSoftware that runs virtual machines on a personal computer or workstation.Desktop metaphorA design approach that presents files and applications as familiar physical objects.Desktop objectA Windows UI context that can isolate windows, input, and interaction from other desktops.Desktop settingsUser-facing configuration such as wallpaper, layout, and personalization choices.Desktop setupa personal computer configuration built for local, hands-on use.Desktop shellthe user interface layer that loads after sign-in.Desktop-as-a-Service (DaaS)centrally managed desktop access delivered from a shared platform.desktop.iniA legitimate Windows shell file used for folder customization that can also be misused for covert storage.Despatcha payment or credit linked to faster-than-planned cargo handling.DestabilizationActions meant to weaken confidence, coordination, or resilience in a target society or institution.Destination escapeA flaw class where a file operation lands outside the intended target path.Destination ValidationSecurity checks that confirm a request is going only to approved targets.Destination-escapeA flaw where extracted files land outside the intended target directory.Destructive controlClaimed ability to delete, alter, or disrupt stored data instead of only copying it.Desynchronizationa mismatch between what a client shows and what a server records.Detached processA child process started by software that runs independently from its parent.DetectThe first step in a credential defense workflow, focused on identifying exposed or risky secrets.Detection and mitigationDefensive measures used to spot hostile activity and reduce the chance of successful compromise.Detection coveragethe degree to which security controls can observe and alert on specific malicious techniques.Detection evasionTechniques that help malicious activity blend into normal operations and avoid security alerts.Detection gapthe time between a compromise and its discovery by defenders.Detection querya search rule or analytic expression used to find suspicious activity in security telemetry.Detection signalEvidence that helps defenders identify suspicious activity with higher confidence.Detection-as-codeManaging detection logic like software, with version control, review, and repeatable deployment.Detection-firstA security posture that prioritizes finding suspicious activity before taking containment action.Detection-to-response timeThe interval between spotting a threat and taking action against it.DeterministicA system behavior that is predictable because the same inputs produce the same actions.Deterministic behaviorA predictable response that stays the same under the same conditions.Deterministic control behaviorPredictable system response timing that industrial processes often require to remain safe and stable.Deterministic decisionA choice with a predictable outcome based on fixed rules or inputs.Deterministic logicRules that should produce the same result every time when the inputs do not change.Deterministic operationsSystem behavior that must stay predictable and timed correctly, which is vital in OT.Deterministic SoftwareCode that produces the same result for the same input, without model-style variability.Deterministic threat detectionA detection model that fires on a defined condition or state change rather than on statistical inference.Deterministic validationa repeatable test process designed to produce consistent results when checking a security finding.DetokenizationThe process of restoring the original value from a token when authorized.DetonationRunning suspicious content in a controlled environment to observe its behavior safely.Dev serverA development-only web server used for testing and live reload, often less hardened than production services.Dev TunnelsLegitimate developer tunneling tools that relay traffic to local services through a remote endpoint.DeveloperThe studio responsible for building the game itself.Developer accountThe publishing identity used to upload and manage extensions in a store.Developer credentialsSecrets such as passwords, tokens, or publishing keys used to access accounts and release software.Developer roleA GitLab permission level that supports project work such as code changes and pipeline interaction.Developer servera system used for software work that may hold sensitive assets if involved in an incident.Developer supply chainThe tools and systems that help build, test, and ship software.Developer targetingSocial engineering or intrusion tactics focused on engineers and build environments.Developer workflowThe sequence of tasks a developer uses to inspect, write, test, and integrate code.Developer workflow abuseExploiting normal coding tools and habits to deliver malicious code.Developer workflow integrationfitting security checks into the tools and steps engineers already use.Developer workstationA trusted endpoint used for coding or internal access that may connect to sensitive systems.Developer-layer encryptionEncryption implemented inside an application or database, closer to where sensitive data is processed.Developer-role permissionsAccess rights commonly used for contributing code and interacting with project workflows.Development server exposureA misconfiguration where a local-only tool becomes reachable from outside the trusted network.Developmental vulnerabilityThe greater sensitivity younger users may have to confusing or persuasive digital environments.Device attestationA method for verifying a device's identity or integrity using cryptographic proof.Device authenticity checkA verification step that helps confirm a hardware device is genuine and has not been tampered with.Device compromiseUnauthorized control or influence over a computer, phone, or workstation.Device concurrency limitThe maximum number of devices that can stay connected to one account at the same time.Device controlPolicy layer that limits which external devices can connect and what they can do.Device custodyThe chain of control over a company-issued device, including who received it, where it is used, and whether that matches policy.Device customizationchanging the look or form of a device for personal or practical reasons.Device enrollmentThe process of adding a device to management and policy enforcement.Device extractionThe process of copying data from a phone for analysis.Device fingerprintingA way to recognize a device using technical traits such as browser and system characteristics.Device fleetthe full set of endpoints an organization needs to manage, such as laptops, phones, and tablets.Device governancethe policies and controls used to manage how endpoints are enrolled and maintained.Device hygienekeeping laptops and phones updated, locked, and physically secure.Device isolationAn endpoint control that cuts a machine off from the network to help contain suspicious activity.Device limitThe maximum number of devices covered by a subscription plan.Device lockoutan event that prevents endpoints from being used normally.Device migrationthe process of moving apps, settings, and data to a new phone.Device policyRules that define what software and settings are allowed on a managed endpoint.Device policy controller (DPC)Enterprise software used to manage Android security settings and update timing.Device ProfileA bundle of client-side traits used to recognize a device or session, including software and hardware signals.Device provisioningThe process of issuing and preparing a work device for an approved user.Device reuseAssigning old hardware a new role instead of discarding it.Device salvageReusing working parts from damaged hardware to restore partial or full function.Device seizureTaking phones or computers for evidence and forensic review.Device spoofingAltering reported device identity so hardware appears to be a different model or brand.Device TrustA policy decision about whether an endpoint is allowed to access sensitive resources.Device tunnelA VPN connection that establishes before user sign-in, supporting device-level access.Device unlock factorA local check such as a fingerprint, Face ID, or PIN used to approve use of a passkey.Device whitelistingA control that allows only approved hardware or storage devices to connect to a system.Device wipea function that erases local data from a phone or laptop.Device-bound access controlA rule that limits which devices can open or display a specific chat or account feature.Device-Bound Session ControlA protection model that ties a session to a specific device to make theft less useful.Device-code attackAbuse of a legitimate device authorization flow to trick a user into authorizing access for an attacker-controlled session.Device-code loginAn authentication method that lets a user complete sign-in on one device by entering a code on another.Device-Count LicensingA subscription model that limits protection to a fixed number of devices.Device-linkingA cross-device sign-in or transfer process that moves authenticated access between devices.Device-targeting dataServicing data used to decide which systems receive an update or rollout first.DeviceIoControlA Windows API that sends IOCTL requests from user mode to a device driver.DeviceNetworkEventsA Defender XDR table that records device network activity.DevOps pipelineAn automated workflow that builds, tests, and deploys software.DEXAndroid bytecode format used by apps, often loaded at runtime by malware to change behavior after installation.Dexterityfine motor control that lets a machine handle tools and irregular objects with precision.DFARSDefense Federal Acquisition Regulation Supplement, the procurement rule set that carries cybersecurity requirements into contracts.DFIRDigital Forensics and Incident Response, the practice of investigating attacks and collecting digital evidence.DFMADesign for Manufacturing and Assembly, an approach that favors repeatable, factory-built components over custom site work.DFSDistributed File System, a Windows feature that routes clients to the correct file server target.DFS referralA message that directs a client to the correct target in a Windows Distributed File System namespace.DFS referral responseThe network message that tells a client where to go next in a DFS namespace.DGFiPFrance’s Directorate General of Public Finances, the public body responsible for tax administration and related records.DHCPv6The IPv6 version of the Dynamic Host Configuration Protocol, used to provide network configuration to clients.DiagnosisThe process of identifying which component or subsystem is causing a fault.Diagnostic cartridgea cartridge-shaped tool used to check how a console behaves under known conditions.Diagnostic endpointA web-accessible router function used for tests such as Ping or Traceroute.Diagnostic imagingmedical scanning workflows that rely on connected systems and time-sensitive clinical delivery.Diagnostic loggingRecording system events or faults for later analysis.Diagnostic signalan observable clue that can help explain how a device is behaving.Diagnostic toolsHardware or software used to inspect faults and verify system behavior.Dialoguestructured exchange that helps test arguments and refine judgment.DIBDefense Industrial Base, the network of companies supporting defense systems and services.DIBS loopbackThe software loopback path used by SMC-D, where software must enforce limits that hardware may otherwise provide.DICOM Structured ReportingA medical imaging format that links findings and measurements to the source images for later review.Dictation trafficAudio or speech input that an application processes as text or command content.DiffA comparison view that shows changes between two file or repository versions.Differential diagnosisA ranked list of possible conditions that could explain a patient’s symptoms.diffpatchA Gitea feature used to apply patches to repository content.DiffuserA layer that spreads light to create a softer, more even glow.DiffusersA Hugging Face library for building and running diffusion-based AI pipelines.Diffusion modelA generative method that creates outputs through iterative denoising steps.Digital access controlthe system used to separate features between different subscription levels.Digital adaptationThe process of reworking content so it can run on or fit a digital platform.Digital assemblyA corporate meeting conducted online, with participation and decisions managed through digital systems.Digital asset tracingtracking the movement of crypto funds across addresses and services.Digital backdoorAn undocumented access path that may allow unauthorized entry into a system or device.Digital bonda bond issued or managed through digital infrastructure, often with electronic recordkeeping and settlement.Digital busa shared communication pathway used by onboard systems to exchange data.Digital Chart IAPself-regulatory guidance for making advertising and sponsorship visible in digital content.Digital clinica care model that uses software to organize visits, intake, and follow-up.Digital contentOnline material such as articles, posts, pages, and documentation that can be indexed or cited.Digital datainformation stored or transmitted electronically that can be used in a legal proceeding.Digital DelegationThe assignment of authority to software to act on a person's or organization's behalf.Digital dependencyReliance on external systems or services that can influence an organization’s security and continuity.Digital developmentThe expansion of digital services, infrastructure, and access in a way that supports growth.Digital distractioninterruptions from devices or online environments that reduce concentration.Digital documentA document created, stored, or managed in electronic form.Digital enrollmentAn online process used to subscribe to a service or contract.Digital Europe ProgrammeThe EU funding program used to deploy digital technologies and infrastructure at scale.Digital evidence preservationthe process of keeping records intact before they expire or are deleted.Digital executive protectionA defensive approach focused on reducing the exposed personal data of high-value individuals.Digital filmA concept that reimagines a film-like imaging layer in digital form.Digital guidanceOnline tools or interfaces that help users make informed decisions or find services.Digital HEDISNCQA’s broader modernization effort toward more computable, machine-readable quality measures.Digital identity walletA secure app or system designed to hold and selectively share verified identity attributes.Digital inclusionthe ability of people and regions to access and use digital tools effectively.Digital innovationthe use of new technologies and workflows to improve how services are delivered.Digital laborThe use of AI or automation to perform tasks that would otherwise be done by people.Digital licenseA platform-issued entitlement that grants access to software without relying on a physical copy.Digital logicThe binary circuits and operations that form the basis of digital hardware design.Digital longevityThe ability of hardware or software to remain useful over time.Digital loyaltyA customer reward system that uses accounts, apps, or identifiers instead of paper-based stamps.Digital manufacturingProduction methods that rely on software-defined design and machine control.Digital maturityAn organization’s ability to adopt and sustain technology in a controlled, reliable way.Digital monocultureHeavy reliance on one or a few technology ecosystems, which can increase systemic exposure.Digital multiplexA term used in the article for the digital replacement of analog broadcast TV channels.Digital narrationThe way stories, ideas, and information are produced and shared online.Digital operational resilienceThe ability to keep critical services running and recover quickly after cyber or technology disruption.Digital pathologyThe use of scanned slides and software tools to review, store, and analyze tissue samples.Digital perka non-cash benefit delivered and managed through an app or platform.Digital personaA compartmented online identity used for a specific purpose or trust domain.Digital photographyImage capture using electronic sensors and digital files.Digital platformsonline systems that shape how information is distributed, amplified, and consumed.Digital productA software or connected product that may be subject to cybersecurity requirements.Digital repatriationThe practice of moving data or workloads from external cloud environments back under direct organizational control.Digital reputationThe public trust a company builds through search results, reviews, and user feedback.Digital responsibilityThe duty to design and operate online spaces with safety and accountability in mind.Digital rightsLegal and civic protections that apply to data, online services, and automated decision-making.Digital servicean online function delivered to users, such as a portal, workflow, or citizen interface.Digital Services Act (DSA)An EU law that sets duties for online platforms and adds governance tools for exceptional situations.Digital signageNetworked or managed screens used for public messaging, advertising, or information.Digital signature schemeA cryptographic system used to verify authenticity and integrity of data or software.Digital signing certificatea certificate used to verify documents or code; the private key must be protected.Digital sustainabilityThe capacity to maintain digital services over time without degrading quality, support, or value.Digital Therapeutics (DTx)software-based interventions intended to deliver therapeutic benefit, with regulatory status depending on jurisdiction and intended use.Digital toolssoftware and platforms that help people collect, manage, and coordinate information.Digital Transformation (DX)A business-wide shift that uses digital technology to change operations, services, and organizational behavior.Digital Trust LayerThe account, identity, and authorization controls that keep a service and its rewards reliable.Digital upgradeA modification that adds modern electronic capture or workflow capabilities to older equipment.Digital violenceHarm carried out through digital systems, including image-based abuse and coercive sharing.Digital watchA watch that displays time electronically rather than with analog hands.Digital-asset threatA security risk focused on cryptocurrency, wallets, tokens, or related transaction systems.Digital-to-physical workflowA process that turns software instructions into real-world output.Digitally signed installerA software package signed by the publisher so its integrity and origin can be checked.Dimensional accuracyhow closely a copy matches the intended size and shape.Dimensional toleranceThe allowed difference between a printed part's actual size and its intended size.DiplomaticsThe historical discipline that studies how documents establish credibility.Direct answer interfaceA search experience that presents synthesized responses inside the product instead of only listing links.Direct costsExpenses that can be tied immediately to the AI system, such as development or infrastructure.Direct I/OA file access mode that moves data with less page-cache mediation, relying heavily on filesystem correctness.Direct Internet ExposureA condition where a device is reachable from the public internet without a protective access layer.Direct SendAn unauthenticated mail method in Microsoft 365 and Exchange Online, often kept for legacy devices or apps.Direct solar useUsing sunlight for a task without first converting it into electricity.Direct-to-chip coolingA liquid cooling method that removes heat directly from CPUs and GPUs using cold plates.Direct-to-consumer revenuesales made straight to customers, often through digital checkout and support systems.Direct-to-device (D2D)A satellite connectivity model that links ordinary smartphones to space-based networks without special terminals.Direct-to-IP connectionA network connection that targets a raw IP address instead of a domain name.Director of National Intelligence (DNI)The official who coordinates the U.S. intelligence community and helps align priorities across agencies.Directory enumerationbrowsing exposed folders or paths to discover what a server contains.Directory Replication Service Remote ProtocolThe RPC protocol used by domain controllers to exchange Active Directory data.Directory servicea system that stores identity and account information for users.Directory.Read.AllA broad Microsoft Graph permission that can allow read access to directory resources such as users, groups, and apps.Diritto d’autorecopyright law protecting creative works and their authorized use.Dirty shutdownAn unclean database stop caused by power loss or interruption.Disabled by defaulta setting that starts in the off position until the user changes it.Disaggregated servingAn infrastructure approach that separates model stages, such as prefill and decoding, across different resources for scale.DisallineamentiMismatches between records, systems, or payment details that can disrupt processing.Disaster roamingThe ability for a device to use another carrier’s network during emergencies.Disclosure bottleneckA slowdown that happens when report handling capacity cannot keep up with incoming vulnerability findings.Disclosure controlRules and processes that govern when sensitive information can be released publicly.Disclosure dayThe date a vulnerability becomes publicly known through a CVE or coordinated announcement.Disclosure delaythe gap between an incident and public notification, which can slow response.Disclosure pipelineA process that transfers exploit findings to vendors so they can investigate and fix the weakness.Disclosure postureThe amount and type of security or operational information a company makes public.Disclosure readinessthe ability to verify facts, assess exposure, and respond before rumors spread.Disclosure riskThe chance that sensitive information may be exposed or reused.Disclosure threatextortion pressure based on publishing stolen or claimed stolen material.Disclosure thresholdThe point at which an incident may require formal reporting because its effects are considered significant.Disclosure timera timer-like disclosure mechanism meant to increase urgency before more information is released.Disconnected environmentA setup that can operate independently without public-cloud connectivity.Disconnected registryAn internal registry used when a cluster cannot reach upstream services directly.Discontinuationthe decision to stop selling or actively developing a product line.DiscordA centralized chat platform used for servers, channels, and invite-based communities.Discord tokena session credential that can let an attacker impersonate an account.Discount effectthe short-term lift in interest created by a promotional price.Discovery fileslegal case materials collected for proceedings and often highly sensitive.Discovery responseA network reply used by devices and apps to find each other on a local network.Discrete componentAn individual electronic part used in a circuit, such as a resistor or transistor.Disguised listeningBehavior that tries to make automated or suspicious plays appear like normal user activity.Disinformation campaignA coordinated effort to spread false or misleading information to influence beliefs or behavior.Disk encryptionA control that helps protect stored data if a device is lost or stolen.Disk-image attachmentA file container that can hold additional files and may appear less suspicious than a standard document.DiskANNMicrosoft’s vector indexing approach for fast approximate nearest-neighbor search in SQL-based AI retrieval.Dispatch databaseA system used to manage routing, scheduling, and shipment activity.Dispatch systemsoperational platforms used to route emergency calls and coordinate response services.Dispatcher serviceA privileged background component that brokers sensitive system actions.DispatchingThe process of deciding how and when electricity generation and storage are used.Displacementa change in position from one point to another.Displacement signalEvidence that an AI system removed a human step from a workflow or handed off less manual work.Display boardA circuit board built to show information on a screen or panel.Display calibrationSettings that help a screen render color and brightness as expected.Display moduleA self-contained screen component that can be integrated into custom hardware.Display workflowThe chain of steps used to prepare and send content to a screen.Disposable emaila temporary address meant for short-term use.Disposable infrastructureWeb resources that can be replaced quickly when a campaign wants to change surface details.DisposalThe process of discarding or routing waste into an accepted handling stream.DisruptionA defensive action that reduces an attacker’s ability to communicate or operate.Distance controlWorkplace monitoring that can observe activity without being physically present.Distinctive characterThe ability of a sign to identify one business and separate it from competitors.Distinguished Name (DN)The unique LDAP identifier for a directory entry, including administrative accounts.Distressed assetsbusinesses or property under financial stress that may need careful control changes.Distributed access layerA network of local entry points that provides access to central services without moving the core authority.Distributed adversaryan attacker model spread across systems or locations to make disruption harder.Distributed antenna system (DAS)A venue coverage system that helps extend cellular signal inside large or crowded buildings.Distributed C2A setup that spreads control traffic across multiple servers to reduce visibility.Distributed denial-of-serviceAn attack that overwhelms a target with traffic to make it unavailable.Distributed energy resources (DER)Small or medium energy assets, such as solar plants and storage systems, that interact with the grid.Distributed Energy Resources (DERs)Small-scale energy assets, such as solar arrays or batteries, connected closer to the point of use.Distributed inferenceRunning one AI model across multiple devices so they share the workload instead of using a single machine.Distributed infrastructureA setup where services and computing resources are spread across multiple locations.Distributed SQLA database architecture that spreads data and transactions across multiple nodes while preserving consistency and resilience.Distributed TracingA way to follow one request as it moves through multiple services and dependencies.Distributed worka work model where teams operate from multiple locations instead of one central office.Distributed workforceUsers working across offices, homes, and mobile environments that need consistent policy enforcement.Distribution activityThe criminal process of spreading malware or related payloads through intermediary channels.Distribution EdgeThe operational boundary where distribution assets and connected field systems meet broader utility networks.Distribution eventA scheduled release where content is delivered to viewers through one or more platforms.Distribution filethe packaged release artifact that installation tools download from a registry.Distribution modelthe way software is delivered and monetized through a platform or marketplace.Distribution trust boundarythe point where users depend on a platform to verify software legitimacy.District HeatingA centralized network that distributes heat to multiple buildings through insulated pipes.DIYShort for do it yourself, referring to projects built by individuals rather than mass-market vendors.DIY biofuelA home-built approach to producing fuel rather than buying a finished product.DIY deviceA self-built gadget assembled outside a commercial product line.DLCdownloadable content added after the original release.DLL loadingA process where one program loads a library file, which malware can abuse for stealth or execution.dlopen()A Unix/Linux function that loads shared libraries at runtime, often used for plugins and modules.DLTdistributed ledger technology, a system for maintaining records across multiple nodes instead of one central database.DLT Pilot Regimea regulatory framework for testing market infrastructure based on distributed ledger technology.DMDCDefense Manpower Data Center, a Department of Defense system tied to personnel and eligibility records.DNA editingdirect change to genetic material at its source.DNE driverA Citrix network driver whose presence or absence can change exposure in some client deployments.DNS (Domain Name System)The naming system that turns domain names into IP addresses for network connections.DNS A-recordA DNS record that maps a domain to an IPv4 address; here, responses are used as a control signal.DNS C2Command-and-control traffic carried through DNS requests and responses instead of more obvious web channels.DNS collisionA naming problem where a placeholder or fictional name matches a real address or domain and triggers live network behavior.DNS controlsPolicies that govern name resolution, often used to block or steer requests away from risky destinations.DNS exfiltrationData theft that hides information inside DNS queries or subdomains.DNS loggingThe retention of DNS query data for detection, investigation, and hunting.DNS lookupThe process of resolving a domain name into an IP address before a connection is made.DNS resolverthe service that translates a domain name into an IP address.DNS spoofingSending forged DNS answers so a host reaches the wrong destination.DNS trafficNetwork lookups used to resolve domain names, which can also carry hidden command-and-control data.DNS tunnelingA covert channel that hides commands or data inside DNS traffic.DNS-based blockingA filter that can stop requests to known ad, tracker, or malware domains.DNS-over-HTTPS (DoH)A transport that carries DNS traffic over HTTPS.DNSKEYA DNS record type used by DNSSEC to publish public keys for signature verification.Do-it-yourself buildA custom project assembled outside a commercial product line.DockerA container platform used to package and run applications in isolated environments.docker cpA Docker command that copies files between a container and the host filesystem.Docker EngineThe core software that runs and manages containers on a host.Docker escapeA breakout path where code inside a container reaches the host or other workloads.Docker imageA packaged container artifact used to run software consistently across systems.Docker registryA service that stores and distributes container images through repositories, manifests, and blobs.Docker socketA control interface for Docker that can become dangerous if exposed on a host.DOCTYPEAn HTML declaration that tells a parser which document type rules to apply.Document accessA legal right to view or obtain copies of administrative records already held by a public body.Document automationTechnology that classifies, routes, and processes documents with minimal manual handling.Document DatabaseA database that stores information as structured documents rather than rows and columns.Document exposureUnauthorized disclosure of internal files that can increase operational and reputational risk.Document InspectorA Microsoft Office tool used to find and remove hidden data and other non-obvious document content.Document navigationthe tools that help users move through a file quickly.Document portalA web system used to exchange files and sensitive records.Document provenanceThe history and trustworthiness of a file, including where it came from and what it may contain.Document repositorya storage area for contracts, IDs, or internal records that can attract attackers.Document segregationseparating sensitive files through access controls and need-to-know limits.Document triageThe process of sorting and reviewing uploaded files to identify useful or sensitive information.Document-management systemSoftware used to store, organize, and route electronic records.Document-serving endpointA web path that delivers stored files, images, or documents to users.DocumentarloThe act of recording the steps, decisions, and evidence that explain how an invention was formed.Documentary proofRecords that help demonstrate how a system was controlled and supervised.Documentation build processThe workflow that generates package documentation and may touch untrusted package content.Documentation driftThe gap that grows when system records no longer match how technology is actually used.Documentation WorkerAn automated process that generates or handles package documentation and may process package-controlled content.DocumentDB snapshotA backup image of an Amazon DocumentDB cluster used for restore or migration tasks.Documento commercialeTransaction document that should be issued at the time of sale.Documento informaticoAn electronic record that can carry legal and operational significance.DOM sanitizationThe process of removing dangerous HTML or attributes before content is inserted into a page.DOM sinkA browser-side code path where unsafe input can become executable content.DOM.sanitize()The MapLibre sanitization helper implicated in the vulnerability.dom0The privileged control domain in Xen that manages guests and handles key host-side functions.Domain admina highly privileged account that can control many settings across a Windows domain.Domain admin-equivalent privilegesaccess level that can alter core identity, policy, and administration controls.Domain and account-related reliefLegal or technical actions aimed at limiting access to domains or accounts associated with abuse.Domain blockingA measure that prevents users from reaching a domain through network or registry controls.Domain churnRapid creation or rotation of domains that can complicate tracking and filtering.Domain collisionA naming overlap where a test or fictional domain matches a real registered domain.Domain compromiseA condition in which an attacker reaches a level of control that can affect a whole enterprise identity domain.Domain controlA high-privilege state where an attacker can influence authentication and administration across a Windows domain.Domain ExpertA person who understands the edge cases, policy details, and process context behind a business function.Domain groundingTying AI outputs to authoritative references so answers stay closer to verified facts.Domain hijackUnauthorized takeover or redirection of domain control.Domain impersonationThe use of a domain name that closely mimics a trusted brand or product to mislead users.Domain joinThe state in which a Windows device is enrolled in a directory domain and uses it for enterprise authentication.Domain parkingA function that points an extra domain name to an existing site as an alias.Domain scopeThe host range over which a cookie may be sent, which can broaden its reach across related subdomains.Domain validationThe process certificate issuers use to confirm control over a domain.Domain-admin-equivalent rightsPrivileged access level that can let an intruder manage core domain functions.Domain-joined workstationA computer managed by an enterprise domain, often subject to centralized policy and monitoring.Domain-level accessbroad administrative control over an environment or account domain.Domain-level compromiseA compromise affecting an organization’s central identity or directory layer, which can expand attacker reach.Domestic sourcingBuying inputs from U.S. sources, often to meet policy or procurement requirements.Donor metadataidentifying details attached to a contribution, such as an email address or payment record.DOOMA classic first-person shooter often used as a benchmark for unusual technical projects.DoomscrollingRepeatedly consuming negative content in a hard-to-stop loop.Doorway pageA page built to rank for search queries and send visitors elsewhere, often used in spam and fraud campaigns.Doppler effectA change in observed frequency caused by motion between source and listener.DorkingSearch-engine querying with special operators to uncover specific publicly reachable content.Dormant Emergency Bank (DEB)a standby concept intended for emergency use.Dormant ruleA policy entry that exists but rarely or never matches traffic.DoS amplificationA pattern where a small request stream creates a much larger downstream burden.Dossier sanitarioa structured health record used to support patient care and clinical continuity.Dot matrix-like effectAn image built from visible individual points rather than continuous ink.Dottoratoadvanced research training that can create long-term value when institutions use it well.Double freeA memory corruption bug where the same memory is released twice, sometimes creating a path to exploitation.DowngradeA fallback to a weaker protocol or network mode that can increase exposure to interception.Download codeA one-time token used to unlock digital software or media.Download lineageThe chain of events showing where a file came from, which processes touched it, and how it reached the endpoint.Downstream AuthorizationSecurity checks enforced by the system that receives an action, not by the AI model itself.Downstream clusterA Kubernetes cluster managed through a higher-level platform such as Rancher.Downstream compromisesuspected impact on connected systems or partners that still requires verification.Downstream dependencyA product or tool that uses a third-party component and may inherit its vulnerabilities until it updates.Downstream effectsSecondary disruptions that may follow if core services, credentials, or linked systems are impacted.Downstream enrichmentAdditional analysis added to a vulnerability record after initial publication, often for defender use.Downstream environmentSystems that depend on an upstream provider, product, or service.Downstream environmentsconnected systems that may be affected after an incident.Downstream fraudmisuse of stolen data for impersonation, phishing, or financial abuse.Downstream integrityThe trust that later systems place in software artifacts produced earlier in the delivery chain.Downstream modelA later AI component in a pipeline that processes content after an earlier screening step.Downstream riskpossible harm that can extend to connected customers or services.Downstream serviceA connected system that may be affected when a core service is disrupted.Downstream systemA connected service or tool that may be affected after an upstream security event.Downtime proceduresPreplanned manual processes used when digital systems are unavailable.DPIDossier patient informatisé, the centralized electronic system used to manage patient records in French healthcare.DragThe resistance an object experiences as it moves through air or another fluid.DRAM controllerThe hardware logic that manages memory access and helps translate addresses before they reach system RAM.DRCDesign Rule Check, a validation step that flags layout violations before fabrication.Drift monitoringTracking whether model behavior changes over time in ways that affect quality or reliability.Driver abuseMisuse of a legitimate driver, often to weaken defenses or gain privileged access.Driver componentA software module that runs with elevated trust and can interact closely with the operating system.Driver installationThe process of adding a device driver so Windows can communicate with hardware.Driver installation workflowThe sequence Windows uses to validate, load, and configure device drivers.Driver regressionA change in driver behavior that introduces new bugs or performance loss.Driver-assistance systemSoftware that supports driving tasks but still requires human attention and intervention.DRMDigital Rights Management, controls that limit how digital content can be copied, launched, or shared.Dronean unmanned aircraft controlled remotely or with limited onboard automation.Drone attackThe use of unmanned aircraft for surveillance, disruption, or hostile action.Drone wallA policy term for layered counter-drone defenses built from sensors, tracking, and neutralization capabilities.Drop-inA WordPress file that loads early and can alter core behavior before normal plugins run.Dropper appA delivery app designed to install or launch a separate malicious payload.Drosophila melanogasterThe common fruit fly used widely in biological research.Drug discoverythe process of finding and developing new medicines.Drug Master Filetechnical dossier that supports the quality and manufacturing profile of a medicine.DRY"Don't Repeat Yourself" - a rule that discourages duplicated logic so changes stay consistent.Dry coolingA water-light method that uses air instead of water to remove waste heat.DRY principle"Don't Repeat Yourself", a design rule that reduces duplicated knowledge in code and security logic.DS-Replication-Get-Changes-AllAn extended right that can allow replication of secret domain data if granted too broadly.DSLRDigital single-lens reflex camera, a camera type with internal optical and electronic parts that can fail in different ways.DSM DirectiveAn EU copyright directive that includes text-and-data-mining rules and rights reservation mechanisms.DSNData Source Name, a connection profile that stores server details and login settings for database access.DSPMData Security Posture Management, a method for finding and assessing sensitive data risk.DTDDocument Type Definition, an XML feature that can define entities and becomes risky when external entity resolution is allowed.Dual Approvalrequiring two independent sign-offs before sensitive actions proceed.Dual AuthorizationA control that requires two separate approvals before sensitive financial actions can be completed.Dual digital signaturea transaction control that requires two authorized approvals.Dual-fuelA commercial bundle that combines electricity and gas under one plan.Dual-hop architectureA design that splits traffic across two relays so one service does not know both source and destination.Dual-pane interfaceA layout that shows two locations at once to simplify moving files.Dual-stack networkinga setup where IPv4 and IPv6 operate side by side on the same host or network.Dual-use capabilitiesFeatures that can support both legitimate defense work and harmful abuse.Dual-use infrastructureCivilian assets such as ports, rail lines, and bridges that also support defense operations.Dual-use platformA system that supports legitimate activity but can also be repurposed for abuse.Dual-use systemA tool that can support both legitimate work and potentially harmful misuse.Duplicative reportingMultiple notifications that ask for similar information under different rules or deadlines.DurabilityThe ability of a material or part to withstand wear, stress, and environmental exposure over time.Durable ObjectsCloudflare’s stateful coordination primitive for building applications that need shared, persistent state.Durable policya long-term approach that keeps working after emergency or extraordinary funding ends.Duress passworda credential intended to signal coercion or trigger a special response during authentication.DUV lithographyA mature semiconductor manufacturing process that uses deep ultraviolet light for chip patterning.DVIA digital video interface used to send display signals to monitors.Dwelling timeThe period an attacker remains inside a network before detection.DWGa file format commonly used for technical and design drawings.DX PromotersEmployees who help spread digital practices and support adoption across teams and departments.Dynamic Address ReconfigurationAn SCTP feature that can add, remove, or change addresses during an association.Dynamic API ResolutionA technique where malware looks up system functions at runtime instead of embedding them plainly.Dynamic Class LoadingA runtime code-loading method that can become risky when inputs are not tightly controlled.Dynamic contentMedia or features that can change after release through updates or remote delivery.Dynamic forwardingAn SSH mode that can direct traffic to different destinations within one session.Dynamic Method Invocation (DMI)A Struts feature that allows requests to choose which method gets invoked, increasing attack surface.Dynamic model routingAutomatic selection of an AI model for each request based on policy signals such as cost, latency, and performance.Dynamic policiesRules that can adapt to context, role, or risk instead of staying fixed for every situation.Dynamic rangeThe span between the weakest and strongest signals a system can handle reliably.Dynamic segmentationThe practice of dividing networks or assets into smaller trust zones to limit lateral movement and reduce blast radius.E-bike conversionThe modification of a bicycle to add electric assistance.E-commerceOnline sales functionality that typically requires extra operational care.E-commerce fragmentationwhen online buying is split across different rules, regions, or platforms.E-GMPAn electric vehicle platform architecture used as the context for the reported failures.E-reportingAutomated or near-real-time submission of transaction data for compliance.E-wasteDiscarded electronic equipment that may still be functional or analyzable.E.164The international numbering format used for telephone numbers in global networks.Early adoptersThe first users willing to test a new approach, absorb friction, and help refine it for others.Early interventionSupport introduced before barriers become deeply rooted.Early musicmusic from earlier historical periods, often performed with period-aware technique.Early-bird registrationan advance signup period that usually offers lower-cost entry.Early-stage capitalInitial funding used to build products, hire teams, and reach market validation.Earpiece outputrouting audio through the phone’s in-ear speaker instead of the loudspeaker.Earth BerberokaA source-reported threat actor or cluster linked to online-gambling-related cyber activity.Earth Overshoot Daythe date when humanity’s yearly demand exceeds the planet’s capacity to regenerate resources for that year.East-west movementLateral traffic that moves between systems inside a network, rather than entering from outside.Easter eggA hidden feature or message placed in software for surprise or amusement.EasyMeshA Wi-Fi mesh feature that coordinates multiple access points through a central controller.EC2Amazon Elastic Compute Cloud, which provides customer-controlled virtual machines.ECCCThe EU cybersecurity competence centre associated with cyber capacity-building and the Digital Europe funding framework.ECDSAAn elliptic-curve digital signature algorithm used to authenticate SSH servers and users.ECHEncrypted Client Hello, a TLS feature designed to hide more connection setup details.Echo chambera feedback loop where people mostly encounter views similar to their own.EcholocationUsing reflected sound to locate objects and estimate position.Ecografoan ultrasound machine used in medical diagnostics.Ecological deficitthe gap between what natural systems can renew and what people consume.Economic process modelingA method for mapping work steps to their financial and operational effects.Economic returnThe value a deployment generates relative to its cost, including labor, maintenance, and uptime.Economic rightsrights to receive value, income, or other financial benefits.ECOSThe operating system used on HPE EdgeConnect gateways for device-level management and networking functions.Ecosistema distribuitoa model where people, services, and data are spread across multiple connected environments.EcosystemThe network of investors, talent, institutions, and companies that shape growth in a sector.ECSP RegulationEU rules governing crowdfunding service providers and related online investment activity.ECSPRThe regulation referenced in the article as widening access to European business-lending platforms.EDBThe Exchange database file that stores mailbox data.EDGARThe SEC system for collecting and distributing public corporate filings and related data.Edge AI applianceA local device that performs AI processing close to the data source instead of sending everything to a cloud service.Edge blockingstopping malicious traffic near the delivery layer before it reaches the application.Edge cachingStoring content closer to viewers to reduce latency and ease pressure on origin servers.Edge conditionsunusual states where a system may behave differently than during normal operation.Edge deploymentRunning AI on local devices or nearby systems instead of relying only on centralized cloud services.Edge GatewayA device that sits at the network boundary and handles traffic, access, or routing functions.Edge securityProtections applied at the network perimeter, where external traffic first enters.Edge security solutionSecurity software or appliances placed near network boundaries to inspect traffic and enforce policy.Edge softwareInfrastructure that sits at the boundary between users and internal systems, such as web gateways and proxies.EDI archiveselectronic data interchange records that can support logistics workflows.eDiscoveryLegal and compliance workflows used to preserve, search, and produce digital records.Edit localityThe ability to change only a targeted part of an image without altering the rest.Edit modeThe notebook state used for opening, modifying, and interacting with notebook content.Edit throttlingA control that limits how quickly users or bots can modify a wiki or similar platform.Editor extensionA plugin that adds functions to a code editor or IDE.Editor-in-chiefthe senior editor responsible for overall editorial direction and final judgment.Editorial boundaryThe line that defines which topics a publication usually includes or excludes.Editorial contextThe commercial or organizational setting that can influence how content is presented.Editorial continuitythe preservation of consistent standards during a leadership change.Editorial controlA human review process with final responsibility for publication decisions and content handling.Editorial handoffa transition in leadership from one editor to another.Editorial signalA publication cue that something in its format, scope, or direction may be changing.Editorial-style videoa produced video format that relies on structured narration, scene changes, and visual editing to explain a topic.Educational outcomesthe learning results used to assess whether an intervention worked.Educational povertyA condition in which learners lack the resources and support needed to reach their full educational potential.Educational relationshipsThe trust and interaction between students, teachers, and families in learning.Educational toyA learning device designed to teach concepts through hands-on use.EEPROMNon-volatile memory that stores firmware and keeps it available after power-off.Effect presetsPreconfigured sound settings that shape how audio is processed.Effective key sizeA measure of how hard a cryptographic system is to break, based on the best known attack cost rather than just the nominal key length.Effective strengththe practical security level an algorithm provides against attack.EfficacyHow well something works under real conditions.EffortA reasoning setting that can change how deeply the model works on a task.eGRCElectronic governance, risk, and compliance tooling used to track controls, obligations, and incident handling.Egress allowlistingA control that limits which external services a device can contact.Egress pricingThe fee charged when data leaves a cloud provider’s network or moves across certain cloud boundaries.EHR scanselectronic health record images that may contain sensitive medical information.eIDElectronic identity used to prove who a user is during online authentication.eIMAn IoT connectivity-related component mentioned alongside eSIM in the reported solution; the excerpt does not specify its exact technical role.eInkA low-power display technology that keeps text visible without constant refresh.eInvoicingStandardized electronic invoicing that supports automated processing and verification.EIOPAThe European insurance and pensions supervisor that issues sector guidance and regulatory context.ELAMEarly Launch Anti-Malware, a Windows mechanism designed to load anti-malware before all non-Microsoft boot drivers.Elastic StackThe product family built around Elasticsearch and Kibana, often used for search, logging, and analytics.ElasticsearchThe search and analytics engine that stores and processes data in the Elastic Stack.Election infrastructurethe digital systems that support election administration and related operations.Electric gridThe interconnected system that generates, transmits, and distributes electricity, increasingly managed through digital controls.Electricity demandThe amount of power consumers and industries need from the grid at a given time.Electroforminga manufacturing process used to create precision metal forms.Electromagnetic attackA technique that uses radio or other EM signals to influence or extract information from hardware.Electromagnetic radiationEnergy that travels as waves and can interact with matter.Electromechanical InfrastructureThe physical support systems in a data center, including power, cooling and related hardware.Electromechanical TVa television system that uses mechanical parts for image scanning or display.ElectronA framework for building desktop applications with web technologies such as JavaScript, HTML, and CSS.Electronic attestations of attributes (EAAs)Electronic credentials that confirm specific attributes about a person or organisation.Electronic Case-Processing SystemA digital platform used by courts to manage filings, deadlines, and case workflows.Electronic identity card (eID)a government-issued identity token used for digital authentication and signing.Electronic instrumentA musical device that uses electronic components to produce or shape sound.Electronic lab notebooksdigital research logs that can contain experiments, methods, and proprietary findings.Electronic paperA screen medium intended to look and behave somewhat like a physical page.Electronic viewfindera built-in eye-level display that shows the live camera feed.Electronics designThe planning and arrangement of components inside electronic devices.Element ProA workplace messaging client designed for organizations that want stronger administrative control and deployment options.Elenco fornitorithe supplier list used to determine which vendors or services are eligible within the program.Elevated PrivilegesHigher permissions than a normal user, often with administrative or root-level reach.Elevation of privilege (EoP)A flaw that can let an attacker gain permissions beyond what should be allowed.ELF implantA malicious Linux executable in ELF format used to maintain control or manipulate server behavior.Eligibility termsthe conditions that determine who can receive a promotion or bonus.Eligibility WorkflowThe business and technical steps used to decide whether a person qualifies for a specific category, service, or event.Eligible data breachAn incident that triggers notification duties under Australia’s NDB scheme because serious harm is likely.Eligible expensescosts that match the program’s allowed categories and can be funded.ELIZAA classic early chatbot that made users feel understood through scripted conversational patterns.Email accountA mailbox used for sending, receiving, and storing messages, attachments, and contact history.Email addressA digital identifier that can be abused for phishing, impersonation, and targeting.Email address targetingThe use of a mailing list or address set to deliver a message campaign at scale.Email archivestored mailbox content that can reveal internal contacts and sensitive context.Email assistantAn AI tool that summarizes, drafts, or triages email content for a user.Email clientsoftware or a web app used to read, send, and manage email.Email compromiseUnauthorized access to an email account that can be used as a foothold for further abuse.Email exposureclaimed compromise of mailbox or address data that can fuel fraud.Email extractionalleged removal of email-related data during an intrusion.Email gatewayA perimeter system that filters, inspects, and routes inbound and outbound mail.Email leakexposure of email addresses that can support phishing or impersonation.Email leakageexposure of email records that may support phishing or impersonation.Email parsingThe process of reading and interpreting email content, headers, and structure so software can act on the message.Email parsing logicThe code that reads and interprets the structure of incoming email messages.Email propagationMalware spread that relies on mail systems to send copies to other users, often through contacts or address books.Email Protection Gateway (EPG)A gateway component designed to control how email is handled between external and internal environments.Email securityControls that reduce abuse of email-based entry points.Email service provider (ESP)A platform that sends bulk or automated email on behalf of organizations.Email SpoofingThe practice of making a message appear to come from a trusted sender when it does not.Email-security platformSoftware that filters, inspects, and controls email traffic to reduce phishing and malware risk.Embedded boarda compact circuit board designed to perform a specific task.Embedded browserA browser engine built into another application for displaying web content.Embedded computerA computing system built into another device or object.Embedded controllerA specialized computer built into equipment to manage a specific function.Embedded designHardware built for a narrow, specific task rather than general-purpose computing.Embedded developmentbuilding software for dedicated devices with specific hardware constraints.Embedded environmenta computing setup built into a device with limited memory, power, or processing headroom.Embedded fontA font file included inside a document, often used for faithful rendering but harder to parse safely.Embedded GenAIGenerative AI built directly into workflows or applications instead of standing alone as a chatbot.Embedded HTTP ServerA web server built into a device or application to handle local or remote requests.Embedded iframeA framed webpage loaded inside another page, sometimes used as a cross-origin attack surface.Embedded printingPrinting material into or onto another structure rather than producing a standalone object.Embedded projecta build that combines software and hardware for a dedicated function.Embedded resourceA bundled file, domain reference, library, or other asset included inside an app package.Embedded SDKShared software building blocks that manufacturers integrate into routers, access points, and other appliances.Embedded serviceA service bundled inside an application, often for testing or convenience.Embedded systemsDedicated computing systems built into devices or machinery to perform specific functions.Embedded videoA video included within an article or page to show a project or process.Embedding ModelA model that turns text into vectors so systems can compare meaning and cluster similar prompts.Emergency accessthe ability to reach or operate an exit quickly during urgent conditions.Emergency patchAn out-of-band update released to reduce urgent security exposure.Emergency preparednessthe ability to respond quickly and effectively to disruptive events.Emergency Response Plan (ERP)A documented plan for responding to incidents and restoring critical operations quickly and safely.Emergency services routingThe process that directs emergency calls to the correct public safety destination.EMMEnterprise Mobility Management, the software layer used to enroll, configure, and govern mobile devices in organizations.Emotion inferenceAutomated estimation of mood or emotional state from signals like facial movement or voice tone.Emotion recognitionA system that tries to infer emotional state or intent from observed signals rather than direct measurement.Employee adoptionThe point at which users understand, trust, and consistently use a new tool in daily work.Employee ambassadorsStaff members who communicate on behalf of a brand, formally or informally.Employee data breachalleged exposure involving personnel or HR-related records.Employee diversity monitoringThe collection of workforce equality data to measure representation and support inclusion efforts.Employee recordspersonal HR data that can increase fraud and privacy risk.Employee-based subscriptionA licensing model where pricing is tied to the number of employees rather than only to installations or users.Employer brandingThe way an organization presents itself to attract and retain talent.EMSelectronic manufacturing services, a business model that often depends on tightly coordinated operations.Emulated USB deviceA software-created device profile that mimics a physical USB peripheral.EMV KernelReader-side software that handles card communication and applies payment rules during a transaction.EMVCo TapToMobileThe industry term for contactless payment acceptance on mobile devices.EN 301 549The European technical standard for accessibility in information and communication technology products and services.Enclosure geometrythe physical shape and internal layout of a case, which affects airflow and heat removal.EncodingThe technical process that makes a language digitally usable by representing its script and structure for computers.Encrypted C2Control traffic protected by encryption, which can make network inspection and detection harder.Encrypted DNSDNS traffic sent through protocols like DoH or DoT to reduce interception or tampering.Encrypted emailA message protected so its contents are harder for standard tools to inspect.Encrypted moduleA payload packaged in encrypted form so it is harder to inspect before execution.Encrypted system backupA backup protected so stored data and secrets are harder to read if the file is exposed.Encrypted TCP exchangesSmall network transfers over TCP that are encrypted to reduce visibility.Encrypted transmissionData sent over a protected channel to reduce inspection and frustrate network detection.Encrypted web sessionA browser connection protected so outsiders cannot read the page content in transit.EncryptInterceptorA Tomcat component that helps protect session data exchanged between cluster nodes.Encryption key managementThe processes used to create, store, rotate, and revoke cryptographic keys that protect sensitive data.Encryption key materialSensitive secret data used to protect files or communications; if exposed, it can increase downstream risk.Encryption stagethe point at which files are locked and the extortion becomes visible.Encryptionless extortionpressure tactics that disrupt operations without encrypting files on disk.End of servicingthe point when a software release stops receiving regular updates and security fixes.End of updatesThe point after which a specific version no longer receives monthly security and quality fixes.End user verificationchecks used to confirm who will ultimately receive and use a product.End-of-life softwareSoftware that is no longer maintained or patched by the vendor.End-of-life supportThe stage where a product no longer receives vendor security updates.End-of-supportA vendor deadline after which no new security fixes or updates are provided.End-to-end processA full operating chain that runs from input and planning through execution, review, and delivery.End-user documentationpaperwork that identifies the intended recipient and use of shipped hardware.Endpoint activitydevice-level events that can help reveal unusual access or behavior.Endpoint AnalysisA posture-checking process that evaluates device security before access is granted.Endpoint baselineThe expected software and configuration state used to judge unusual changes.Endpoint ConfigurationSettings that control where an application sends or receives network data.Endpoint connectorAgent software installed on a device to enforce and connect endpoint security controls.Endpoint custodyThe chain of control over a device, including who receives it, where it is stored, and who can use it.Endpoint defensesecurity software designed to detect or block malicious activity on a device.Endpoint detection and preventionSecurity controls that monitor endpoint devices and related systems for suspicious activity and attempted compromise.Endpoint DLPControls that help limit sensitive data movement from endpoints.Endpoint executionThe point at which malicious code starts running on a user’s device and can begin theft.Endpoint governancerules and controls used to keep devices in a managed state.Endpoint hardeningSecurity controls applied to laptops, desktops, and other user devices to reduce compromise risk.Endpoint huntingThe process of searching endpoint data for signs of malicious activity or compromise.Endpoint integrityThe assurance that a device is running only authorized software and has not been tampered with.Endpoint OSThe operating system running on a user device that connects to enterprise services.Endpoint postureThe security state of a device, including compliance, patching, and risk signals used in access decisions.Endpoint privacyProtections that limit sensitive data collection on a user’s device.Endpoint Privilege ManagementSoftware that controls privilege elevation and application permissions on endpoint devices.Endpoint recoveryThe process of restoring a managed device after failure, reset, or loss.Endpoint remediationThe steps used to remove malware and restore a device to a safe state.Endpoint responseDetection and containment capability focused on devices such as workstations and servers.Endpoint riskThe possibility that a user’s device or account is compromised, bypassing protections in the cloud.Endpoint scanA security check on a device used to detect suspicious or malicious items.Endpoint security evasionactions meant to reduce the chance that security tools detect hostile activity.Endpoint security stackThe collection of tools that protect a device from malware and abuse.Endpoint stackThe combined layers of operating system, drivers, apps, and device software on a PC.Energy attribute certificateA tradable record that links electricity consumption to specific generation attributes.Energy componentThe part of a bill tied to the supply price of electricity itself.Energy constraintslimits tied to power availability, grid capacity, and consumption rules.Energy evaluationa method for estimating resource use under different conditions.Energy harvestingCapturing power from the environment, such as sunlight, to run electronic equipment.Energy intensityThe amount of energy needed to produce one unit of output.Energy storageSystems that store electricity for later use, helping balance supply and demand.Energy storage systemEquipment that stores electricity for later use, helping balance supply and demand.Energy-sector targeta company whose operations can make cyber incidents especially sensitive.Enforcement controlA technical rule or mechanism that stops or limits actions when policy is exceeded.Enforcement lista published list used to operationalize policy action against named targets.Engine updateA Defender update track that refreshes the scanning engine or core protection logic.Engineering datatechnical files, drawings, and specifications used to design and build hardware.Engineering hotfixA targeted vendor patch released to correct a specific vulnerability before a broader software update.Engineering InterfaceA management path used to configure, program, or update a PLC.Engineering SoftwareAuthorized tools used to configure, maintain, or program industrial controllers.Engineering trade-offthe balancing of benefits and constraints in a design.Engineering tradeoffA design choice that balances speed, reliability, cost, and complexity.Engineering velocityThe speed at which a team can move a safe change from idea to production.ENISA reporting workflowThe EU reporting path used for CRA-related vulnerability and incident notifications from the operational start date.Enrollment datarecords tied to student registration, status, and study administration.Enrollment flowthe sequence of online steps a user follows to buy and activate a service.EnrolmentThe process of collecting and validating identity data for issuance of a credential.Enterprise accessUsable entry into a business environment that criminals can resell or reuse.Enterprise Access ModelA privileged access design that separates high-trust systems from lower-trust environments.Enterprise agentAn AI system designed to perform business workflows with access to company tools and data.Enterprise AgreementA volume licensing contract that sets acquisition and usage terms, and in some cases may be relevant to transfer or resale disputes.Enterprise AI securityThe practice of protecting AI systems, their data, and their integrations inside a business environment.Enterprise ATT&CKThe ATT&CK domain focused on enterprise IT environments such as endpoints, identity systems, and servers.Enterprise attack surfaceThe collection of systems, users, and services that can be targeted by attackers.Enterprise authenticationThe process of proving a user or device is allowed onto a business network.Enterprise browserA managed or hardened browser designed to enforce security policy during web-based work.Enterprise browser managementCentralized administration of browser settings, updates, and restrictions across an organization.Enterprise CAA certificate authority integrated with Active Directory and used for enterprise certificate issuance.Enterprise dataBusiness information used inside corporate systems, often sensitive and tightly governed.Enterprise footholda working entry point inside an organization.Enterprise integrationThe process of connecting AI systems to business applications, data sources, and workflows.Enterprise pickA product chosen for larger organizations that need administrative control and scale.Enterprise security firmA company that sells security tools or services to organizations.Enterprise security programThe policies, controls, and processes used to manage organizational security risk.Enterprise spendingPaid usage tracked across business accounts, often used as a proxy for adoption.Enterprise-gradeBuilt for business or large-scale environments where reliability and manageability matter.Enterprise-managed authorizationA model where an organization centrally controls connector access instead of relying on each user.Enterprise-scalea deployment model designed to handle large, complex, high-volume environments.Entitlement bypassUnauthorized access to features or resources by evading permission checks.Entitlement managementthe process of controlling which services or benefits a user is allowed to access.Entitlement reviewA check of existing permissions to confirm they are still necessary and appropriate.Entitlement sprawlThe uncontrolled growth of permissions across cloud systems, making access harder to govern.Entry barriersThe cost, complexity, and effort required to start and grow a business.Entry pointThe code path a Node.js package exposes for import or execution, often defined by main or exports.Entry-level compressionA hiring pattern where the number of first-job technical roles shrinks even as advanced demand remains.Entry-level gearEquipment that offers a lower-cost way to start a hobby or practice a skill.Entry/Exit System (EES)An EU border system that records travel and biometric data for non-EU short-stay travelers.ENUMA system that maps E.164 telephone numbers into DNS names, which can then be resolved to URIs for call setup.Envelope senderThe MAIL FROM identity used during SMTP delivery, separate from the visible From address in the message header.Environment checksTests malware uses to decide whether it is running in a real target environment.Environment fileA local configuration file, often named .env, that may store secrets such as API keys or tokens.Environment mappingBuilding context about devices, software, identities, and posture to support security decisions.Environment segmentationThe practice of separating test, development, and production systems so access cannot spill across boundaries.Environment-gated payloadMalicious code that activates only under specific conditions, such as a target host, setting, or backend path.Environmental claimA statement about the environmental impact, benefit, or footprint of a product or organization.Environmental persistenceThe tendency of a hazard to remain influential for years or decades.Environmental simulationA digital method for testing conditions like crowding, heat, or airflow before building.Environmental stressWear or malfunction caused by conditions such as heat, moisture, or sand.EnzymeA biological catalyst that speeds up a specific chemical reaction.EO/IRElectro-optical and infrared sensing used to visually or thermally detect objects in complex environments.EPCengineering, procurement, and construction work for large industrial projects.Ephemeral CredentialsShort-lived authentication credentials created for a single session or narrow use case.Ephemeral DiskTemporary disk storage intended to disappear or be recycled after a workload ends.Ephemeral environmentsTemporary test environments created for a specific change and torn down after use.Ephemeral runnerA temporary CI worker that is created for one job and then discarded to reduce residue and secret persistence.EpicA large work item that groups related stories and can evolve as the team learns.Epigenetic reprogrammingA method that tries to reset age-related cellular signals without fully changing cell identity.EpistemiaA conceptual term for mistaking the appearance of knowledge for verified understanding.EPONEthernet Passive Optical Network, a fiber access architecture used by some providers.EpoxyA material that hardens through a curing reaction after its parts are mixed.Equal pay principlethe idea that comparable work should be compensated fairly and consistently.Equality monitoringThe collection of workforce diversity data to assess representation and support compliance with equality duties.Equipment authorizationThe approval process required before certain devices can be imported, marketed, or sold in the U.S.Equitable accessfair availability of technology across different users and communities.Equity stakean ownership position in a company that may confer influence over strategy.Equo compensoa fair-payment framework for the use of protected content online.EradicationThe phase where malicious access, tools, or persistence are removed from affected systems.ERP ConsolidationThe effort to reduce multiple enterprise resource planning instances into fewer systems or a more integrated model.ERP credentialslogin details for enterprise resource planning systems that manage business operations.ERP customizationModifying enterprise resource planning software to fit unique business processes or exceptions.ERP landscapeThe collection of applications, integrations, and customizations that make up an organization’s enterprise system environment.ERP/CRMBusiness software for enterprise operations and customer relationship management.Error correctionMethods used to reduce or fix the noise and instability that affect qubits.Error rateThe percentage of requests that fail during a given period.Error toleranceThe ability of a system to remain safe when users make mistakes.Error-based SQL injectionA variant that relies on database error responses to confirm behavior or reveal useful clues.Escalation channelAn internal reporting path for raising safety concerns so they can be reviewed and tracked.Escalation controlThe safeguards that help prevent a mistaken report from triggering action.Escalation LogicThe rules that decide when an AI system should hand a task to a human operator.Escalation ruleA policy that defines when an issue must be moved to higher-priority response or decision-makers.Escape to HostA breakout pattern where software leaves an isolated environment and reaches host-level or adjacent resources.ESCOThe European skills and occupations taxonomy used to standardize skill descriptions for matching systems.ESET Management AgentA legitimate endpoint management component used in enterprise environments.ESGEnvironmental, Social, and Governance standards used to assess non-financial responsibility.eSIM QR codeA scannable activation token used to provision a mobile subscription profile.ESP32-P4A microcontroller used in custom embedded hardware projects.Espionagecovert access focused on quietly collecting information.Espionage groupA threat actor focused on stealthy intelligence gathering rather than quick disruption.Espionage malwareSoftware built to quietly collect information over time rather than cause immediate disruption.EsportsCompetitive video gaming organized around leagues, tournaments, and live audience engagement.ESRSEuropean Sustainability Reporting Standards, the available information standards used to structure sustainability disclosures under the EU framework.Essential subjectA NIS2 category that is subject to one set of reporting and oversight obligations.eSubmissionA digital process for submitting procurement documents in structured electronic form.ETF flowmoney moving into or out of an exchange-traded fund.Ethereum smart contractsSelf-executing code on Ethereum that can store rules or pointers used in abuse scenarios.Ethereum transactionA blockchain record that can carry a recipient address and other metadata.Ethereum transferA blockchain transaction that moves value or records activity on the Ethereum network.Ethereum validatorsnetwork participants that help secure Ethereum by proposing and attesting to blocks.Ethernet switchA device that connects multiple networked systems and forwards traffic between ports.Ethical impact assessmentA structured review of how an AI system may affect rights, fairness, and society before deployment.Ethical Impact Assessment (EIA)A process for examining the risks, benefits, and mitigations of a specific AI system or deployment.EthicsPrinciples used to judge what is responsible, fair, and acceptable in technology use.EU Charter of Fundamental RightsThe EU document setting out core rights, including privacy and data protection.EU-database registrationA filing requirement for certain high-risk public-sector AI deployments before use.EUMSSThe draft European Union Managed Security Services certification scheme under consultation.European Health Data SpaceThe EU policy environment for governed access to health data across borders.European Preservation OrderA criminal-procedure order used to preserve electronic evidence so it can be produced later.European Production OrderA criminal-procedure order used to obtain specified electronic evidence directly from a service provider.European Works CouncilA transnational employee representation body used to inform and consult workers across EU-based groups.EuroprivacyA privacy seal or certification referenced in the context of European data protection.EuroQCIA European initiative focused on quantum-secure communication infrastructure.EUV lithographyAdvanced chipmaking technology using 13.5 nm light for leading-edge semiconductor patterning.EVALA Redis command that runs Lua scripts inside the server process.Eval InjectionA security flaw where untrusted input is evaluated as code, enabling arbitrary code execution.EvalsTests or evaluation procedures used to measure whether an AI system behaves reliably for a task.Evaluation agentan automated agent used to test or measure model behavior.Evaluation harnessThe software and rules used to run, score, and contain a model test.Evaluation infrastructureThe tests, scoring methods, and workflows used to judge model performance before deployment.Evaluation loopA feedback process that uses human review or operational signals to measure and improve model behavior.Evaluation runA controlled test used to observe how a model or agent behaves under repeatable conditions.Evaluator-backed taskA workflow step that interprets scripted input server-side during execution.Event brandingSymbols, names, and visual elements used to identify and protect a major event.Event ID 1000A common Windows application crash log entry used to record unexpected process failures.Event ID 4662A Windows audit event that can help reveal directory object access when the correct logging is enabled.Event propagationThe movement of a status change, such as a preference update, across connected systems.Event-driven pipelineA workflow where one completed step triggers the next by emitting an event instead of polling for changes.Events APIA direct server-side method for sending conversion events to an ad platform.Evidence automationSoftware that collects, organizes, and tracks proof for audits with less manual effort.Evidence chainThe documented handling path that shows how evidence was collected and preserved.Evidence collectionThe process of gathering data so it can be analyzed without losing integrity.Evidence integrityProof that data has not been altered in a way that breaks trust in the investigation.Evidence recordThe set of logs, notes, screenshots, and messages that may help reconstruct what happened.Evidence retentionThe controlled preservation of records that may later be needed for review, compliance, or dispute resolution.Evidence sufficiencyThe question of whether the available information is enough for the stakes of a decision.Evidence thresholdThe level of testing or confidence needed before an AI system is approved for use.Evidence validationchecking logs and artifacts before accepting impact claims.Evidence-based engineeringA development approach that requires traceable proof, not just a convincing output.Evidence-based governanceA security model that relies on documented controls, ownership, and auditable decision-making.Evidence-driven decision-makingA security approach that prioritizes verified technical and operational signals before action is taken.Evidence-first workflowA process that gathers data before allowing conclusions to be stated.Evil TwinA rogue Wi-Fi network that imitates a legitimate access point to lure victims and manipulate traffic.Evil twin extensiona fake add-on designed to imitate a legitimate developer tool.Evil-twin campaignA tactic where lookalike packages imitate legitimate tools to confuse users or automated installs.EVM-compatibleBuilt to work with the Ethereum Virtual Machine, which supports standard smart-contract behavior.Exam prepThe process of reviewing and practicing for a test.Excellence bandthe highest performance tier, where advanced skills become visible.Exception queueA manual review path for cases the automation cannot resolve with enough confidence.EXCEPTION_ACCESS_VIOLATIONa Windows crash error that appears when software accesses invalid memory.ExchangeMicrosoft’s email and calendar platform, often deployed on-premises or in hybrid environments.Exchange OnlineMicrosoft’s hosted email service inside Microsoft 365.Exchange Server Subscription EditionMicrosoft’s current on-premises Exchange line for organizations that still run mail servers locally.Exchange Subscription Edition (SE)Microsoft's subscription-based on-premises Exchange release under active servicing.Executable behaviorsoftware actions that can be run by a system, rather than just read as data.Executable fileA file type that can be run as code by a system or web server in the wrong location.Executable upload directoryA web-accessible folder where a malicious uploaded script can be run by the server.Executable Upload PathA directory where uploaded files may be interpreted as code by the server.Execute PrivilegeA permission that allows a user or role to run protected actions or code paths.Execution capabilitythe ability of a device to run software rather than only pass data.Execution capacitythe ability to turn plans and funding into sustained operational results.Execution ContextThe security boundary in which code is allowed to run, such as a sandbox or service account.Execution isolationA defense that constrains what a process can access, change, or invoke while it runs.Execution LayerThe part of an agentic system that runs tools, workflows, and actions in the real environment.Execution PathA possible route a program can take while running through its code.Execution phasethe stage after contract award, when obligations, documents, and updates must be managed.Execution provenanceA verifiable record of how a system action happened, including actor, order, and resulting state changes.Execution riskthe chance that a plan fails because it cannot be carried out effectively.Execution RoleThe cloud identity a runtime uses to access services and resources.Execution VerificationA vendor-described approach to recording and verifying execution history for autonomous systems.Execution Verification Infrastructure (EVI)A runtime framework designed to capture and verify actions taken by AI agents and autonomous systems.Executive alignmentAgreement at leadership level on priorities, authority, and escalation during a security event.Executive Impersonationpretending to be a senior leader to gain trust and influence decisions.Executive SponsorA senior leader who supports a program, removes obstacles, and reinforces its priority.Executive-facing supportguidance designed to help senior leaders interpret and act on security risk.execveatA Linux execution syscall that can launch programs through an alternate path.ExemptionA rule-based exception that removes some products or cases from a broader requirement.Exfiltration ChainA sequence of steps used to move sensitive data out of a system, often through staged reads and outbound requests.Exfiltration over C2The theft of data by sending it through the same channel used for remote control.Exfiltration Over C2 ChannelA technique where stolen data is sent out through attacker-controlled command-and-control traffic.Exfiltration volumea size figure that may relate to data claims, but is not proof of theft.Exhaustion PrincipleThe legal doctrine under which distribution rights for a software copy may be exhausted after the first lawful sale.Exidy SorcererA late-1970s personal computer platform associated with early home computing.Existential riskA severe, system-level harm scenario often used in AI governance debates.Exit testA practical exercise to check whether a service can be moved away from a provider without major disruption.ExoplanetA planet that orbits a star outside our solar system.Expansion cardan add-on board that extends what a computer can do.Expectation managementSetting realistic goals for what AI should improve, so time saved can be translated into measurable results.Expense trackingThe process of recording and organizing business purchases for accounting and review.Experiment prioritizationThe practice of ranking lab tests by expected value, cost, and likelihood of reducing uncertainty.Expert judgementA human decision based on experience and context when a rule cannot be fully automated.Expiration dateThe card-lifecycle field that indicates when a payment card should no longer be accepted.Expired domainA domain name that was not renewed and returned to the registration pool.Explainable AIAI systems designed so humans can understand the evidence behind their outputs and decisions.Exploit attemptAn observed effort to abuse a vulnerability, not proof of success.Exploit benchmarkA test framework that measures whether an AI can turn a vulnerability into a working attack path.Exploit kitA bundle of tools that automates the use of software vulnerabilities against a target.Exploit launchpadA hijacked system used to start or relay attacks against other targets.Exploit moduleReusable attack code in a framework that automates validation or exploitation of a vulnerability.Exploit pathThe sequence of actions or weaknesses used to turn a flaw into practical access.Exploit PortingAdapting an existing exploit to work against a different device, version, or firmware build.Exploit ProtectionWindows mitigation features that can help block or reduce the impact of known exploit techniques.Exploit reasoningThe ability to infer how a flaw might be turned into a working attack path.Exploit statusA signal showing whether a flaw is publicly known, weaponized, or already abused in attacks.Exploit weaponizationthe process of turning a newly disclosed flaw into a working attack.Exploit-style probingRepeated test traffic designed to look for weaknesses in a web application.Exploitability validationTesting whether a weakness can actually be turned into an attack path.Exploitability verificationTesting whether a vulnerability can actually be used in context, not just whether it exists in theory.Exploitability windowThe time between discovery of a weakness and when it can be used in an attack.Exploitationactive use of a weakness by an attacker.Exploitation in the wildReal-world use of a vulnerability by attackers outside a lab or test environment.ExploitBenchAn AI cybersecurity benchmark that measures progress through multiple exploit-development stages.Exploited flawA weakness in software or configuration that attackers can abuse to gain entry or run code.Explorer.exeThe Windows shell process that helps launch the desktop, taskbar, and file browsing experience.Exponential backoffA retry method that waits longer between each attempt to reduce pressure on a struggling service.Export fileA portable file format used to move passwords manually, often with added handling risk.Export pathA method for moving data out of a service, such as download, sync, or API access.Exposed API keysCredentials left visible or poorly protected, making misuse more likely.Exposed application endpointA network-reachable application surface that can be used for initial access.Exposed asseta public-facing system or service that can be targeted from the internet.Exposed attacker serverAttacker-controlled infrastructure accidentally left reachable on the internet.Exposed credentialsSecrets that were unintentionally made available and should be treated as compromised.Exposed JavaScript filesBrowser-delivered code that can sometimes reveal tokens, endpoints, or debug data.Exposed network devicea device reachable from the internet, often with remotely accessible services.Exposed servicesinternet-facing systems that can increase risk if not tightly controlled.Exposed staging serverInternet-reachable operator infrastructure used to hold tools, pages, or payloads before deployment.Exposed working directoryA publicly reachable file set that may contain logs, scripts, or operational artifacts.Exposure assessmentThe process of identifying where a threat could affect systems, services, people, or operations.Exposure DiscoveryThe identification of services, systems, or assets that are visible outside an organization’s intended security boundary.Exposure intelligenceObservations about how visible systems are to external scanning, useful for measuring attack surface.Exposure InventoryA check of all deployed instances to find systems that still need remediation.Exposure mappingchecking internet-facing systems for services that may need review.Exposure metricA measure of how widely a malicious package was downloaded, not proof of unique compromise.Exposure pointa reachable system, service, or credential path that may need review after a threat claim.Exposure scopethe amount and type of data that may have been taken or published.Exposure statusWhether a system is reachable by potential attackers, especially from the internet.Exposure timehow long a message remains visible to a viewer.Exposure timera posted date and time meant to intensify leverage.Exposure-based triageA patch-prioritization method that weighs reachability, exploit activity, and asset criticality, not just scores.Expression engineA system that evaluates small pieces of user-defined logic inside an application.Expression evaluationA feature that computes logic from text or data at runtime, which can become risky if attacker-controlled input reaches it.ExpressivenessHow much behavior a language or tool can describe.ExpressLRSAn open-source radio-control link used for drone and FPV communication.Extended Detection & Response (XDR)A security model that combines signals from multiple layers into a single investigation and response workflow.Extended displayA screen used as an additional monitor for another device.Extended learningA learning model built around practice, collaboration, and reflection rather than passive instruction alone.Extended mindthe idea that tools can become part of human cognitive work.Extended Passport (EPP)An SAP tracing mechanism that carries request context across systems and server boundaries.Extended Passport ProcessingA SAP tracing and context-handling mechanism used to track distributed sessions across protocols.Extended Security Update (ESU)the program referenced by Microsoft for continued security updates beyond standard support.Extended StableA slower enterprise update track that still receives security fixes, but on a longer cadence.Extensible Storage Engine (ESE)A Microsoft storage engine that uses files as its data backing.Extension IDThe unique identifier for an extension, usually formed from a publisher name and extension name.Extension integrity protectionsBrowser checks meant to keep unauthorized or tampered extensions from being treated as trusted.Extension ManagerThe JupyterLab feature used to discover, install, and manage extensions.Extension manifestThe configuration file that defines what a VS Code extension contributes and how it activates.Extension modelThe system that lets browser add-ons add features while also expanding the trusted computing surface.Extension permissionsThe browser-granted rights that determine what an add-on can access or change.Extension signingA browser control that requires add-ons to be signed before release installation.Extension spoofingPublishing lookalike add-ons to impersonate trusted tools.Extension storageData kept by a browser extension, sometimes separate from normal browsing data.Extension supply chainThe path an editor add-on takes from publisher to registry to developer machine.Extension update channelThe mechanism that delivers new extension code after installation.Extension-based architectureA design that adds features through separately deployed modules.ExtensionsAdd-ons built with web technologies that can interact with browser features and, in some cases, web content.External attack surface managementA security practice focused on discovering and tracking internet-facing assets, services, and exposures.External Attack Surface Management (EASM)A security practice for discovering and tracking internet-facing assets and exposures.External Authentication Method (EAM)An Entra feature that lets an external service act as part of the MFA process.External Authentication Methods (EAMs)A feature that lets approved external MFA providers participate in sign-in.External borderThe outer boundary of a political or travel zone, where access rules are especially sensitive.External botAn automated software participant that joins meetings and may be subject to Microsoft Teams access controls.External CollaborationA feature that lets users communicate with people outside their organization through a managed platform.External domainsEmail systems outside an organization’s own mail environment.External hard drivea storage device that connects outside the main computer case.External identityPersonal data about executives, employees, and their families that attackers can find and exploit outside company systems.External memoryInformation stored outside the model that can be reused during later runs or tasks.External procedureDatabase-executed code that runs outside the core database engine and may interact with the operating system.External ServicesThird-party systems or APIs that an AI agent can use to fetch data or trigger actions.External validityThe degree to which findings from one dataset can be applied to other settings or users.External-facing systema server or service exposed to the internet and often watched by attackers.Extortion actorsThreat actors that use pressure or claims to force a response.Extortion chainThe sequence of threats, contact, and leverage used to pressure a target.Extortion conspiracyCoordinated criminal activity aimed at pressure, theft, or leverage for payment.Extortion contexta criminal pressure tactic that may precede or accompany data theft claims.Extortion crewa criminal group that uses threats or leaks to force payment or attention.Extortion cyclethe pressure phase where claims, deadlines, and publication are used to coerce a response.Extortion demanda payment request paired with a threat to publish data or increase pressure.Extortion leaka pressure tactic that uses stolen-data claims to force payment or concessions.Extortion leak pagea public post used to pressure a target by claiming stolen data.Extortion leak posta public threat listing that claims stolen or exposed data.Extortion leak threatpressure tactic that threatens publication of data unless demands are met.Extortion narrativepressure messaging that may mix facts with persuasion.Extortion notea threat message used to pressure a target into contact or payment.Extortion operationscriminal campaigns that use disruption or theft to force leverage.Extortion paymentmoney paid under threat, often without any guarantee of a useful outcome.Extortion payment diversiona tactic aimed at redirecting ransom money away from the original attacker.Extortion phasethe pressure stage in which attackers try to force a response.Extortion postinga public claim used to pressure a target.Extortion signala public indicator that may suggest pressure, without confirming a breach.Extortion signalingMessaging used to pressure a target before facts are confirmed.Extortion theaterThe pressure campaign attackers use to amplify fear, urgency, and reputational damage.Extortion timera deadline used to increase pressure in a ransomware-style case.Extortion workflowthe sequence of threats, postings, and deadlines used to coerce a victim.Extra-EEA transferMovement of personal data outside the European Economic Area.Extracted emailsemail addresses copied from a domain or dataset and used as leverage or evidence.Extraction stubThe executable part of an SFX archive that handles unpacking and launch steps.Extradition requesta formal legal demand for one country to transfer a person to another jurisdiction.Extraordinary commissionerA temporary leadership role used to maintain control and continuity during an organizational transition.ExtrapolationExtending today's trend into tomorrow without enough caution.Extraterritorial effectsLegal effects that reach beyond the issuing country’s borders.Extreme heatPeriods of unusually high temperature that can strain people and infrastructure.Extreme pressurevery high force applied to a material, often used to study behavior beyond normal conditions.Extrusiona manufacturing process that shapes material through a die, often used in packaging production.F1/F2/F3 bandsTime-based electricity pricing zones used to price consumption differently.F5 BIG-IP APMAn access management module used to broker secure access to applications and portals.FA(3)A structured invoice schema used in Poland that can carry party, contact, and transaction fields.Fabric networkingA high-speed network layer designed to move data efficiently between nodes in large compute environments.Fabric OSFirmware used to run and manage Brocade Fibre Channel switches.FaceTimeA live video calling service that can be abused as a believable scam channel.Facial authenticationA biometric method that verifies identity by comparing a face capture with a stored enrollment.Facial biometricsidentity verification based on facial features and matching signals.Facial photographsbiometric images that can increase privacy and impersonation risk if exposed.Facilitator networkA group of intermediaries who help hide the real operator by providing people, devices, or payment paths.Fact-checkingThe process of verifying claims against reliable evidence before publication.Fail closedA security design that denies access when authorization or verification cannot be confirmed.Fail securea design approach where systems default to a protected state during errors or outages.Fail-safe behaviora design approach that moves a system into a safer state when a fault occurs.Fail-safe designAn approach that keeps a system in a safe state when components fail or conditions become abnormal.Failed printA print job that does not form the intended object correctly.Failure analysisThe process of examining why a component did not meet expectations.Failure ContainmentDesigning a system so that when an AI fails, the impact is limited instead of cascading.Failure stateThe condition a system enters when a component or assumption no longer holds.Fair Usage PolicyRules that limit apparently unlimited features to prevent abuse or excessive consumption.Fair usea U.S. copyright doctrine that allows limited uses under specific conditions.Fair use policyusage rules that can shape how an “unlimited” plan behaves in practice.FaithfulnessHow closely an explanation matches the model's actual internal process.Fake accounta fraudulent or disposable account used to disguise access or evade detection.Fake decryptorstools that claim to restore data but may be fraudulent or ineffective.Fake hotspotA rogue wireless network designed to look legitimate.Fake security alertA fabricated warning designed to create urgency and fear.Fake security verificationA deceptive prompt designed to look like a normal safety check while steering the user into unsafe behavior.Fake tradinga scam that imitates investment services to induce transfers under false pretenses.Fake trading platformA fraudulent site or app that imitates investing services and may display invented balances or profits.Fake wallet appA malicious app that imitates a cryptocurrency wallet to capture credentials, seed phrases, or payments.Fallback designA secondary communication approach intended to keep a system usable when the primary path is unavailable.Fallback factorAn alternate authentication method used when the primary method cannot be completed.Fallback logicThe safe behavior a system uses when an input or subsystem becomes uncertain.Fallback mechanismA secondary method a system uses when the main route is unavailable.Fallback navigationAlternative methods used when GNSS is unavailable, degraded, or untrusted.Fallback pageA simplified backup page that keeps essential information reachable during an outage or attack.Fallback ProcedureA predefined backup process used when a primary system fails or becomes unsafe to use.Fallback Update PathA secondary delivery route used when the preferred update source is unavailable or fails.Fallback WorkflowA manual or alternate process used when normal digital systems are unavailable.False base stationA rogue cellular transmitter designed to mimic legitimate mobile network equipment.False endorsementMisleading material that makes it seem as if a person supported a message or candidate.FAMOUS CHOLLIMAA threat group name used for DPRK-nexus activity focused on fraudulent employment and insider-style access.Fantasy consoleA software platform that imitates the limits and style of older game hardware.Fanzonea fan-oriented feature that adds a social or interactive layer to the viewing experience.FargateAn AWS container runtime that hides the underlying host kernel from the customer.FarnesinaCommon name for Italy’s Ministry of Foreign Affairs and International Cooperation.FascicolazioneThe grouping of related documents into a dossier so their administrative context stays intact.Fast-trackan airport service designed to shorten queues at checkpoints or boarding steps.FastCGIA protocol that helps web servers pass requests to application processes efficiently.FatigueProgressive weakening caused by repeated stress over time.FatturaPAThe XML format used for electronic invoices sent to Italian public administrations.Fault Detection and DiagnosisA method for identifying faults by comparing current behavior with expected normal behavior.Fault tolerancea design approach that helps a system keep working when parts fail.FCEB agenciesFederal Civilian Executive Branch agencies that must follow certain U.S. cybersecurity directives.FDIC-insureda bank covered by U.S. federal deposit insurance.FEAFinite element analysis, a method for testing structural behavior in software.Feasibility studyan assessment of whether a proposed system can work in practice before rollout.Feature articleA piece focused on context, character, or meaning rather than breaking news.Feature engineeringThe process of turning raw data into useful inputs for an AI model.Feature flagsSwitches that let teams deploy code separately from releasing it to users.Feature ManagerThe cPanel tool used to enable or disable account features.Feature releaseA major Windows update that introduces a new version number and starts its own support window.Feature setThe collection of functions included in a product or subscription plan.Feature storeA system that reconciles and serves approved features or values for production use.Federal frameworkA national rule set designed to apply across the United States rather than through separate state-by-state rules.Federal procurementThe process U.S. agencies use to buy products and services, often with strict security and compliance requirements.Federated ArchitectureA distributed design where local nodes keep control of their data while exposing governed interfaces for reuse.Federated cloudA model where multiple providers interoperate while preserving separate governance and control boundaries.Federated dataData managed across multiple organizations while keeping local control over access and storage.Federated EnvironmentA setup where multiple organizations share systems or data under coordinated trust and policy rules.Federated governanceA model where local teams move fast within shared rules, standards, and controls.Federated learningA distributed training setup used in multi-tenant AI systems where raw data stays local and updates are aggregated.FedRAMP 20xA newer FedRAMP approach that emphasizes maintained assurance evidence over a one-time static package.FedRAMP HighThe highest federal cloud impact level for highly sensitive unclassified data, requiring strong controls and ongoing monitoring.FedRAMP MarketplaceThe government listing venue used to surface FedRAMP-related provider and authorization information.Feed ValidationChecks that compare incoming data against expected ranges, freshness rules, and trusted sources.Feedback exposureRepeated contact with responses, reactions, or signals from other users.Feeder-level monitoringTracking electricity flow on individual distribution lines to localize anomalies and losses.Feeding obligationsRules requiring organizations to populate a system with the data they are responsible for entering.Femtosecond laserA laser that emits pulses lasting one quadrillionth of a second.FER XA renewable-energy incentive framework that creates a large pool of projects for screening and selection.FERCThe U.S. Federal Energy Regulatory Commission, the regulator named in this case.Fiber connectivityHigh-capacity network links that move data quickly between systems and users.Fiber optic infrastructurethe physical network backbone that can support communications and related sensing applications.Fiber reinforcementStrong fibers added to a material to improve stiffness or strength.Fiber to the homeA broadband architecture that delivers internet service over optical fiber directly to a residence.Fiber-optic linkA physical data path that uses light signals to carry network traffic.Fidelity benchmarka metric used to compare expected results with observed results in a quantum run.FIDO/WebAuthnA phishing-resistant authentication standard that uses cryptographic proof instead of reusable passwords.FIDO2 passkeyA phishing-resistant login method based on cryptographic keys rather than reusable passwords.FIDO2 security keyA hardware authenticator that supports phishing-resistant sign-in using public key cryptography.Fiduciary dutya legal and ethical responsibility to act carefully in another party’s interest.Field observationData gathered outside the lab in a real-world environment.Field officea regional unit that can collect local signals and feed them into a wider investigation.Field UIA Drupal core module used to manage fields and related content configuration.Field-level securityA control that limits which data fields a user can view or edit.Filament ignitera thin element that heats up quickly when electrical current passes through it.Filament tuningAdjusting printer settings so a specific material prints cleanly and consistently.File and directory discoveryAn attacker activity that lists folders and files on a system to locate useful data.File auditingLogging that records who opened, copied, moved, or exported documents.File CapabilitiesLinux permissions that grant specific privileges to a program without giving it full root status.File countA visible indicator of how much material, if any, is attached to the listing.File deletionRemoval of stored data, which can disrupt services even without direct code execution.File disclosureA vulnerability that lets attackers read data they should not access.File editing restrictionA WordPress hardening control that blocks direct dashboard editing of theme or plugin files.File exfiltrationThe unauthorized copying or removal of files from a compromised system.File ExplorerWindows’ built-in file management interface.File exportmoving data out of a platform into a separate file for local use or sharing.File exposureunauthorized disclosure or publication of internal data.File extensionThe suffix at the end of a filename, such as .exe or .docx, often used by security tools to classify a file.File formatthe structure that tells software how to read and store a file.File HistoryA Windows feature that automatically saves copies of user files to an external drive or network location.File infectorMalware that attaches to executable files, which can make cleanup harder after the network layer is interrupted.File integrity checkscomparisons that help detect unauthorized changes to stored data.File Integrity Monitoring (FIM)A control that watches for unexpected changes to files and other critical objects.File leakalleged release or theft of data files.File lockA control that prevents conflicting changes to a file while it is being edited or accessed.File managerSoftware used to navigate folders, copy data, and organize files.File notificationan event alert that tells software when a file changes.File operationsActions such as reading, writing, or deleting files on a system.File path boundaryThe intended directory limit that should contain reads, writes, and deletes.File permissionsRules that control which users or processes can read, write, or execute files.File plantingDropping a file in a location that later causes execution or another security-relevant action.File provenanceThe history of a file, including where it came from and how it has been handled.File recoverythe promise of restoring data, which can be used as a trust lure.File referencingA workflow where a project links to separate assets, such as rigs or textures, instead of storing everything in one file.File reputationA security feature that evaluates files, often attachments, before they are delivered or processed.File transfer permissionA control that decides whether a user can move files during a remote session.File type validationA control that checks whether an uploaded file matches an allowed format before it is accepted by the application.File upload vulnerabilityA weakness in how a service accepts or processes uploaded files, sometimes allowing malicious content or unsafe server behavior.File write primitiveA flaw that lets an attacker place files on a system, which can sometimes be chained into code execution.File-based scanA security check that inspects the contents of files on disk rather than live memory or responses.File-borne threatMalicious content delivered through documents, archives, scripts, or other files rather than direct exploitation.File-centric securityProtection focused on the file itself rather than only the surrounding network.File-infectorMalware that attaches itself to executable files and can spread when those files run.File-notification APIAn operating system interface that reports when files or directories change.File-origin trust chainThe sequence of checks that helps Windows decide whether a file should be treated as trusted or risky.File-Read VulnerabilityA flaw that can let an attacker retrieve server-side files, sometimes revealing secrets or configuration data.File-server treea directory structure that can reveal how business records are organized.File-serving boundaryThe control that limits which files a server is allowed to return to a client.File-system acquisitionA capture of device files and folders for later analysis.File-transfer permissionA control that determines whether files can be moved during a remote session.File-type masqueradingA technique that makes a malicious file look like something benign.File-wiping malwareDestructive malware that deletes or overwrites files to make recovery difficult or impossible.FilelessMalware behavior that relies on memory or living-off-the-land techniques instead of obvious files on disk.Fileless execution chainAn attack path that relies on scripts or in-memory activity instead of a traditional dropped executable.Files & Folders accessA macOS privacy control that governs whether an app can read specific local folders.Filesystem baselineA known-good record of expected files and directories used to spot unauthorized changes.Filesystem boundaryThe intended limit of where a program should be able to read or write files.Filesystem CanonicalizationThe process of resolving a path to its normalized form before trusting it.Filesystem deletionRemoving a file entry from storage, which can happen instantly if a delete command runs.Filesystem dumpa copied set of files from a device or system that may reveal settings or operational details.Filesystem enumerationautomated discovery of files and directories on a system.Filesystem event APIAn operating system interface that notifies software when files or directories change.Filesystem monitoringWatching for file creation or change events so a program can react when new data appears.filetypeA search operator that filters results to a chosen file format.FileVaultApple’s macOS volume-encryption feature for protecting data stored on the startup disk.Film photographyImage creation using photosensitive film instead of a digital sensor.Filter ICan IC designed to pass some frequencies while reducing others.FilteringAutomated screening that blocks or suppresses content before it reaches a user.FiltrationThe process of separating unwanted particles from a fluid using a barrier or medium.Final assemblyThe stage where components are put together into a finished device.Finalista contender selected for the final round of consideration in an award process.FinalityThe point at which a blockchain record is treated as settled and difficult to reverse.Financial bufferSavings or reserves that create room to make calmer, less pressured choices.Financial databasesstructured records that may contain payment, billing, or accounting data.Financial documentsrecords that can raise fraud, legal, and commercial risk if exposed.Financial exclusionthe inability to reliably access basic banking services.Financial flowThe movement of money through accounts, services, or intermediaries.Financial freeze workflowa process for blocking suspicious funds while an investigation proceeds.Financial guaranteeA mechanism that helps make commitments enforceable.Financial instrumenta tradable contract that has monetary value.Financial intelligenceanalysis used to detect and trace suspicious money flows.Financial literacyThe ability to understand and manage money well enough to make informed decisions.Financial recordsinternal documents that can reveal costs, approvals, and operating detail.Financial softwareApplications used for payment, accounting, or money-related workflows.Financial tracingFollowing money movements to identify where illicit funds came from and where they went.Financial trailthe chain of transfers, accounts, and intermediaries investigators use to follow illicit money.Financial UXThe design of a financial interface, including clarity, navigation, and user trust signals.Financial workflowthe sequence of steps used to manage payments, records, and approvals.Find My networkApple ecosystem background context for locating compatible items through nearby devices.Fine printthe detailed terms that define limits, exclusions, and obligations behind an offer.Fine-grained authorizationAccess control that evaluates permissions at the level of individual objects, actions, or relationships.Fine-grained tokenA token with limited permissions, designed to reduce blast radius if it is exposed.Fine-grained tokensAccess tokens with limited permissions, designed to reduce damage if one is exposed.Finger memoryThe ability to repeat keyboard actions with little conscious thought.Fingerprint spoofingAn evasion method that tries to imitate normal client traits so malicious traffic blends in.Finish qualityThe final surface condition of an object, including smoothness, consistency, and visible marks.FinOps for AICost governance practices for tracking and optimizing AI-related spend.Fintech paymentsa sector handling financial transactions and sensitive trust relationships.Fire testA controlled evaluation of how a material or object behaves under fire exposure.Fire TVAmazon's streaming device platform, where apps, media controls, and voice features come together.FirebaseGoogle’s backend platform for app data, authentication, and hosting.Firebase Cloud Messaging (FCM)Google’s messaging service for delivering notifications and data messages to apps and web clients.FirecrackerA lightweight VMM used to run isolated workloads with small virtual machines.Firecracker MicroVMA lightweight virtual machine designed to isolate workloads with a small attack surface.Firewall applianceA dedicated network device that filters traffic and often provides additional security functions such as VPN services.Firewall policy managementSoftware used to define, review, and maintain network access rules across multiple firewalls.Firewall ruleA traffic control instruction that permits or blocks network connections.Firewall with web filteringA perimeter control that can include basic URL and category enforcement.Firewallingrules that control what traffic can enter or leave a network or device.Firm generationPower sources that can deliver output more steadily on demand.Firmware branchA product-specific update line used to deliver fixes for a particular hardware family.Firmware BuildA versioned software release for hardware, often more precise than a marketing model name when assessing exposure.Firmware compatibility gateA boot-time check that may accept or reject certain hardware parts before the OS loads.Firmware imageThe packaged software image that runs on a device and often contains configuration or credential artifacts.Firmware patchAn update to the low-level software running on hardware devices such as security appliances.Firmware PersistenceA technique where malware survives by anchoring itself in device firmware or nearby low-level components.Firmware provenanceThe origin and trustworthiness of the low-level code that controls hardware behavior.Firmware reflashReplacing a device’s firmware or system image with a clean version to restore trusted software.Firmware source codethe low-level code that controls hardware behavior.Firmware updaterThe built-in process that installs device software updates and can become a high-value trust channel.Firmware ValidationThe process a device uses to verify that an update is authentic and not tampered with.Firmware visibilityThe ability to identify, inventory, and analyze the code and components actually present in shipped devices.FIRSForeign Influence Registration Scheme, a UK legal framework covering certain foreign-influence arrangements and disclosure obligations in research and other sectors.FIRSTA global network of incident response and security teams focused on trusted information sharing and coordinated cyber defense.First AmendmentU.S. constitutional protection for speech and expression.First employmentThe first step into paid work, often used to build experience and workplace habits.First layerThe initial printed layer, which often determines whether the rest of the job succeeds.First-party web applicationsSoftware products owned and operated by the same organization that is testing them.First-run setupThe initial startup flow that should appear after a proper factory reset.Fiscal cash registera device or function used to record sales for tax and receipt workflows.Fiscal incidenceThe real economic burden of a tax, which may differ from the legal payer.FiscalizationThe automated reporting of commercial activity to a tax authority through digital systems.Fit checkA design review step that confirms parts will physically clear and align as intended.FitzRoy’s GlassA Victorian-era weather instrument associated with efforts to improve maritime weather judgment.Fix-rateThe share of findings that teams successfully repair, a more operational measure than raw alert volume.Fixed annual feeA recurring charge that stays the same regardless of usage.Fixed feea recurring charge that does not depend on consumption.Fixed installmentA regular payment amount that stays the same each month.Fixed Lifecycle PolicyMicrosoft’s support model for products that follow a defined mainstream and extended support schedule.Fixed monthly installmentA payment model that spreads charges into a regular set amount.Fixed priceA tariff that keeps a specific charge unchanged for a set period.Fixed ReleaseA software version that includes a vulnerability correction and is intended for remediation.Fixed softwareThe vendor-provided release that corrects a vulnerability and should replace the affected build.Fixed tariffa pricing model that stays unchanged for a defined period.Fixed VersionThe software release that contains a patch for a known vulnerability.Fixed-price contractA tariff structure where the price remains unchanged for a set period.Fixed-price planA contract where the economic terms stay unchanged for a defined period.Fixed-rate contractA contract that keeps the price unchanged for a set period.Fixed-rate depositA savings product that offers a set return for a defined term.Fixed-rate tariffA pricing plan that keeps electricity or gas costs stable for a set period.Flagged markerA RouterOS device-mode status that can indicate suspicious configuration or possible compromise.Flagged statusA RouterOS post-upgrade warning that indicates suspicious configuration and calls for manual review.FlammabilityA material’s tendency to ignite and burn when exposed to heat or flame.Flash chipNonvolatile memory that keeps data after power is removed, often used for firmware storage.Flash pumpingA method that uses short, intense light bursts to excite a laser medium.FlaskA Python web framework that commonly uses signed cookies for session handling.Fleet hygieneThe overall health, update status, and maintenance quality of an organization’s devices.Fleet repositioningThe operational process of moving vehicles to areas where demand is expected.Flex CreditsUsage-based units used to meter consumption inside Agentforce subscriptions.Flex filamentA flexible 3D-printing material that bends more than standard plastics and can be trickier to tune.Flexible demand managementAdjusting electricity consumption to better match grid conditions or system needs.Flexible electronicscircuits designed to bend, fold, or conform to non-rigid surfaces.Flexible hardwareElectronics or devices designed to bend, fold, or adapt to shape changes.Flexible objecta material or structure that bends and moves rather than staying rigid.Flexible resourcesassets such as storage or demand response that can adjust quickly to balance supply and demand.Flight authorizationA permission workflow used to approve drone operations in designated airspace.Flight certificateA cryptographic certificate used to sign Insider Preview builds and keep them on a trusted update path.Flight envelopethe range of conditions in which a vehicle is designed to operate safely.Flip-disc displayA mechanical display made of discs that flip between two visible states.Flip-dot displayA mechanical display made of small rotating elements that change visible state.Flip-flopA circuit element associated with switching between two stable states.Floating point unitA processor component designed to handle decimal-style arithmetic.Floquet systema periodically driven system whose effective behavior changes under repeated stimulation.Flow stateA highly absorbed state of focused attention and smooth task engagement.Flow telemetrymetadata that summarizes network communications, such as endpoints, timing, and volume.Flow toolingtools built around summarized traffic records for monitoring and troubleshooting.FlowgraphA connected graph used to represent how data or signals move through a system.Fluid simulationA numerical method for estimating how liquids or gases move over time.FMCCisco Secure Firewall Management Center, a centralized platform for managing firewall policy and events.Focus timerA timer that divides work into set intervals with planned breaks.Foldable displayA screen designed to bend around a hinge while preserving touch, image, and state continuity.FolioA kernel memory unit that groups one or more pages for more efficient cache management.Follow-on abuseSecondary misuse that can happen after data is stolen, such as deceptive targeting.Follow-on activityAdditional actions taken after the initial compromise, such as extending access or preparing the environment for later steps.Follow-on fundinglater financing that helps a company move from early validation to growth.FontA digital file that lets a typeface appear on screens or in print.For partsA sale condition indicating the item is not guaranteed to work and may only be useful for salvage.Force densityHow much force a mechanism can produce for its size or mass.Force sensinga method of measuring applied pressure or load instead of stick travel.Force-pushA Git action that overwrites remote branch history with local changes.Forced laborWork carried out under coercion or threat, where the worker cannot freely refuse or leave.Forced updatesAutomatically applied patches that reduce the delay between disclosure and protection.Forecast biasSystematic errors that make predictions look better or worse than they should.Foreign exchange thresholdA usage limit tied to currency conversion before extra costs or restrictions may apply.Foreign interferenceCovert, corruptive, or coercive activity by a foreign state to influence institutions, people, or outcomes.Foreign-currency liquiditythe ability to obtain and use cash in a currency other than the home currency.Foreign-function interfaceA boundary that lets one language call code written in another language, but can reintroduce safety risks if handled poorly.Foreign-use commissiona charge that can apply when a card is used outside the home country.Forensic acquisitionThe controlled collection of data for investigative use while minimizing alteration.Forensic auditabilityThe ability to reconstruct system behavior after an incident using logs, telemetry, and configuration records.Forensic interpretation softwareSoftware used to analyze laboratory data for investigative or legal purposes.Forensic picturethe verified technical account built from incident evidence.Forensic reconstructionrebuilding what happened by analyzing logs, artifacts, and traces.Forensic timelineThe ordered sequence of events used in incident analysis.Form 8-Ka U.S. SEC filing commonly used to disclose material events.Form 8-K Item 1.05The SEC disclosure path public companies use for material cybersecurity incidents.Form submission handlingThe backend logic that receives and processes data sent through a web form.Formal proofA proof written in a precise machine-checkable language rather than natural language.Formal verificationA method of checking whether a result or system satisfies strict logical or mathematical rules.Formative AssessmentOngoing evaluation used to understand learning while it is still developing.FormulationThe mix of ingredients and delivery method in a product.FortiGate SSL VPNA remote access gateway that can become a high-value entry point when credentials are compromised.FortinetA security vendor known for network appliances such as firewalls and VPN products.Fortinet FortiGateA firewall product line widely used for network perimeter control and segmentation.FortiOSThe operating system that runs on Fortinet FortiGate appliances and related products.Forum takedownAn action that removes or disrupts a criminal discussion or sales venue.Forward-deployed engineerAn outside specialist placed close to a customer workflow to help move a system into production.Forward-deployed engineeringengineers working close to the business workflow to turn AI ideas into production systems.Forward-proxyA network component that relays requests on behalf of a client, sometimes used in abuse paths.Forwarding controlsSSH settings that govern whether tunnels and relayed connections are permitted.Forwarding logicThe rules and backend processing that route messages from an alias to the intended recipient.Forwarding relayThe mail-handling layer that receives messages for an alias and passes them on to the intended inbox.FOSSFree and Open Source Software, where code is publicly available and contributions are often community-driven.Foundry LocalMicrosoft’s local AI deployment layer for running inference on customer-controlled infrastructure.Four-byte writeA memory corruption primitive that overwrites exactly four bytes, which can still affect control data or state.Four-carbon sugarA sugar molecule built around four carbon atoms.FP&AFinancial Planning and Analysis, the finance function that supports forecasting, planning, and performance review.FPGA boardA development board built around an FPGA, usually with supporting components for testing and prototyping.FPSFrames per second, a standard measure of update frequency or motion smoothness.FPTANA hardware instruction that computes tangent-related output.FQHCFederally Qualified Health Center, a U.S. clinic type serving underserved communities.FractalA pattern that shows self-similarity across different scales.Fractional investingA model that allows users to buy part of an asset instead of a whole unit.Fractional ownershipSplitting one asset into smaller shares held by different investors.Fragmented internal systemsDisconnected tools or platforms that make work harder to coordinate.Framea single still image within a video stream.Frame rateThe number of visual frames shown each second, often measured as FPS.Framework pairingThe combination of generated code with a specific framework, its defaults, and its deployment model.Framing biasA subtle form of bias where the presentation of an answer shapes perception.Franchise modela structure where local operators run branded business locations under shared rules.Franchise networka business model with many local units tied to shared systems.Fraud accounta profile or login created or used to support deceptive activity.Fraud attempt ratethe share of transactions flagged as suspicious or fraudulent in a measured period.Fraud call centerA centralized operation used to run scam calls at scale.Fraud frictionextra verification steps that make suspicious activity harder to complete.Fraud indexa measurement tool that tracks changes in fraudulent activity over time.Fraud overlayA fake on-screen form placed over a real app to harvest credentials, PINs, or other sensitive inputs.Fraud response coordinationthe process of aligning relevant parties quickly enough to limit losses.Fraud ringA group of accounts or operators working together to carry out repeated abuse.Fraud riskThe chance that a conversation, payment flow, or relationship will be abused for financial gain.Fraud scoringA decision process that estimates the likelihood a transaction or application is suspicious.Fraud stackinternal data used to detect abuse, suspicious behavior, or multi-accounting.Fraud stagingBuilding a convincing story or setup to make deception seem legitimate.Fraud telemetrybehavioral and transaction signals used to spot suspicious patterns in accounts, payments, or onboarding flows.Fraud velocityA sudden rise in applications, approvals, or transactions that can signal coordinated abuse.Fraud workflowThe sequence of tools and steps scammers use to carry out deception.Fraudulent listingA fake or misleading offer designed to persuade a buyer to pay for something that is not real or not valid.Fraudulently obtained accountsAccounts acquired through deception, theft, or illicit purchase, often used to support further abuse.Free allowancesEmission permits issued without charge to reduce transition pressure on selected sectors.Free cash flowThe cash left after operating costs and investment spending, often used to judge financial flexibility.Free preview modelA model made available for early testing rather than fully established production use.Free thresholdthe usage limit below which a service remains unpaid.Free tierA no-cost plan that usually limits users, devices, or features.Free trialA limited or extended access period that lets users try a service before paying.Free WeekendA limited-time promotion that lets users play paid games without buying them.Freedom to Operatea review of whether a product can be made, used, or sold without conflicting with third-party patent rights.FreeIPAAn identity management system used to centralize authentication and access control in Linux domains.FreeRDPAn open-source implementation of the Remote Desktop Protocol used to connect to remote systems.Freight forwardingcoordination of shipments, customs, and transport across multiple parties.Freight settlement recordsdocuments covering charges, invoices, and payment status.Frequency bandA range of radio frequencies assigned for a particular communications use.Frequency referenceA stable signal used to keep other systems aligned.Frequency tuningChanging a radio's operating point within a spectrum range.FreshnessThe degree to which content is current, updated, and still relevant for retrieval.Friction controlA design step that slows risky behavior and forces a deliberate user choice.Friction layerA deliberate step that slows risky user actions so they are less likely to happen by habit.Friction reductionThe removal of delays or manual steps that make a process easier to complete.Friction signalA sign of user struggle, such as repeat attempts, abandonment, or repeated back-and-forth movement.Front OrganizationA group or entity used to create a false sense of legitimacy or obscure the real operator behind an activity.Front-end domainA web domain that presents a page, lure, or entry point to users.Frontend rendererA separately deployed component that serves or prepares the web interface.Frontier cyber capabilitiesAdvanced offensive or defensive security behaviors used to test the limits of modern AI systems.Frontier modelsA platform’s highest-capability model tier, usually reserved for more complex or sensitive use cases.Frontline defendersSecurity teams and operators responsible for protecting essential services from cyber threats.Frozen lakeA lake with an ice cover that may still carry physical risk.Frustration cyclea repeating pattern where overcommitment leads to stress and reduced control.FScaleA floating point instruction used to scale a numeric value.FSEventsApple’s macOS filesystem event system for directory-level change notifications.FSLogixA Microsoft virtual desktop product referenced in connection with the affected Azure Virtual Desktop hosts.FSLogix profile containersA Microsoft profile-management method that stores a user profile in a virtual disk and attaches it at sign-in.FSTECA Russian state body linked to certification and security oversight for certain technologies.FTP bannerThe greeting message sent by an FTP server when a client connects, before commands begin.Fuel access panelA cover that provides access for refueling or maintenance.Fuel cycleThe full sequence of steps that uranium and nuclear fuel pass through, from extraction to disposal.Fulfillment MetadataOrder and delivery details such as names, addresses, emails, phone numbers, and order numbers.Fulfillment partnerA third-party service that handles storage, packing, shipping, or order processing for a retailer.Fulfillment providerA company that stores, processes, and ships customer orders on behalf of a merchant.Full administrative controlA state where an attacker can manage the device with the highest privileges available.Full cloudA migration model in which major IT functions are moved from local systems to managed cloud services.Full data timera term used to indicate an active countdown before full disclosure.Full disclosurePublic release of vulnerability details so defenders can evaluate and respond.Full Disk AccessA macOS permission that grants an app broad access to local data beyond ordinary file permissions.Full scanA deeper scan mode that starts with a Quick scan and then checks mounted fixed disks and, if configured, removable or network drives.Full stackA role that spans multiple layers of a system, from user interaction to back-end logic and data handling.Full-chain exploitA multi-stage attack that links several vulnerabilities to move from initial access toward deeper compromise.Full-duplex audioA voice system that can listen and speak at the same time, making dialogue feel more natural.Full-fibre networkA connectivity model built around fibre-optic infrastructure for high-capacity, low-latency communications.Full-fidelity logsComplete event records kept for investigation, replay, or forensic review.Full-length commit SHA pinningReferencing one exact commit so a dependency cannot silently change under the same name.Full-motion videoVideo playback with continuous movement rather than still images or slides.Full-stack CIOA leadership concept for a CIO who can connect board-level strategy with technical execution.Fully managed cloudA cloud service model in which the provider handles more of the service lifecycle, including operation and maintenance.Fully managed serviceA service model where the provider takes on part of the operational burden for the customer.Fully patchedA system running the latest available security updates at the time of testing.Functional blockA unit in a system that performs one defined task, such as receiving, processing, or outputting a signal.Functional consultingguidance focused on how people use software in daily operations.Functional designa design made to do a job, not only to look interesting.Functional independenceThe ability to make decisions without being dominated by one department’s metrics or incentives.Functional isolationSeparating system functions so a failure or intrusion in one area does not easily spread to others.Fundamental-rights impact assessmentA required assessment of how the proposed use may affect rights and freedoms before deployment.Funding roundan investment event where a company raises capital to expand operations and product development.FusionA nuclear process that seeks to produce energy by combining light atomic nuclei, still under active development.Fusion MiddlewareOracle’s enterprise middleware stack for identity, integration, and application services.Future-oriented rolesjob profiles designed around coming skills and work needs.Fuzz testingA testing method that feeds unexpected or invalid inputs to software to uncover crashes, parsing bugs, and validation failures.FuzzerAutomated test software that feeds programs unusual inputs to uncover hidden bugs.FWAFixed Wireless Access, a broadband service that uses radio links for part of the connection.FWaaSFirewall-as-a-Service, a cloud-delivered firewall model that replaces or supplements local appliances.FX liquidity systemstechnology used to support foreign exchange trading operations.G-codeA machine control language or instruction set used by many CNC systems and 3D printers.Gadget chainA sequence of existing classes and method calls that can be abused during deserialization.Gain mediumThe material in a laser that amplifies light into a coherent beam.GaitThe pattern a walking robot uses to move its legs.GALGlobal Address List, an organization-wide contact directory.Gallery permissionAccess that lets an app read or manage stored photos and images on a device.Galvanizinga metal treatment associated with protecting steel or iron from rust.Game cartridgeA removable physical medium used to load software into a console or device.Game jama time-limited challenge to build a game around a theme.Game modAn unofficial change that alters a game's visuals, behavior, or content.Game streamingDelivering a game from a remote system while the local device handles input and display.Gaming PCA computer setup intended to run games, often with stronger graphics capability than a basic workstation.Gamma-ray observatoryA space instrument designed to detect high-energy gamma rays.GAOThe Government Accountability Office, which reviews federal programs and can examine agency actions.Gap-analysis documentan assessment file that can reveal security or process weaknesses.Garante PrivacyItaly's data protection authority, responsible for privacy oversight and enforcement.Gated datasetA dataset that requires individual access approval before it can be used.Gatekeeper modelA lightweight model that screens input before a larger system processes it.Gateway componentA system that mediates access between clients and backend services, often enforcing trust and authentication rules.Gateway compromiseUnauthorized control of a network edge device that can shape traffic and access decisions.Gateway configurationA NetScaler role used for remote access functions such as VPN and proxy services.Gateway DeviceA router, firewall, or similar appliance that connects internal networks to the internet.Gateway modeA setup where an appliance sits between external mail traffic and internal systems.Gateway policyCentralized rules that apply encryption or security controls before mail leaves an organization.Gateway roleA perimeter function that brokers remote access into internal services or applications.GBADGround-Based Air Defense, a layered setup for defending ground forces and sites from aerial threats.GbpsGigabits per second, a unit used to describe data transfer capacity.GDALRasterA GeoDjango helper for loading and manipulating raster data, including file-backed inputs.GDDR6A graphics memory type used in modern GPUs and high-bandwidth accelerator cards.GDPR Article 17The EU legal provision that sets the right to erasure and its main exceptions.GDPR Article 22A privacy rule limiting decisions based solely on automated processing when they have major effects.GDPR Article 32The EU rule requiring security measures that fit the level of risk to personal data.GDPR Article 33The rule requiring breach notification to the supervisory authority without undue delay, and where possible within 72 hours.GDPR Article 34The rule governing communication to affected individuals when a personal data breach is likely to result in high risk.GDPR breachA personal data incident that may trigger legal notification duties depending on the risk and facts.GDPR breach notificationThe process of informing regulators, and sometimes affected people, after certain personal-data incidents.GDPR Chapter VThe part of EU data protection law that governs transfers of personal data to third countries.GDPR lawful basisThe legal ground required to process personal data under EU privacy law.GeckoMozilla’s browser engine for Firefox, used as the technical base for rendering web content and running browser components.GeForceNVIDIA's consumer GPU family, commonly associated with gaming and general-purpose compute.Gemfile.lockBundler’s lockfile for pinning exact dependency versions in a Ruby project.Gemini AIGoogle’s AI capability layer used here to understand natural language and assist in Waze features.GemsGoogle's name for personalized AI experiences that can be shaped for particular tasks.Gemspec metadataPackage fields that describe a gem and can also carry arbitrary strings.GenAI DLPData loss prevention designed for generative AI, aimed at spotting sensitive content in prompts and files.Gender biasA systematic skew that treats genders differently or associates them with unequal roles.Gender gapUnequal access to opportunities, tools, or outcomes between women and men in the workplace.General-Purpose AI (GPAI)AI systems designed for many tasks rather than one narrow use case, and often subject to broader documentation rules.General-purpose computerA device intended to run a broad range of software tasks, not just one function.GeneralistA security professional with broad cross-domain knowledge who can work across multiple infrastructure or risk areas.GeneralizabilityThe extent to which a model keeps working across different patients, settings, and documentation styles.Generated contentAI-created outputs such as summaries, reports, or other work artifacts.Generation ContextMetadata about how, when, and with what process an SBOM was created.Generational turnoverthe replacement of older staff with newer workers over time.Generative AI (GenAI)AI systems that create new text, images, audio, or other content from learned patterns.Generative AI-assisted scriptingUsing AI tools to help write or adapt scripts faster for operator tasks such as recon or automation.Generative Engine OptimizationA set of practices aimed at improving visibility inside AI-generated answers.Generative systemSoftware that produces new text or other outputs in response to prompts.Generative systemsAI tools that create or rewrite text, images, or other content from learned patterns.Generative videoAI systems that create moving images from prompts, images, or reference clips.Generator OwnerThe entity responsible for a generating resource and related compliance obligations.Generic Environmental Impact Statement (GEIS)A broader environmental review document used to assess the impacts of a class of projects or activities.Genome language modelAn AI system trained to learn the structure of DNA or RNA sequences and generate new sequence candidates.Genomic dataDNA-derived information that can reveal sensitive health and family traits and is difficult to fully anonymize.GenotypingThe process of determining genetic characteristics from biological data.GEOGenerative Engine Optimization, an emerging concept focused on visibility in generative AI search and answer systems.Geo-awarenessThe ability of a drone system to recognize restricted or sensitive airspace and avoid it.Geo-fencingA control that restricts access based on the apparent location of a device or user.GeodesyThe science of measuring Earth’s shape, orientation, and gravity field.GeoDjangoDjango’s geographic extension for working with spatial data and GIS features.Geographic concentrationThe clustering of infrastructure in a limited number of regions or cities.Geographic redundancySpreading systems across multiple regions to reduce dependence on one location.Geographic-origin assessmentA judgment about where activity appears to come from, which is not the same as proving who controlled it.GEOINTGeospatial Intelligence, analysis that uses location-based data, imagery, and mapping to add geographic context.Geolocation screeningA defensive check that compares claimed location against network or account activity.Geomaticsthe science of collecting and managing location-based data.Geopolitical threatA cyber incident that may be linked to strategic, political, or state-related goals.GeoportalA web portal that provides access to geospatial data, maps, and related services.GeoServerAn open-source Java server for publishing geospatial data through web services.Geospatial imageryVisual data tied to physical locations, such as satellite or aerial images.Geothermal coolingusing relatively stable underground temperatures to help reduce heat.GeoToolsA Java library used by GeoServer for geospatial processing, including filter handling and query translation.Gesture controlA feature that triggers actions through taps, swipes, or other physical input on the device.Gesture InjectionProgrammatically simulating taps, swipes, or other touch actions on a device.get_page_template()A WordPress function that resolves which page template file should be used.Get-MpComputerStatusA PowerShell command that reports Microsoft Defender status and version details.GetCallerIdentityAWS STS API that returns the account and identity tied to the current credentials.GettitoThe revenue collected by a tax authority.GhidraA software reverse-engineering framework used for disassembly, decompilation, graphing, and scripting.GhostscriptA PostScript and PDF interpreter that can be used in document conversion workflows.GHSAGitHub Security Advisory identifier used to track vulnerabilities before or alongside a CVE.Gift card fraudThe misuse or theft of voucher codes through deception or impersonation.Gift voucherA stored-value reward that can usually be used only within a specific platform or retailer.Gigabud TrojanAn Android Trojan referenced in mobile banking fraud research.GINAA legacy Windows logon mechanism used to customize interactive authentication.Git configRepository and user settings that control Git behavior, including helper programs and other execution-related options.Git hookAn executable script that Git can run during repository events such as commits or pushes.Git metadatarepository-related context such as remotes, branches, and commit information.Git serverA service that stores, serves, and manages Git repositories for development teams.GitHub AbuseMisuse of GitHub infrastructure to support an operation, such as hosting files or blending in with normal traffic.GitHub Actions runnerThe environment that executes workflow jobs for a GitHub repository.GitHub Advisory DatabaseGitHub’s central store for security and malware advisories used by alerting tools.GitHub Enterprise ServerSelf-managed enterprise edition of GitHub that organizations run on their own infrastructure.GitHub offboardingThe process of removing a departed user’s access, tokens, keys, and app permissions from GitHub.GitHub security advisoryA structured advisory entry used to track vulnerability information in GitHub’s advisory ecosystem.GitHub workflowAn automated job triggered by repository events to build, test, or deploy code.GitHub-hosted runnerAn ephemeral virtual machine that executes Actions jobs and is destroyed after use.GitLab CECommunity Edition of GitLab, commonly used for self-managed source control and collaboration.GitLab EEEnterprise Edition of GitLab, which adds business and governance features for larger deployments.Giudizio di meritothe full hearing where the court decides the substance of the dispute.Glanceable dataInformation designed to be seen quickly without opening a deeper interface.glibcThe GNU C Library, a core library that provides standard C functions for Linux systems.Global Address ListAn organization-wide directory of users and contacts used by email systems.Global Address List (GAL)An internal directory of users and contacts in an organization.Global AdministratorThe highest-privilege tenant role in Entra, with broad control over identity settings.Global CISOA senior security leader overseeing policy and coordination across regions or business units.Global value chainsNetworks that distribute design, production, services, and integration across multiple countries.GlobbingShell pattern expansion that can match multiple filenames, sometimes with surprising results.GLP-1A hormone pathway targeted by medicines used to help manage weight and blood sugar.GlueballA hypothetical particle made entirely of gluons, not quarks.GluonThe particle that carries the strong force between quarks.Gmail API scopeA permission level that defines what an app can do with a Gmail account.Go DriverMongoDB's official client library for Go applications, used to connect to and operate on MongoDB databases.Go implantMalware written in the Go programming language, often used for portable cross-platform execution.Go loaderA first-stage malicious program compiled in the Go language, often used for compact self-contained binaries.Go-to-market strategyThe plan for reaching customers and turning a product into revenue.GodPotatoA Windows privilege-escalation tool that targets impersonation rights to reach SYSTEM.Gold-image validationComparing a device against a known-good software baseline to detect tampering.Golden datasetA trusted set of test examples used to evaluate whether an AI system behaves as expected.Google AdsAn advertising platform that can be abused to place deceptive links in front of users.Google AI OverviewsGoogle Search summaries that present synthesized answers with supporting links.Google AI StudioGoogle’s prompt-driven environment for generating and testing AI-assisted app code.Google Apps ScriptA Google Workspace scripting platform that can make web requests and may be abused as a relay layer.Google Chat appA software integration that extends Chat with actions, workflows, or user-facing interactions inside Workspace.Google Cloud organizationThe top-level root of a Google Cloud resource hierarchy.Google dorkA search query that uses operators to find specific indexed content.Google MessagesGoogle’s Android messaging app that can use RCS when the service is available.Google PlayGoogle’s official app marketplace for Android devices.Google Play StoreAndroid's official app distribution marketplace for downloads and updates.Google Visualization APIa Google service that can be misused as a data or control pathway.Google WorkspaceGoogle's cloud productivity and identity platform, where email, files, and admin controls are closely linked.Google ZanzibarA large-scale authorization system that influenced modern relationship-based access control designs.GooglebotGoogle’s automated crawler that fetches pages for search indexing.GoogleUpdaterThe automatic update service used on Windows and macOS to deliver Chrome fixes.GovernNIST CSF 2.0 function focused on oversight, risk management, roles, and policy decisions that shape cybersecurity.Govern, map, measure, manageThe four core functions in NIST’s AI risk framework for structuring AI controls.Governance cadenceA regular schedule of reviews and meetings used to monitor performance and drive corrective action.Governance costsThe ongoing effort required for review, validation, monitoring, and oversight across the AI lifecycle.Governance debtRisk and oversight gaps that build up when controls do not keep pace with new technology.Governance digitaleThe leadership and control framework used to direct digital choices and responsibilities.Governance dossierBundle of documents used to show decisions, controls, and accountability around AI use.Governance fragmentationA situation where responsibilities are spread across multiple actors without a clear control chain.Governance gateA control point that requires review or approval before an AI output or code change can move forward.Governance guardrailsPolicies and controls that limit what an AI agent can access, change, or approve.Governance modelThe rules and processes that define how a shared system is managed.Governance of autonomyRules and controls that limit what an autonomous system may decide or execute.Governance shiftA change in who controls, reviews, and is accountable for a business process.Governance stackthe approvals, policies, reviews, and controls that shape how technology is adopted inside an organization.Governance stress testA situation that reveals whether oversight, policy, and controls can keep up with technical change.Governed capacityAI infrastructure that is observable, policy-managed, and controlled like a production service.Governed datadata managed under defined access, logging, and retention rules.Governed Data ProductsCurated data assets with built-in access rules, discoverability, and oversight.Governed dependency managementA controlled process that uses vetted sources, policy rules, and review to limit untrusted software.Governed deploymentA rollout model that adds policy, privacy, and operational controls around an AI system before broad use.Governed self-serviceA model where business users can build within shared controls for access, documentation, and ownership.Governed workflowA controlled process where business rules are defined, managed, and reviewed outside of ad hoc files.Governed WorkflowsApproval and change processes designed to track who authorized work, what changed, and when.GPAIGeneral-purpose AI models that can serve many downstream uses and may face additional obligations.GPAI modelA general-purpose AI model designed for a wide range of tasks, which may face additional duties under the AI Act.GPG keya cryptographic key used to create digital signatures and verify authenticity.GPG signing keyA cryptographic key used to verify that software artifacts were published by an authorized source.GPIOGeneral-purpose input/output pins used to read signals or control external hardware.GPLA copyleft software license that requires derivative works to keep the same license terms.GPLv2An open-source license that requires source-availability and compliance for derivative distribution.GPS InterferenceDisruption of satellite navigation signals that can affect timing, positioning, or operational reliability.GPS jammingIntentional radio interference that blocks legitimate satellite navigation signals.GPT-5.6-CyberThe model name used for the new cybersecurity-focused AI.GPTscustom assistant-style experiences built around specific instructions and capabilities.GPU accelerationUsing graphics processors to speed up compute-heavy simulation workloads.GPU driverSoftware that lets the operating system communicate with a graphics processor.GPU orchestrationSoftware that schedules and manages GPU workloads across shared infrastructure.GPU partitioningA way to split accelerator capacity so workloads stay separated.GPU servera server built around graphics processors that can also power AI and high-performance computing tasks.GPU telemetryRuntime data from graphics processors, including metrics that can help reveal performance changes or suspicious behavior.GPU workloadThe set of computing tasks assigned to a graphics processor, which directly shapes its power draw.GraalVMA runtime used by Conductor's script evaluation path for supported languages such as JavaScript and, in the technical context provided, Python expressions.Grace periodThe time between a purchase and the start of interest charges.Graceful failureA controlled failure mode that avoids silent or unsafe behavior.Grafana MCP ServerA bridge that lets AI systems interact with Grafana-facing tools and data.Grand finalsThe final stage where the last contenders compete for the title.Grand jury indictmenta formal criminal charge returned in a federal case.Grandmaster clockThe primary time source in a PTP domain, used as the reference for other devices.Granular authorizationAccess control that limits a user to specific resources, not broad network reach.Granular controlsFine-grained permissions that restrict specific actions on specific files.Graph data modela structure that represents users, groups, and permissions as connected nodes and edges.Graphenea single layer of carbon atoms arranged in a hexagonal lattice, known for unusual strength and conductivity.GrapheneOSA security-focused mobile operating system designed to reduce attack surface and strengthen Android privacy controls.Graphical user interfaceA visual system for interacting with software through windows, icons, and menus.Graphics stackThe set of OS components, drivers, and APIs that handle display and rendering.GraphiteSpyware reportedly associated with Paragon in external technical reporting.GraphQLAn API query language and runtime that lets clients request and modify data through a single endpoint.GraphQL APIAn API style that lets clients request specific data and actions, which still needs strict server-side authorization.GraphQL ConnectionA pagination model used to represent lists of results in GraphQL APIs.Gray zoneA space where the line between acceptable and harmful behavior is unclear.Gray-marketAn unofficial market that sits outside normal vendor pricing and distribution.Gray-zone operationsPressure campaigns that stay below open war but can still disrupt communications and decision-making.GREGeneric Routing Encapsulation, a protocol that carries one network packet inside another.Greenfield implementationA deployment that starts from a new environment rather than replacing an existing system.Greentechtechnologies and business models aimed at reducing environmental impact.GreenwashingThe practice of making environmental performance appear stronger than the evidence supports.GremlinA graph query language used to traverse and manipulate graph databases.Gremlin APIThe graph query interface used with Apache TinkerPop for relationship-based data.Grid dependencereliance on external electricity supply for normal operations.Grid planningThe long-term design and management of electricity supply and infrastructure.Grid readinessthe ability of the electricity network to carry, balance, and deliver power reliably for a new asset.Grid supportThe transmission and network capacity needed to move electricity reliably from generation to users.GridfinityA modular storage system built around standardized bins and base layouts.GridFSA MongoDB specification for storing large files by splitting them into chunks.Groovy sandboxA restricted execution environment meant to limit what Groovy code can do.Gross annual remunerationInterest or return quoted before taxes and fees are applied.Gross annual returnThe stated yearly yield before taxes and other deductions.Gross domestic intelligenceA proposed macro-level idea for thinking about national AI capacity as an economic resource.Gross priceThe total energy price before adjusting for taxes, levies, or other components.Gross ReturnThe return shown before taxes, fees, or other deductions are applied.Ground infrastructurethe Earth-based systems that support satellites and space operations.Ground organizationlocal, on-the-street campaign activity intended to turn interest into action.Grounding contextExternal or curated evidence used to anchor model output in facts instead of guesswork.Group ChatA shared Copilot collaboration surface where more than one participant may interact with the assistant.Group stageThe earlier phase used to rank teams before elimination rounds.GroupthinkA failure mode where repeated consensus can hide weaknesses or bad assumptions.Growth financingCapital raised to expand a company’s operations and future plans.Growth hackingAn experiment-driven approach to finding scalable growth through rapid iteration.GRUBThe GNU bootloader commonly used to start Linux systems and hand control to the kernel.GSM modemA cellular device used here to send SMS messages through a connected mobile network link.GTPv2-CThe LTE/EPS control-plane protocol used for session signaling and core network state changes.Guest attack surfaceThe set of guest-facing inputs and interfaces that an attacker may try to abuse inside a VM.Guest callinga mode that lets a non-account holder participate temporarily.Guest kernelThe operating system kernel running inside the isolated environment, which can still be part of the trust boundary.Guest networkA separate wireless network that helps limit access for less-trusted devices.Guest passa redemption method mentioned for Ultra customers; the source does not detail how it works.Guest UserA limited-access account or public-access context that may allow unauthenticated access in some SaaS configurations.Guest VMA virtual machine running on shared infrastructure, typically isolated from direct access to the host system.Guest-to-host boundaryThe security separation between a virtual machine and the underlying system that runs it.Guest-to-host breakoutA flaw that lets activity inside a virtual machine affect the machine running the VM.GUIA graphical user interface, usually the browser-based management screen for an appliance.GUI Input CaptureA mobile attack category involving theft of user input through interface deception or manipulation.Guidance systemThe hardware and software that keep a spacecraft correctly oriented.Guidance, Navigation, and Control (GNC)The software and control layer that steers and stabilizes a missile or other flying system.Guided installationAssisted setup intended to make deployment easier and less error-prone.Guided rocketA rocket designed with control or guidance elements that can influence its path after launch.GW-BASICA BASIC interpreter associated with IBM-compatible personal computers.Gzip compressionA data-compression method often used in web traffic to reduce payload size before transmission.HabitationThe way people live in and organize spaces for shelter, work, and community.Hack backretaliatory cyber action aimed at a suspected attacker or related infrastructure.Hack blockera defensive role focused on preventing, detecting, or interrupting intrusions.Hack-backOffensive cyber action taken against a suspected attacker or related infrastructure.Hack-for-hireA paid intrusion model where attackers perform cyber operations on behalf of a client.HackerA broad term used for people associated with exploring, testing, or breaking computer systems.Hackers-for-hireA threat model where operators are believed to conduct cyber activity on behalf of a paying client.Hacking platformA shared technical environment used to support intrusion activity, such as scanning, access, or traffic handling.Hacking toolsoffensive utilities used to gain or maintain access to systems, often through exploitation or covert control.HadronA composite particle made of quarks bound by the strong force.HAFNIUMA Microsoft threat label for an activity cluster associated with Exchange exploitation and espionage-style operations.Half-clickAn attack pattern where opening a message can be sufficient to trigger the exploit, without requiring a separate click on a link or attachment.Half-click exploitAn attack that can trigger with minimal interaction, sometimes just by opening a message.Hall effect sensora contactless sensor that detects magnetic field changes to infer position.Hallucinated outputsModel responses that sound plausible but are incorrect, unsupported, or fabricated.Ham radioAmateur radio used by licensed operators for experimentation and communication.Hand machiningManual shaping or finishing of a part, often chosen when careful control matters more than mass production.Hand-off boundaryThe transfer point where one agent passes context, tasks, or notes to another agent.HandcarA small rail vehicle moved by human power, often used on maintenance tracks.HandheldA portable device designed to be held and used directly in the hands.Handheld consoleA portable gaming device designed to be played without a television.Handheld deviceA compact computer designed for portable use.Handlethe unique account name used to identify a profile on a platform.Hands-Free/Headset ProfileBluetooth profiles used for call handling and microphone-related audio functions.Hands-on ExploitationInteractive attacker activity after discovery, when a human operator actively uses a weakness or access path.Hands-on learningeducation that depends on direct practice rather than observation alone.Hands-on practiceLearning by performing realistic technical tasks rather than only reading theory.Hands-on-keyboard activityDirect human interaction during an intrusion, as opposed to automated execution.Handshake messageA message exchanged while establishing a secure session.Handshake retransmissionThe DTLS mechanism that resends handshake messages when packets are lost or reordered.Handshake state machineThe protocol logic that tracks each step of connection setup and message exchange.HAProxyAn open-source TCP proxy and HTTP reverse proxy used to route traffic between clients and backend servers.Haptic sensingTechnology that turns touch or pressure into data a system can process.HAR fileA browser-based network log that can reveal request details, session behavior, and troubleshooting data.Hard token capA fixed runtime limit on token use that helps control spend but can reduce context depth.Hard-coded keyA secret embedded directly in software instead of being generated, stored, and rotated securely.Hard-coded passwordA static credential embedded in software rather than set and rotated by administrators.Hard-coded secretA password or cryptographic key embedded directly in software instead of generated and stored securely.Hard-coded URLA fixed web address written directly into code or documentation instead of being configurable.Hardened imagesContainer images stripped down to reduce inherited software and attack surface.Hardened targetA real-world system with defenses, monitoring, and controls designed to resist intrusion.Hardening ReleaseA patch bundle focused on reducing exposure by fixing multiple security weaknesses.HardwareThe physical parts of a device, including its structure and internal components.Hardware accelerationUsing the GPU to handle graphics or video work more efficiently than the CPU alone.Hardware attackA technique that targets physical or low-level platform behavior instead of applications.Hardware boundaryThe practical limits of what a device is designed to accept.Hardware constraintsphysical limits such as memory, graphics, and processing capacity that shape what a device can do.Hardware emulationSoftware or firmware that imitates the behavior of a physical device.Hardware familya group of devices that share the same core processor platform.Hardware fidelityhow closely a software model matches the behavior of the real device.Hardware implanta hidden component added to a device to observe, alter, or exfiltrate data.Hardware integrationThe work of making separate physical components function together as one system.Hardware nonlinearityBehavior in electronic components where input and output do not scale cleanly, which can reshape signals.Hardware preservationthe practice of keeping older devices usable through repair, replacement, or restoration.Hardware refresh cycleThe period between one generation of equipment and the next replacement wave.Hardware requirementa physical component needed before a project can be used.Hardware reusethe practice of giving older equipment a second life in a new role.Hardware RevisionA specific version of a physical device that may require its own firmware branch.Hardware scalingthe process of making a technology work consistently as systems grow larger or more complex.Hardware Security Module (HSM)A device designed to store and use cryptographic keys in protected hardware.Hardware startupa young company building a physical product, often before it has stable manufacturing and distribution.Hardware supportThe set of device-specific components and maintenance needed for an operating system to run reliably and securely.Hardware transparencyThe ease with which a device’s workings can be inspected.Hardware versionA specific revision of a device model, often important because firmware must match it exactly.Hardware visibilityThe degree to which a system’s internal behavior can be inspected and understood.Hardware walletA physical device designed to keep cryptocurrency private keys offline and approve transactions securely.Hardware watchdogA reliability mechanism that can reboot a device if keepalive signals stop arriving.Hardware-backed authorizationA control model where a physical security key helps verify approval for a specific action, not just a login.Hardware-backed passkeyA passkey stored or protected by dedicated hardware, such as a security key.Hardware-backed securityProtection features anchored in dedicated device components that help isolate sensitive operations.Hardware-based watchdogA monitoring mechanism in hardware that can observe behavior and enforce limits outside the main application path.Hardware-enforced memory isolationA protection model where chip-level mechanisms restrict which privileged components can access specific memory regions.Hardware-rooted trustSecurity features built into hardware to help verify system integrity and protect sensitive workloads.Harmonic distortionUnwanted frequency components that alter the shape of an AC waveform.Harmonic filterA circuit or device used to reduce selected harmonic frequencies in a power system.Harmonised standardsTechnical standards that help turn legal requirements into measurable compliance practices.HarmonizationThe process of aligning rules or standards so they fit together more consistently.HarnessThe software scaffolding that connects a model to tools, memory, guardrails, and execution.Harvest-Now, Decrypt-LaterA threat model where encrypted data is collected now and decrypted in the future if stronger computing becomes available.Hash claimA unique identifier used to label or track a reported incident.Hash disclosureA flaw where authentication data derived from a password can be exposed during login processing.Hash IDa unique identifier used to track a specific post or record.Hash indicatora unique string recorded with a post or file to help identify it.Hash-based detectionA security method that identifies files by their cryptographic fingerprint, which works best when the file stays unchanged.HashingA cryptographic method that produces a fingerprint used to check whether data changed.Hawthorne EffectA bias in which people change behavior because they know they are being observed.HazmatShort for hazardous materials, substances that can pose health or safety risks.HBM4A next-generation high-bandwidth memory standard designed to feed AI accelerators with faster data movement.HCMHuman capital management software that manages employee records, HR workflows, and workforce data.HCSAA developing certification scheme for high-criticality OT components.HDABHealth Data Access Body, the national body that handles access decisions for secondary use.HDF5A structured data format widely used in scientific and ML workflows, with parsing logic that can become risky when inputs are untrusted.HDMIA common digital connection standard for carrying video to screens.Head unitThe vehicle's central infotainment computer, often managing apps, media, navigation, and network connectivity.HeadcountThe number of employees in an organization or business unit.Header checkA review of response headers to see how access rules are applied.HeadlessRunning without a local display or interactive front end.Headless architectureA design that separates the user interface from backend logic so systems can be accessed through APIs or other machine-facing interfaces.Headless browsera browser that runs without a visible interface, often used for automation.HeadnoteAn editorial summary attached to a legal opinion, created by a publisher rather than written by the court.Headphone outputThe part of a device that sends audio to headphones or speakers.Health CheckerA Microsoft script that reviews Exchange Server configuration and helps administrators validate server state after updates.Health claim substantiationEvidence required to support statements about medical or wellness benefits.Health Data Access Bodythe body that reviews requests to reuse health data.Health data exposureRelease of medical or treatment-related records that can raise privacy and compliance risk.Health data holderAn entity that controls or maintains health data and has governance duties over it.Health information exchange (HIE)A system that supports the sharing of clinical information between healthcare organizations.Healthcare governancerules and controls that define how clinical tools are approved and used.Heap exhaustionA condition where memory is consumed until an application can no longer process requests reliably.Heap out-of-bounds readA bug where a program reads beyond a valid heap buffer, which can leak adjacent memory contents.Heap-buffer-overflowA memory bug where a program writes past the end of a heap-allocated buffer, often causing crashes or corruption.Hearing aidsdevices designed to improve hearing by shaping sound for the wearer.Heart rate monitora device that measures pulse and sends the reading to another system or display.Heartbeat trafficRegular device communication used to show that a system is online or functioning.HeartlandMackinder’s theory that control of a central strategic zone can shape broader power.Heat buildupThe accumulation of thermal energy in or around a material.Heat cost allocatorA device that helps apportion heating costs across units or radiators.Heat domeA weather pattern associated with prolonged extreme heat over a region.Heat pumpA system that transfers heat from one location to another.Heat recoveryReusing waste heat from computing systems for other building or industrial needs.Heat shieldA protective layer built to absorb extreme heat during atmospheric return.Heat transferThe movement of thermal energy, which changes when air is removed from the environment.HEDISHealthcare Effectiveness Data and Information Set, a managed-care quality framework used to evaluate care measures.HEICA HEIF variant commonly associated with Apple devices and HEVC-compressed images.HEIC / HEIFModern image formats often used by phones and camera apps, which must be decoded by server or client software before display or conversion.HEIFA flexible image container format that can hold images, metadata, and related data structures.Helmholtz resonanceA resonance effect where air in a cavity and neck oscillates at a characteristic frequency.Help desk resetA support process that can become a sensitive access-control point.Help Desk SpoofingImpersonating support staff to gain trust and push a user toward unsafe steps.Helpdesk PlatformSoftware used to manage support requests, tickets, and customer communications.Helper processA secondary program launched by an application to perform a specific task, often sensitive to path and argument handling.Hermes AgentA terminal-oriented agent framework referenced in the reported attack stack.Hero-dependencyAn organizational weakness that appears when too much progress depends on one highly visible leader.HexagonA six-sided shape with equal or near-equal sides and angles.Hexagonal gridA geometric layout pattern that can be used to organize routing decisions on a board.HGFSVMware’s shared-folders subsystem that lets a host and guest exchange files.HHSThe U.S. Department of Health and Human Services, the federal agency responsible for health-sector cybersecurity programs and policy support.HHS breach portalThe federal reporting and review system used to track healthcare breach disclosures.Hidden functionalityUndocumented or unexpected code paths that bypass normal controls.Hidden MisalignmentA failure mode where a model appears safe during testing but behaves differently under other conditions.Hidden serviceA service hosted to avoid revealing its network location or operator details.Hidden triggerA condition that keeps malware dormant until specific runtime input or context is present.Hidden VNCA remote-control method that lets an operator interact with a device without obvious on-screen signs.Hidden VNC (HVNC)A covert remote desktop method that lets an operator control a system without a visible user session.Hidden vulnerabilitiesSecurity flaws that are not obvious to simple scans or surface-level review.Hidden WindowA MITRE ATT&CK technique where malicious activity is concealed from normal user view.Hidden-VNCA stealthy remote-control approach that operates a graphical session without obvious screen mirroring.Hide InfrastructureA technique for concealing malicious servers or endpoints inside ordinary-looking or noisy web properties.HIDE_OVERLAY_WINDOWSAn Android control that helps sensitive screens block third-party overlays.HideExclusionsFromLocalAdminsA policy setting that can conceal exclusions from local administrator views.Hierarchythe formal and informal ranking that shapes influence and decision-making.High cybersecurity thresholdA capability level indicating a model may meaningfully accelerate serious cyber operations.High severity vulnerabilityA flaw considered urgent to fix because it may create significant security risk.High voltageelevated electrical potential used to drive current through a circuit or component.High-assurance programA more tightly controlled research model with stronger vetting.High-availability deploymentA redundant setup designed to keep services running during maintenance or failure.High-availability pairTwo linked systems configured so one can take over if the other fails or is taken offline.High-bandwidth memoryA memory type designed for very fast data transfer, important for compute-heavy AI workloads.High-blast-radius changeA modification that could cause broad operational impact if it fails.High-density colocationA specialized facility built to support power-hungry, heat-intensive computing systems.High-level trainingAdvanced education or professional upskilling designed to build specialized, job-relevant capabilities.High-risk suppliera vendor subject to closer scrutiny because of perceived security or dependency concerns.High-risk systemAn AI use case that can affect rights, safety, or important decisions and therefore faces added compliance requirements.High-trust intermediaryA component that sits between users, networks, or services and is trusted to handle sensitive traffic or identity decisions.High-trust workflowA process that permits fast handling because the request appears authoritative.High-voltage transmissionThe part of the power grid that moves electricity over long distances at elevated voltage levels.HindsightJudging a prediction after events have already unfolded.HingeA joint that lets one part rotate while remaining attached to another.Histological imageAn image of tissue prepared and stained for microscopic examination.Histopathological diagnosismedical diagnosis based on microscopic examination of tissue samples, often aided by digital imaging tools.Historical contextThe surrounding circumstances that give an old image its significance.Historical referenceA product mentioned for context even though it is no longer operating.History.dbSafari’s local browser history database.HKEY_CLASSES_ROOTA merged registry view combining machine-wide and per-user Classes data.HKEY_CURRENT_USERThe registry view for the currently logged-in user, rebuilt from that user’s profile hive at logon.HKEY_USERSA registry area where loaded user hives appear during a Windows session.HMAC-derived authentication materialKeyed cryptographic data produced during an authentication handshake that may be useful for offline password attacks.HMAC-SHA256A keyed message authentication code used to verify message integrity and authenticity.HMI (Human-Machine Interface)The screen or dashboard operators use to interact with and supervise industrial control systems.HOA recordshomeowner association files that can include payments, ballots, and identity details.HoldoverThe ability of a local clock to maintain usable time when external synchronization is lost.Holograman optical image designed to produce a three-dimensional visual effect.Home caremedical or support services provided where the patient lives.Home computera computer designed for personal or household use rather than institutional work.Home directoryThe main per-user folder on Unix-like systems, often used for personal files and settings.Home gatewayThe router or modem that connects a local network to the internet and manages traffic for connected devices.Home synthesisMaking a material outside industrial production settings, often as a hobby or experiment.Homebrew hardwareEquipment built by an individual or small group rather than mass-produced.Homebrew OSAn operating system built outside mainstream commercial development, often as a personal or small-team project.HomoglyphA character that closely resembles another character, often used in spoofing.Homoglyph attackA spoofing method that uses lookalike characters to imitate a trusted name.Homograph attackA spoofing method that uses visually similar characters to imitate a trusted name.Homomorphic encryptionA cryptographic method that allows computation on encrypted data without revealing the plaintext.Hooking frameworkA system that lets software intercept app behavior, sometimes abused by malware.HooksWordPress execution points that let code run during normal processing of a page or request.HopperA disassembler and decompiler used for binary analysis, described as supporting AI-assisted integration.Horizon CatalogSnowflake’s governance layer for applying policy, lineage, and AI controls across data and agentic workflows.Horizon modelA planning method that separates short-term, mid-term, and long-term initiatives so each is judged on the right timeline.Horizontal Privilege EscalationWhen one user reaches another user’s data or functions at the same privilege level.HorizontalPodAutoscalerA Kubernetes controller that changes pod replica counts based on observed metrics.Hospital Information System (HIS)Software used to manage core hospital workflows such as records, admissions, and coordination.Host accessA runtime setting that determines how much access script code has to the underlying system and platform APIs.Host CommandA command that runs on the local machine rather than inside a constrained container or workspace.Host confirmationAn approval step intended to validate an action during a remote support session.Host filesystemThe files stored on the main operating system outside the guest environment.Host filesystem mountA shared directory or path from the host OS made visible inside a VM or container.Host kernelThe shared core of the operating system that all containers on a machine depend on.Host kernel memoryMemory used by the operating system kernel, which should not be writable by a guest VM.Host keyThe server public key SSH clients use to verify they are talking to the intended server.Host networkingThe network stack and packet-processing logic running on the physical or shared host, not inside the guest alone.Host overwriteA condition where a file on the host system is replaced or modified by an external process.Host PCThe desktop computer that controls or supervises the mobile agent workflow.Host processThe main running program that a sandboxed component sits inside.Host softwareThe component installed on the machine being controlled, often enabling unattended access.Host systemThe main computer or operating system that runs virtualization software and guest machines.Host validationChecks malware uses to judge whether it is running in a target environment or a sandbox.Host-based card emulationAndroid feature that lets an app imitate a payment card over NFC.Host-information gatheringCollecting details about a system, such as software and usage signals, to shape follow-on actions.Host-key verificationA check that helps confirm a client is talking to the expected SSH server and not an impostor.Host-level trustThe assumption that the physical host and its virtualization layer remain reliable and isolated from guest compromise.Host-memory disclosureThe unintended exposure of memory contents from the host system to a less-privileged context.Host-side write primitiveA capability that lets an attacker write or overwrite files on the host system.Hosted business applicationsVendor-managed or cloud-based systems used to store or process organizational records.Hosted deploymentA vendor-managed software instance operated on the provider’s infrastructure.Hosted domaina site or subdomain managed on a provider platform.Hosting planA service package that provides the infrastructure needed to run a website.HostnameThe readable name used to locate a server on the internet, such as a domain or subdomain.Hostname validationSecurity checking that compares a name against policy before a network action is allowed.Hot endThe printer assembly that heats filament so it can be pushed through the nozzle.Hot fixA targeted vendor repair applied to address a specific vulnerability without a full upgrade.Hot pathThe part of a system where decisions must happen quickly because delays affect operations.Hot walletAn internet-connected crypto wallet used for fast transfers, but more exposed than offline storage.Hot-endThe heated part of a 3D printer that melts material before it is pushed through the nozzle.HotendThe heated part of a 3D printer that melts filament before extrusion.Hotspota feature that lets a phone share its mobile connection with other devices.Household rulea policy that limits use of a subscription to a specific home or network.HR filesemployee records that can increase privacy and legal exposure if threatened or disclosed.HR PlatformA system used to manage employee records, personnel workflows, and related access processes.HR softwareBusiness systems used to manage employee and workforce records.HSCCThe Healthcare and Public Health Sector Coordinating Council, an industry-led body that helps shape healthcare cybersecurity coordination.HSMHardware Security Module, specialized hardware used to protect keys and perform cryptographic operations securely.HSTSHTTP Strict Transport Security, a web policy that tells browsers to use HTTPS only when connecting to a site.HTML attribute contextA place in HTML where data is placed inside an attribute value and must be encoded carefully.HTML commentHidden markup in an email or webpage that is not shown to the user but may still be processed.HTML emailAn email format that uses HTML for styling and layout, allowing content to be rendered visually.HTML exportA feature that converts application data into an HTML document for viewing or archiving.HTML export pathThe application flow that turns content into HTML files for viewing or archiving.HTML mail renderingThe process an email client uses to display formatted messages, sometimes through browser components.HTTP 403A web status code meaning the server understood the request but refused to authorize it.HTTP 529A service-specific overload response used to signal that the server is temporarily unable to process requests.HTTP DDoSA flood of web requests meant to stress the application layer.HTTP desynchronizationA flaw where different HTTP components disagree about request boundaries, creating parsing mismatches.HTTP GETA web request method used to retrieve data, often restricted in controlled environments.HTTP identity headerA request header that can carry a username-like value, but must never be trusted blindly.HTTP login sessionThe traffic exchanged during a web-based sign-in, which can expose credentials if it is captured and not adequately protected.HTTP proxyA middle layer that forwards web requests and responses between a client and a server.HTTP PUTAn HTTP method used to create or replace a resource on a server.HTTP request analysisReviewing web request details to spot suspicious or unusual patterns.HTTP request parsingThe process of interpreting incoming web requests before they reach application logic.HTTP request processingThe logic a server uses to read, validate, and respond to web requests.HTTP transportA web-based communication path used to send requests and responses between clients and servers.HTTP-based C2Malware communications that use web-style requests and responses.HTTP/1.1A widely used older web protocol that many origins still use behind proxies and CDNs.HTTPS certificateA digital credential used by browsers to verify a site and encrypt traffic.HTTPS interceptionInterference with encrypted web traffic, often by manipulating certificates or local trust.Hub clusterThe central RHACM management cluster where control-plane components and management workflows run.Hub-and-spoke modelA service structure where central nodes support multiple connected peripheral sites.HUDHeads-up display, the on-screen interface that shows game status and information.Human approvalA control step that requires a person to confirm sensitive or high-impact actions before they run.Human authorizationThe requirement for a person to approve an action before a system engages a target.Human capitalthe skills, knowledge, and experience that people bring to an organization.Human Capital ManagementThe software area that handles workforce-related processes, including employee administration and related records.Human Capital Management (HCM)Software used to manage HR functions such as hiring, skills tracking, workforce planning, and employee records.Human contributionThe creative input made by a person that can determine whether a work is protectable.Human corroborationA review step where a person checks the evidence behind an automated output before acting on it.Human demonstrationTraining material built from people performing tasks so machines can learn patterns of action.Human fallbackA design pattern that routes uncertain, risky, or high-impact actions back to a person for review or approval.Human on the loopA supervision model where people monitor AI behavior and can intervene when needed.Human perceptionthe way the brain interprets light, motion, and continuity.Human qualitiesCore interpersonal and cognitive traits such as judgment, communication, and collaboration.Human resourcesthe function that supports people, roles, training, and organizational alignment during change.Human review gateA checkpoint where a person must approve or inspect an agent’s action before it proceeds.Human tissueCells and supporting structures that make up organs and body systems.Human traffickingcoercive movement or control of people for exploitation.Human verification bottleneckThe point where expert review, not machine output, becomes the slowest step in a security workflow.Human-AI complementarityA work model where AI supports human judgment instead of replacing it.Human-AI oversightA workflow design where people retain review and decision authority over AI advice.Human-centric AIAI designed to support people and respect fundamental rights, rather than overriding them.Human-computer interactionThe study of how people use and experience computing systems.Human-computer interfaceThe point where a person interacts with a machine or digital system.Human-factor riskSecurity exposure created by behavior, judgment errors, or lack of awareness rather than by software alone.Human-in-the-loop (HIL)A workflow where a person reviews or approves an AI output before action is taken.Human-in-the-loop approvalA safeguard where a person must confirm sensitive actions before they execute.Human-machine interactionThe study of how people control and interpret machine behavior.Human-operated phishingA campaign where an attacker actively guides victims through the deception instead of relying only on automation.Human-operated phishing platformA phishing setup where operators actively adjust prompts, timing, or follow-up steps instead of relying on a static page alone.Human-rights associationsCivil society groups that monitor rights, freedoms, and state power.HVDhosted virtual desktop used for centralized work access and internal application delivery.HVNCHidden virtual network computing, a remote-control method that can keep attacker activity out of sight.Hybrid algorithmA design that combines more than one technique to meet performance or size goals.Hybrid certificateA certificate design that combines traditional and post-quantum cryptographic components during migration.Hybrid certificate chainA transition model that combines classic and post-quantum elements, while RFC 9794 also distinguishes mixed, traditional, and parallel chain approaches.Hybrid computeA setup where quantum hardware works alongside CPUs and GPUs instead of replacing them.Hybrid factoryAn industrial environment where human labor and automated systems operate together.Hybrid financea funding mix that combines more than one capital model for risky projects.Hybrid identityAn environment where on-premises directory systems connect to cloud-based identity services.Hybrid infrastructureAn IT setup that combines on-premises systems with cloud services to balance control, cost, and performance.Hybrid measurescontrols that combine preventive design with active operational response.Hybrid modelA setup that combines Agile practices with traditional control structures.Hybrid OperationsCampaigns that combine cyber activity with information pressure, disruption, or psychological effects.Hybrid platforma product that combines security analytics with operational network visibility.Hybrid ProfessionA role that blends skills from different disciplines, such as creativity, operations, compliance, and technical oversight.Hybrid quantum-AI workloadA workflow that combines quantum hardware with classical AI or HPC systems for different parts of a computation.Hybrid Satellite NetworkA satellite environment that combines independently owned or operated components with different assurance levels.Hybrid sovereign architecturea mixed deployment approach that places sensitive workloads in restricted environments and other services in standard cloud regions.Hybrid systema project that combines software and hardware into one experience.Hybrid teamA workgroup made up of people and automated systems working together.Hybrid workflowA process that combines analog and digital photographic steps.Hydrophilicdescribing a surface that attracts and moves water or other liquids.HygrometerA sensor that measures humidity in the air.HyperautomationThe combination of automation, orchestration, observability, and AI across connected business processes.HypercareA short stabilization period after launch when support is intensified to resolve early issues quickly.HyperscaleExtremely large data-center operations built to support massive compute demand.Hyperscale data centerA very large facility built to support massive cloud and compute workloads, often at high power density.HyperstimulationA state where repeated digital cues compete for attention and make sustained focus harder.Hypervisor EscapeA class of attack where code crosses from a virtual machine to the underlying host.Hypervisor-protected Code Integrity (HVCI)Microsoft’s technical name for memory integrity, which helps enforce code integrity for kernel-mode components within the VBS-isolated environment.Hypothesis generationThe process of proposing testable scientific ideas based on existing evidence or patterns.Hypothesis spaceThe full set of possible explanations, molecules, or targets that a research model can explore.Hypothesis-driven investigationA hunt method that starts with a testable suspicion and checks evidence against it.I/Q dataRaw in-phase and quadrature samples used to represent radio signals digitally.IA-64Intel’s 64-bit instruction-set architecture used for the Itanium line.IaaSInfrastructure as a Service, a cloud model where customers manage more of the operating and security stack.iACLAn infrastructure access control list used to restrict traffic to sensitive network services and ports.iACLsinfrastructure ACLs used to allow only required management and control-plane traffic.IAM access keyA long-term credential used to authenticate AWS API requests.IAM Execution RoleThe AWS permission set an application uses to act on resources and call services.IAM identityAn AWS user or role that has permissions attached through policies.IAM userA named AWS identity that can receive permissions and programmatic credentials.IASTInteractive Application Security Testing, a method that examines security behavior inside a running application.IBAN swapFraud that replaces the intended bank account number during a payment process.IBM Consulting AdvantageIBM’s AI-enabled consulting platform for delivery, modernization, and operations work.IBM iIBM's integrated operating system for Power Systems, designed around tightly controlled object and file authority.IBM PCThe original personal computer platform that shaped a large compatibility ecosystem.IBM ZIBM's mainframe platform family used for mission-critical business systems.IBPBA mitigation that can flush branch predictor state across security boundaries.IC designsemiconductor engineering work that often depends on sensitive files, internal systems, and trusted suppliers.ICAO 9303The international standard framework for machine-readable travel and identity documents.Ice analysisInspection or measurement used to understand ice conditions.iCloud Private RelayAn Apple privacy feature designed to hide a user's IP address and encrypt DNS-related browsing data.ICMPA network protocol used for diagnostics like ping, but sometimes abused as a covert carrier.IcosahedronA 20-faced geometric solid often used in visual and mechanical design.ICT incidenta disruption or degradation affecting information and communication technology services.ICT providera company delivering information and communications technology services.ICT resiliencethe ability of digital systems and services to keep functioning or recover quickly after disruption.ICT riskThe risk that information and communication technology failures, misuse, or attacks will disrupt operations.ICT spendingbudget allocated to information and communications technology operations, upgrades, and maintenance.ICT supplierA company that provides information and communications technology products or services to support operations.ICT-SCRMInformation and Communications Technology Supply Chain Risk Management, the supply-chain security approach used for technology systems and services.IdentificationA one-to-many search that tries to determine who an unknown person is by comparing against a larger database.Identità onlineThe version of self that is built, shown, and interpreted through digital spaces.IdentityThe distinct account or credential used to identify which agent performed an action.Identity activity reviewchecking accounts and logins for suspicious access.Identity and accessthe controls that decide who can sign in and what they can do.Identity and authorizationControls that verify who a system is and what actions it is allowed to perform.Identity and authorization layerThe part of a system that verifies users and controls what they can access.Identity assertionA signed statement used in federated authentication to convey that an identity check has already occurred.Identity attributionThe ability to tie an action, session, or event to a verified user account.Identity backupsDedicated recovery copies for directory and authentication systems.Identity churnthe repeated creation and disposal of identities to avoid detection.Identity cloningFraud method that imitates a real person using copied media and personal signals.Identity compressionA tactic that turns a complex cause into a simple, repeatable symbol or label.Identity confidenceThe current level of trust a system assigns to a user or session.Identity credentialA token that helps confirm who someone is, such as a badge or pass.Identity data leakunauthorized publication of personal information that can fuel fraud and phishing.Identity Dependencies Grapha relationship map of identities, permissions, sessions, and trust paths.Identity document replacementThe administrative process of reissuing documents after loss, theft, or security concerns.Identity driftA shift where an identity ends up with more authority than its intended role requires.Identity event reviewChecking accounts, logins, and access activity for suspicious changes.Identity evidenceA document or record used to prove a person’s identity, such as a driver’s license.Identity FabricAn architectural layer that connects identity systems and helps unify policy and visibility across environments.Identity farmingcreating large numbers of fake or disposable accounts for abuse.Identity flowthe steps used to verify a user, account, or session during login or checkout.Identity gatewayA service or interface that helps mediate user authentication and account access.Identity governance and administrationProcesses for reviewing, approving, and removing user access.Identity integrationThe process of merging login, access, and authentication controls across environments.Identity keyA cryptographic key used to help confirm that a chat contact is really who they claim to be.Identity Management ToolSoftware that helps control accounts, logins, and access in an organization.Identity mappingThe internal association between an alias and the real account or inbox behind it.Identity matchingThe process of linking data points to the same person across different systems.Identity middlewareSoftware that brokers login, policy, or directory integration between users and applications.Identity misuseThe unauthorized use or impersonation of credentials or identity information to access systems.Identity monitoringA service that watches for signs a user’s personal data may have appeared in suspicious places.Identity networkA system of digital credentials and access rules that helps define who can use a service.Identity policyRules that decide whether a user, device, or session should be trusted.Identity postureThe state of a user account and its authentication strength, including factors such as MFA and account assurance.Identity profile exporta bundle of account details and permissions that can reveal organizational structure.Identity protectionServices that help monitor or reduce the risk of personal data misuse.Identity Provider (IdP)The enterprise system that authenticates users and enforces access policy, such as a corporate SSO platform.Identity recordspersonal files such as IDs or social security data that can fuel fraud.Identity recovery workflowThe process used to restore or reset access, often a high-risk target for attackers.Identity resiliencethe ability to recover identity systems and restore trust after disruption.Identity reuseusing the same identifier across multiple services.Identity reviewchecking whether accounts, credentials, and permissions still match legitimate need.Identity riskthe danger that login credentials or admin accounts may be misused.Identity serviceslogin and account infrastructure that defenders often check during incident verification.Identity sessionAn authenticated access state that can be valuable to attackers even without a stolen password.Identity signalsaccount and access indicators that help validate suspicious activity.Identity sprawltoo many accounts, roles, or permissions spread across tools and services.Identity stackThe set of systems that manage users, devices, and access decisions.Identity storeA database or directory that holds core user attributes, affiliations, and account information.Identity traceA record or clue tied to an account, device, or login used in an investigation.Identity validationthe process of checking whether suspicious activity, access, or disclosures match real account or system behavior.Identity verification dataDocuments or biometrics used to confirm a person’s identity, often highly sensitive if leaked.Identity visibilityThe ability to track identities, credentials, and permissions across an environment in near real time.Identity-aware accessAccess decisions based on verified user or service identity, not network location alone.Identity-aware policyAccess rules that use user, device, or workload context instead of simple network location.Identity-Aware ProxyA gateway that checks identity and context before allowing access to protected services.Identity-based accessA model that grants permissions based on verified identities instead of static shared secrets.Identity-Centric SecurityA defense approach that treats user, machine, and service identity behavior as a primary attack surface.Identity-document datarecords such as passports or driver’s licenses that can increase fraud risk.Identity-document theftUnauthorized capture of passports, IDs, or similar personal records.Identity-First SecurityAn approach that places identity at the center of access control and security policy.Identity-layer access controlPermissioning that ties actions to a specific digital identity and its scope.Identity-proofingThe process of confirming that a digital account belongs to a real person.Identity-related functionsFeatures that help confirm who a user is before granting access to services.Identity-resolution pathThe part of an application that maps users, aliases, or addresses to records.Identity-rich dataPersonal or role-based information that can help an attacker tailor convincing outreach.Identity-rich recordsPersonal data sets that can raise privacy and fraud risk.Identity-rich systemsEnvironments that hold accounts, onboarding records, or employee data useful to attackers.Identity-theft riskThe chance that personal data could be misused to impersonate or defraud someone.Idle storageA period when equipment is left unused, which can affect later performance.IDNAn internationalized domain name that can use non-ASCII Unicode characters.IdPIdentity Provider, the system that authenticates users and issues access to applications or services.IDSA system that monitors traffic and events for signs of suspicious activity.IEC 60870-5-104A telecontrol protocol used for networked supervision and control in industrial and utility environments.IEDIntelligent Electronic Device, a field device commonly used in substations and other OT environments.Iframe sandboxingA containment method that restricts what embedded content can do inside the browser.iGamingOnline gambling services delivered through digital platforms.Ignitionthe point at which heat or energy starts a combustion reaction.IIS machine keysCryptographic values used by ASP.NET and IIS to protect application state and validate trusted requests.IKEInternet Key Exchange, the protocol commonly used to set up and manage IPsec security associations.IKEEXTThe Windows service component that implements Internet Key Exchange extensions for IPsec setup.IKEv2 SA_INITThe early stage of an IKEv2 handshake used to begin secure tunnel negotiation before normal access is established.iLEAPPA forensic tool used to examine iOS artifacts and extractions.Illegal tappingUnauthorized connection to a power line to draw electricity outside the billing system.Illicit tradeThe exchange of goods, services, or data that is illegal under applicable law.IlliquidityThe difficulty of exiting an investment quickly without a price penalty.Image integrityThe assurance that a container image has not been altered and still matches the trusted publisher’s version.Image Optimization APIA server-side feature that resizes, converts, or compresses images for faster delivery.Image reconstructionSoftware processing that turns raw sensor data into a finished image or video.Image scanningautomated analysis of an image for vulnerabilities, packages, and configuration issues.Image sensorThe part of a camera that converts incoming light into a digital signal.Image signingA verification method that attaches cryptographic proof to an image so its origin and integrity can be checked later.Image trackingThe process of following an object's position across successive frames.Image trustThe confidence that a container image came from a known, safe, and intended build source.Image VersionA maintained release instance of a container image, often tied to rebuilds, patches, or platform variants.Image-based abuseNonconsensual creation, sharing, or threat of sharing intimate images, including synthetic content.ImageMagickA server-side image processing suite that can convert, inspect, and transform many image formats.ImageResponseA Next.js API for generating server-side images from JSX and CSS, often used for Open Graph previews.ImagickA PHP extension that connects WordPress to ImageMagick for image and document processing.Imaging AISoftware that helps interpret medical images and support clinical decisions.Imaging deviceHardware designed to record visual information with usable clarity and fidelity.IMEInput Method Editor, software that lets users type complex scripts such as Chinese on a standard keyboard.Immediate debitA payment method where the amount is taken from the account at once.Immersion coolingA cooling approach that submerges servers in dielectric fluid to dissipate high heat loads.Immersive environmentsDigital or simulated settings that let learners practice tasks in realistic scenarios.Immersive trainingTraining delivered through interactive, simulated environments designed for practice and learning.ImmobilizerA vehicle function that prevents the engine from starting without proper authorization.Immutable identityA permanent identifier that does not change when a repository name changes.Immutable referenceA fixed identifier, such as a commit SHA, that cannot be changed later.Impact measurementThe practice of checking whether a system actually improves service, quality, speed, or cost.Impedance mismatchA situation where two systems interpret the same input differently, creating a security gap.Impersonation attackA social engineering tactic where an attacker poses as a trusted entity to obtain access or data.Impersonation campaigna scam that borrows a known name or identity to seem credible.Impersonation ContentMessages, pages, or templates designed to look like a trusted brand or organization.Impersonation protectionControls designed to reduce the risk of someone posing as a trusted person in a meeting.Impersonation warningan alert that flags a possible identity mismatch during a call or meeting.Implantable Cardiac MonitorA device placed under the skin to record heart rhythm events over time.Implementation guidanceNon-binding material that helps explain how a law may be applied in practice.Implementation varianceSmall differences in how software behaves across platforms or environments.Implementing decreesNational legal acts used to align domestic rules with a broader EU regulation.Implicit feedbackBehavioral signals such as clicks, pauses, or viewing time that can be used for model training.Implicit trustA security flaw pattern where a system assumes peer messages are trustworthy without sufficient validation.Import TableA Windows PE structure that lists external functions a program expects to call.Important subjectA NIS2 category that is still covered, but under a different set of obligations.Impossible TravelA sign-in anomaly where one account appears in far-apart locations too quickly to be physically plausible.Imposter websiteA fake site built to mimic a real brand or download page and mislead users.Impressiona recorded display event that may not equal meaningful attention.Improper AuthorizationA vulnerability class where a system fails to enforce access control correctly.Improper certificate validationA flaw where software fails to correctly verify a digital certificate, weakening trust in the connection.In silicoComputer-based analysis or simulation performed before laboratory testing.In-circuit readA method of reading memory while the chip stays on the board.In-game economythe system that governs earning, spending, and managing game currency.In-line enforcementControls applied during a live request, before data is returned.In-memory directoryA directory instance held in application memory, often used for testing or local authentication flows.In-memory implantMalicious code that runs in RAM rather than as a clearly visible file on disk.In-memory injectionA technique that places code directly into a live process or runtime space.In-memory shellcode executionRunning payload code directly in RAM, which can reduce disk artifacts.In-motion useOperation of a terminal while it is moving, which can be limited by plan, hardware, or policy.In-orbit validationTesting technology in the actual space environment to confirm that it works beyond laboratory conditions.In-process contextvisibility from inside the application process, where runtime activity can be examined more closely.Inactive themeA theme installed on a WordPress site but not currently active, still present on disk.iNaturalistA platform for sharing observations of nature and getting help with identification.Inauthentic amplificationRepeating or boosting a message through fake, automated, or deceptive accounts to make it appear more credible.Inauthentic behaviorCoordinated or automated activity that tries to fake genuine engagement, identity, or popularity.Inbound connectorA trust mechanism that identifies approved mail sources by IP address or certificate.Inbox ruleAn automated email action that can move, hide, delete, or forward incoming messages.Inbox rule abuseMalicious email filtering rules used to hide, delete, or redirect messages.Inbox rulesEmail automation settings that attackers may abuse to hide messages or forward mail.Incentives to shareThe rewards or penalties that influence whether people contribute information to a system.Incident attributionthe process of linking a security event to a specific actor or campaign.Incident coordinationthe process of organizing response roles, communication, and escalation during a cyber event.Incident drillA practice exercise for testing detection, containment, and recovery steps.Incident escalation workflowThe process for routing a security event to the right responders quickly and consistently.Incident loggingstored activity records that help reconstruct security events.Incident logsRecords of security events that help reconstruct what happened and when.Incident readinessthe ability to verify claims, preserve evidence, and respond quickly.Incident recordsLogs and notes that help reconstruct what happened after an attack.Incident response exercisea controlled simulation used to test how teams detect, communicate, and recover from a cyber event.Incident response planningThe preparation of procedures for detecting, containing, and recovering from cyber incidents.Incident response retainera prearranged contract for cyber incident help, often including recovery and coordination services.Incident reviewThe process of checking logs, accounts, and systems after a security claim.Incident taxonomyA classification scheme used to group security or reliability events into consistent categories.Incident TrailThe logs, traces, and artifacts used to reconstruct what happened during a security event.Incident-response proceduresstandard checks used to validate exposure, scope, and readiness after a security alert.Incident-response processThe defined steps a team follows after a security event is detected.Included servicesExtra features bundled into a plan, such as add-ons or usage benefits beyond basic connectivity.Income distributionThe way earnings are spread across people or households in an economy.Incoming emailA feature that processes mail to create or update project objects.Incoming email tokenA secret tied to a user-specific email address that can authenticate email-based actions in GitLab.Incomplete patchingA fix that leaves some vulnerable states or code paths still reachable.Incorrect permissionsAn access-control mistake where file or service rights are set too broadly or too narrowly.Incremental improvementSmall, steady gains rather than a single major breakthrough.IndemnityA contract term that shifts certain financial losses or claims from one party to another.Independent AssessmentA third-party evaluation of an AI system’s safety, security, or compliance posture.Independent auditingExternal review used to check security controls, evidence, and governance without relying only on internal claims.Independent authoritya regulator or oversight body that can supervise safety and compliance without being controlled by the operator.Independent controlsSecurity checks outside the model itself, such as logging, policy enforcement, and human review.Independent operatora provider that manages security tools without being tied to one hardware maker.Independent professionalA self-employed worker who manages business costs without a larger corporate structure.Independent supervisionOversight by a separate reviewer or evaluator intended to reduce self-attestation bias.Independent verificationExternal review used to check whether stated protections are actually in place.Independent verifierA third party that tests or reviews a system outside the development team.Indexa logical collection of documents in Elasticsearch, similar to a database table in concept.Indexationa pricing method that ties a retail rate to a market benchmark.Indexed pricinga rate that changes according to a market-linked formula.Indexed-price planA contract whose cost follows a market reference or formula.IndexingThe process search engines use to store and surface web content in results.Indicator correlationmatching clues across systems to test whether they belong to the same event.Indicator lampA visual signal used to show status or activity at a glance.Indicator RemovalTechniques used to erase logs, files, or other evidence of malicious activity.Indicator sharingexchanging clues that help identify related malicious activity.Indicizzazionea pricing method that follows a market benchmark or index.IndictmentA formal criminal charge, not proof of guilt.Indirect costsSupporting expenses that are harder to attribute, such as maintenance, monitoring, and coordination.Indirect disclosurewhen a document reveals sensitive details through context or inference rather than explicit fields.Indirect measurementLearning about a phenomenon through its effects rather than direct observation.Indirect syscallsA stealth technique that tries to avoid common user-mode monitoring by reaching system calls in less visible ways.Indirect system callA way to invoke Windows kernel services while trying to bypass user-mode monitoring.Inductora component that stores energy in a magnetic field and can vibrate.Industria 4.0A model of industrial digitization built around connected equipment, data collection, and automation.Industrial automationtechnology and services that support manufacturing processes and plant operations.Industrial Automation and Control Systems (IACS)The systems that run and coordinate industrial operations.Industrial basethe manufacturing capacity and skilled workforce needed to produce strategic equipment.Industrial capacityThe ability to turn research into reliable, scalable real-world use.Industrial competenciesspecialized technical knowledge and capabilities used in production or engineering.Industrial Demilitarized Zone (IDMZ)A network buffer that separates enterprise IT from production OT to reduce lateral movement.Industrial designthe practice of shaping products so they are functional, recognizable, and visually distinctive.Industrial ecosystemThe network of suppliers, workers, infrastructure, and customers needed to support production.Industrial electronicsspecialized hardware and systems used in engineering or research settings.Industrial espionageTheft of trade secrets or proprietary information for competitive or economic gain.Industrial Ethernetnetworking gear used in industrial settings where reliability and trust are important.Industrial expertisethe engineering and manufacturing capability needed to build and support complex systems.Industrial GPUA graphics processor intended for environments that often prioritize long lifecycle support and stable deployment.Industrial IoT (IIoT)Connected industrial devices and systems that collect, exchange, and act on operational data.Industrial monitoring toolSoftware used to observe equipment health, status, or performance in a plant environment.Industrial pilota limited real-world trial used to test whether a technology can perform reliably in production conditions.Industrial planta facility designed for production at commercial scale.Industrial ProtocolsCommunication standards used for data exchange in industrial environments.Industrial realismA practical view that security must operate within real-world limits such as budget and staffing.Industrial robot standardA safety or integration rule that helps organizations deploy robots in factories and shared workspaces.Industrial roboticsmachines and control systems used to automate repetitive or precise manufacturing tasks.Industrial servicesbusiness support for equipment and operations that can be disrupted by cyber incidents.Industrial sovereigntythe ability to keep strategic capabilities, ownership, and decision power inside a national or regional ecosystem.Industrial strategya coordinated approach to investment, regulation, and sector development.Industrial suppliera company whose products or services support manufacturing, equipment, or production chains.Industrial supply chainthe network of suppliers and components needed to build and deploy a manufacturing system.Industrial wasteenergy or material lost through inefficient operations.Industrial-robotics suppliera company that supports manufacturing systems with specialized hardware or components.IndustrializationThe process of turning a prototype into a scalable product.Industrialization of innovationThe process of turning research results into usable, competitive products and services.Industry 5.0A policy and industrial concept centered on human-centric, sustainable, and resilient production.Inertial Navigation System (INS)A navigation subsystem that estimates position, velocity, and attitude from motion sensors such as gyros and accelerometers.Inference efficiencyThe ability to generate model output with less compute, lower latency, or both.Inference modeThe way a model is served, such as streaming or non-streaming use.Inference riskThe possibility that a model can derive sensitive information from inputs, metadata, or outputs.Inference serviceA system that runs a machine learning model and returns predictions, classifications, or structured outputs.Inference setupThe process of configuring hardware and software so a model can execute correctly on a system.Inference tieringRouting simple tasks to cheaper models and reserving stronger models for harder work.Infertility treatment centera sensitive healthcare service where privacy and continuity concerns are elevated.Influence-as-a-serviceA term used for outsourced influence campaigns that use automation and AI to support content, targeting, and account operations.Influence, narrative and enterprise sellingThe skill of building support for ideas before a formal decision.Information and consultationFormal processes requiring employers to share relevant details and receive worker input before major decisions.Information assetThe organization’s valued data, metadata, and related records that support operations and decisions.Information Collection Request (ICR)A formal package an agency submits for approval to collect information from regulated parties.Information DominanceThe ability to collect, process, and act on data faster and more accurately than an opponent.Information leakUnintended disclosure of data that should remain private or protected.Information leakageUnintended disclosure of sensitive details through speech, devices, or weak controls.Information operationA campaign that uses messaging to shape opinions, decisions, or behavior.Information overloadA condition where too much information makes messages harder to process and remember.Information resilienceThe ability of a movement or community to preserve context, accuracy, and continuity under pressure.Information securityThe practice of protecting trust, context, and communications from manipulation or abuse.Information Security Management System (ISMS)The framework an organisation uses to manage security policies, roles, and controls.Information sharing and analysis centerA sector-focused group that exchanges threat intelligence and defensive guidance among members.Information sharing and analysis center (ISAC)A trusted forum where organizations exchange threat intelligence and defensive lessons.Information valueThe benefit a data set provides to decisions compared with the cost of collecting, maintaining, and using it.Information-flow controlRules and technical measures that limit where data can move and who can see it.Information-stealing malwareMalicious code designed to collect credentials, tokens, or other sensitive data.Informational emergencyA situation where false or manipulated content can worsen confusion during a real-world crisis.Informed consentA control principle that requires people to understand and accept how data is collected and used.Infostealer wormMalware that harvests sensitive information such as credentials; some variants may also self-propagate.Infotainment head unitThe in-car computer that handles media, navigation, connectivity, and apps.InfraredLight beyond the visible spectrum, commonly used by remote controls.Infrared spectrumLight wavelengths beyond visible red, usually invisible to humans.Infrastructure ACLA network access rule set used to limit which systems can talk to a service.Infrastructure activationthe point at which attacker-controlled systems begin supporting a campaign.Infrastructure breachA compromise that affects the systems running a service, not just a single user account.Infrastructure compromiseThe takeover or abuse of domains, subdomains, web hosts, or related assets so they can be used for malicious activity.Infrastructure controlsPlatform-level restrictions used to slow, block, or monitor suspicious activity across a service.Infrastructure correlationThe process of linking activity sets through shared domains, certificates, hosting, or web assets.Infrastructure dependencyReliance on an external network or facility that can affect continuity if it changes.Infrastructure dumpa bulk export of backend data that can contain sensitive operational records.Infrastructure hackA practical modification or idea intended to improve how a physical system works.Infrastructure huntingThe practice of finding related malicious domains or servers by pivoting on technical fingerprints such as certificates, panels, and response patterns.Infrastructure incidentA security event affecting the systems that support a digital service.Infrastructure IndicatorA technical clue, such as a domain or IP, that may help analysts connect activity to prior malicious use.Infrastructure layerThe servers, networks, and services that support cyber activity.Infrastructure maintenancethe ongoing work needed to keep roads, lanes, or systems usable.Infrastructure MappingThe analysis of servers, domains, and related assets to infer operator behavior or organization.Infrastructure overlapReuse of servers, domains, or hosting patterns across campaigns, often used as a hunting clue.Infrastructure patternsRepeated technical choices in domains, servers, and delivery methods that help link campaigns together.Infrastructure responsibilityThe idea that safety must be built into platforms, products, and workflows, not left only to users.Infrastructure reuseThe reuse of servers, domains, or tooling across separate campaigns, which can complicate attribution.Infrastructure securityThe practice of protecting the physical and operational components that keep a network functioning.Infrastructure state fileA file that records deployed cloud or infrastructure resources and may include sensitive values.Infrastructure-as-codeA method for defining and managing infrastructure through versioned configuration files.Infrastrutture apertesystems designed for transparency, interoperability, and easier reuse.InheritanceA permission mechanism where folders and files receive access rules from parent objects unless overridden.Initial-access channelThe first path an attacker uses to reach a person, account, or environment.Injected JavaScriptCode added to a webpage after compromise, often used to change what visitors see or to load malicious content.Injection AttackA technique that inserts fake or manipulated biometric data into the capture flow before the system can validate it.Inline enforcementAutomated policy action, such as blocking content, based on a security verdict.Inline keyboard buttonA Telegram bot interface element that attaches clickable actions to a message.Inline preventionSecurity control that can stop or challenge an access attempt before authentication completes.Inline workflow definitionA workflow submitted dynamically at runtime instead of being pre-registered ahead of time.Inno SetupA legitimate Windows installer framework that can be abused to deliver hidden payloads and run post-install actions.InnovationThe practice of improving methods, workflows, or controls through new ideas.Innovation culturea workplace attitude that supports change, experimentation, and adoption of new methods.inotifyA Linux kernel mechanism for watching file and directory events.inpoutx64A filename pattern associated with low-level driver or software components that may be relevant during triage.INPSItaly’s social-security authority, which issues clarifications that can affect contribution and labor treatment.InputThe browser path that handles keyboard, mouse, focus, and other user events.Input boundaryThe point where external user actions enter a system and must be handled carefully.Input desktopThe active Windows desktop currently receiving keyboard and mouse input.Input devicehardware used to send commands to a system, such as a controller.Input hardeningDefensive work that makes software more resilient against malformed or hostile data.Input interfaceThe part of a device that receives a user's command or action.Input latencythe delay between pressing a control and seeing a response.Input method editor (IME)Software used to enter complex characters, such as Chinese text, on a keyboard.Input reliabilityhow consistently a device turns intended actions into correct commands.Input separationKeeping trusted instructions apart from untrusted content so the model is less likely to be manipulated.Input surfaceA physical surface that accepts user actions and turns them into device behavior.Input telemetryData captured from user interaction, such as keystrokes or mouse clicks, which can be highly sensitive.Input tokensThe pieces of text sent into a model, which contribute directly to processing cost.Input-Constrained DeviceA device with limited text entry or no practical browser, such as a smart TV or printer.Inquadramento giuridicoThe legal classification used to decide which rules apply.Insecure deserializationA flaw where untrusted serialized data is processed without enough validation, sometimes leading to code execution.Insecure designA weakness caused by missing or weak security decisions in the architecture itself.Insecure File PermissionsWeak ownership or access settings that let unauthorized users read, change, or influence files.InsertA component placed into another material to add function, strength, or attachment.Insider cooperationAssistance from members or associates that can aid an investigation.Insider extortioncoercion using trusted internal access.Insider Preview buildA pre-release Windows build distributed for testing through the Windows Insider Program.Inspection overheadadditional checking required when confidence in the process drops.Inspection planA scheduled outline of priorities used to focus compliance checks over a set period.InspectionabilityHow easily a system can be checked, understood, and verified after it is built.Install commandA command that adds software, dependencies, or tools to a system.Install counta popularity signal that can be misleading when listings are deceptive.Install flowThe sequence a user follows to add software or an extension to a device.Installation DirectoryThe project-local location where a tool is expected to place files during setup.Installer integrityChecks that confirm a software installer has not been modified and still matches the trusted version.Installer masqueradeA tactic where malware pretends to be a legitimate software installer to trick users.Installer package abuseMisusing setup workflows so code runs during installation.Installment billingpaying a total cost in regular monthly amounts instead of all at once.Installment paymentA purchase repaid in smaller amounts over time.Instance DataThe records and configuration stored inside a ServiceNow deployment.Instance Metadata Service (IMDS)The EC2 service that provides instance data and temporary credentials from within the instance.Instant creditingA payment flow in which funds become available quickly after a transaction.Instant-payment railA payment network that settles transactions in seconds, leaving less time for manual fraud intervention.Institutional continuitythe ability of an organization to keep operating effectively through change.Institutional infrastructureLarge, organized equipment or systems typically operated by public agencies or major organizations.Institutional investora large organization that allocates capital on behalf of clients or members.Institutional legibilityhow easily people can understand what an institution says and does.Institutional linkageThe practical connection between schools, universities, research bodies, and businesses.Instruction fidelityHow accurately a rewritten version preserves the meaning of the original steps.Instruction labelthe printed guidance that tells users how a product should be used.Instruction tuningA training step that helps a model follow human instructions more closely.Instruction-set architectureThe set of rules that defines how software interacts with a processor.Instrumenta tool or device used to observe, measure, or indicate a quantity.Instrument approachA formal landing procedure that allows an aircraft to descend safely using navigation aids when visibility or conditions are limited.Instrumentationthe hardware and software used to measure, record, and analyze signals.Instrumentation chainThe linked set of sensors, wiring, and monitoring equipment that turns physical conditions into usable data.Intakethe part of a system that draws in water, air, or another resource needed for operation.Integer wraparoundA numeric error where a value exceeds its storage limit and rolls over to an unexpected smaller number.Integrated Charge Control Unit (ICCU)A vehicle component tied to charging-related functions.Integrated circuit (IC)a compact electronic circuit built on a single semiconductor chip.Integrated circuit fabricationThe process of manufacturing electronic circuits on silicon.Integrated File System (IFS)The hierarchical file space on IBM i used by many applications, scripts, and shared files.Integrated risk managementan approach that connects different risk areas into one coordinated process.Integrated servicesBundled offerings that combine connectivity, compute, and managed operations in one platform.Integration AdapterSoftware that connects two systems and helps them exchange data or requests.Integration componenta connector between systems that can widen trust boundaries.Integration endpointA system connection used to move data between applications, which can become a security-sensitive entry point.Integration fithow well a product works with existing security and business systems.Integration inventoryA record of the connections between applications, including APIs, workflows, and identity links.Integration roadmapA structured plan for aligning systems, teams, and timelines during change.Integration secretA token or credential used by one service to authenticate with another service.Integration specialista company focused on connecting separate technologies, systems, or suppliers into one working solution.IntegratorA third-party specialist that designs, installs, supports, or maintains ICS and OT systems.Integrity Checker ToolA vendor utility used to help validate whether an appliance has been altered or tampered with.Integrity ProblemA security issue where information is altered, reordered, or framed in a misleading way without necessarily being fully false.Integrity riskThe chance that data or code is altered without authorization.Integrity ValidationA check that confirms model, data, and configuration files have not been altered unexpectedly.Intel 8088-compatibleable to run software for the Intel 8088 instruction set, while still differing internally.Intel IPFIntel Innovation Platform Framework, a platform component associated with the affected driver issue.Intel Scalable SGXIntel enclave technology designed to isolate sensitive application code.Intel TDXa hardware-backed isolation technology for confidential virtual machines.Intelligence collectionGathering information that can support investigation, disruption, or identification efforts.Intelligence reformChanges to the mandate, structure, or coordination of security services.Intelligence-linked agencyA security body connected to national intelligence functions, often combining analysis and operational warning.Intelligent automationAutomation that uses AI or machine learning to support decisions or workflows.Intelligent cachingA cache strategy that tries to serve content faster by anticipating likely requests.Intelligent model routingSending requests to the least expensive model that can still handle the task well enough.Intelligent Platform Management Interface (IPMI)A server-management protocol used to monitor and control hardware remotely.Intelligent Tutoring SystemSoftware that adapts instruction to a learner’s progress and responses.Intent dataStructured signals that indicate why a customer is contacting a business, often extracted from language and context.Intent GovernanceThe practice of defining what an AI system is for, what outcomes are acceptable, and what limits it must not cross.Intent signalsBehavioral clues that help defenders infer what a user is trying to do across repeated interactions.Intent-Based Access ControlA permission model that ties access to the specific purpose of a request.Intent-Based AutomationAutomation driven by desired outcomes and policy constraints rather than manual device-by-device configuration.Intent-based designA future-oriented interface idea where the user states a goal and software helps carry it out.Intentional actionA user-driven event, such as submitting a prompt, that is more meaningful than background app activity.Inter-agency coordinationCooperation between different organizations that must work together during a security event.Interaction promptA visible cue that tells the player an action is available.Interactive accessa live session that lets an operator issue commands directly on a system.Interactive analysisA sandbox workflow that lets an analyst click, type, or otherwise interact with a live sample session.Interactive computingsystems that respond to user input in real time through a screen, buttons, or other controls.Interactive fictiontext-driven games where players type commands to progress.Interactive mediaContent that responds to user input instead of playing in a fixed sequence only.Interactive pageA web page that responds to user input instead of only displaying static content.Interactive sessionA live user-controlled environment where keyboard and mouse input affect what is running on screen.Interactive UIa user interface that supports clicks, input, or state changes rather than only text.Interactive zsh sessionA user-driven shell session on macOS that can provide a normal-looking starting point for malicious commands.Intercept modeA sudo feature designed to monitor or restrict later command execution under policy.Intercompany EliminationsConsolidation steps that remove internal balances and transactions between related entities.Interconnection agreementsUtility-facing documents that describe how a project connects to the grid.Interconnection queueThe waiting process for connecting new power demand, such as a data center, to the electrical grid.Intercultural sensitivityThe ability to recognize how meaning changes across cultural settings and audiences.Interdictionaction taken to stop illicit movement before goods reach the next market.InterdisciplinarityThe practice of connecting methods or ideas from different fields to solve complex problems.Interdisciplinarycombining knowledge from different fields to solve a single problem.Interdisciplinary pathwayA study track that combines multiple fields, such as computer science, law, ethics, and management.Interest rateThe percentage paid on deposited funds over a given period, often used to attract and retain balances.Interface discoveryThe task of identifying how two components communicate so they can work together correctly.Interface governanceThe rules and decisions that control how software screens are arranged and used.Interface mediationThe way a form, board, API, or workflow shapes what information can be observed or recorded.Interface recordsData that documents how systems exchange or process operational information.Interface riskthe possibility of delay or confusion where multiple organizations must coordinate.Interforce centera joint military structure for coordination across different armed forces branches.Intergenerational workplacea work environment where people of different ages and career stages collaborate.Intergovernmental organizationA formal body created by states to coordinate policy across national borders.InterlinguaA shared intermediate representation that can help a system move between languages.Intermediary verificationchecks performed by a platform or service before content is published, shared, or stored.Intermediate assetA temporary file created between production stages, often kept because regenerating it would be costly.Intermediate representationA compiler abstraction used to translate code between high-level and low-level forms.Intermittent faultA defect that appears only under certain conditions and can be difficult to reproduce.Intermodal terminalA facility that connects rail, truck, and sometimes ship cargo transfers through coordinated logistics systems.Internal APIA private application interface that software uses to perform device functions, often intended only for trusted access.Internal AuditThe assurance function that independently evaluates governance, controls, and risk management.Internal chatsprivate workplace messages that can reveal operations, disputes, or credentials.Internal componentsBack-end services or modules that are not meant to be directly exposed to users.Internal configurationsTechnical settings that describe how systems are built and connected.Internal ControlA self-assessment route where the provider evaluates and documents conformity without mandatory third-party involvement.Internal correlationComparing new indicators with existing logs or records to spot links.Internal database materialbusiness data that may increase extortion pressure if exposed.Internal Developer Platform (IDP)A company-managed platform that abstracts infrastructure details and provides guarded, reusable paths for software delivery.Internal documentsbusiness or technical records that can reveal operations, plans, or sensitive details if exposed.Internal endpointA service address that is meant to be reachable only from inside a private network.Internal filesnon-public documents that can increase operational and confidentiality risk if disclosed.Internal limitsBank controls that cap exposure to certain borrowers, sectors, or risk types.Internal policyA written set of organizational rules that defines approved use, boundaries, and review steps.Internal referencea pointer from one section of a document to another.Internal request routingA process where an application sends requests to backend services that are not intended for public access.Internal system IDsMachine-generated identifiers that can link records across systems and workflows.Internal systemsCompany-owned platforms used for operations, administration, or support rather than public-facing services.Internal Threat IntelligencePrivate detection data and analysis used to identify suspicious activity patterns and risk signals.Internal triagethe first phase of checking logs, alerts, and user activity after an incident claim.Internal validationchecking logs, access paths, and data exposure inside the organization before assuming impact.Internal-Network ScanningProbing internal hosts and services to map a network and identify reachable targets.International cooperationcoordination between agencies in different countries to share information and investigative leads.International humanitarian lawThe body of law governing armed conflict, including distinction, proportionality, and precautions in attack.International operationA coordinated action involving entities across more than one country.International tournamenta competition that brings participants from multiple regions into one event structure.International transferA payment sent across national borders through the banking or payments network.Internationalized domain nameA domain name that can include non-ASCII characters from supported scripts.Internet Accessible DeviceA system exposed to the public internet and therefore reachable from outside the local network.Internet Crime Complaint Center (IC3)The FBI’s online portal for reporting internet-enabled crime and fraud.Internet domainsHuman-readable web names that point users to online services and infrastructure.Internet egressOutbound network access from a controlled system to the wider internet.Internet Explorer engineThe older browser core used for legacy web compatibility on Windows.Internet exposureThe condition of a device being reachable from the public internet, increasing attack surface.Internet isolationA control that blocks or restricts outbound network access from a system under test.Internet of ThingsA network of physical devices that collect, exchange, or store data.Internet radioA device that streams audio over a network rather than relying only on traditional broadcast signals.Internet-edge deviceA system placed at the boundary between the public internet and an internal network.Internet-exposed assetA system reachable from the public internet, which can increase attack surface if not tightly controlled.Internet-facing applianceA device or service exposed directly to external networks and users.Internet-facing appliancesexposed edge devices that can become high-value entry points if poorly protected.Internet-facing deploymentSoftware reachable from the public internet, which increases exposure if a flaw is exploitable remotely.Internet-facing hostA system reachable from the public internet.Internet-facing servicesExternal systems that can be probed or abused if exposed.Interoperability layerThe set of linked databases and services that let authorized users cross-check identity records.Interoperability standardsRules that help different systems, platforms, or organizations work together reliably.INTERPOL Red NoticeA request to locate and provisionally arrest a person pending further legal action.Interposera hardware layer inserted between components to affect how they connect or communicate.Interpretation uncertaintyDoubt about how a rule should be read or applied in practice.InterpreterSoftware that executes code directly, often line by line, instead of compiling it first.Interpreter abuseA technique where attackers use legitimate scripting engines to run malicious code.Interpreter executionRunning code through a language runtime such as Python rather than as a standalone binary.Interpretive guidanceNon-binding clarification that helps organizations apply legal or regulatory duties in practice.Interpretive methodthe approach used to understand and apply legal texts or principles.Interprofessional fundsItalian training-finance mechanisms that help employers fund continuing education for workers.InterruptibilityThe ability of an autonomous system to accept human override, pause, or shutdown when needed.Interstellar spaceThe region between stars, containing very sparse matter and radiation.Interview guideA structured set of questions and answers used to prepare for or conduct interviews.Interview signala detail that helps an interviewer judge suitability more accurately.Intimate-image theftThe unauthorized collection or copying of private sexual or nude images from an account or device.Intraneta private internal network restricted to an organization.Introductory pricingA promotional rate offered for a limited initial period.IntrusionUnapproved entry into a system, account, or environment.Intrusion campaigna coordinated attempt to gain and maintain access in a target environment.Intrusion claiman allegation of unauthorized access that still requires independent verification.Intrusion pathThe method or route an attacker used to enter a system.Intrusion simulationa controlled exercise that tests how a system behaves during an attack path.Intrusion vectorthe path attackers may use to enter a network or environment.IntuneMicrosoft's cloud endpoint management platform, often used to deploy VPN settings at scale.Invalid reportA submission that does not describe a real, reproducible security issue.Invariant checkingProtocol rules intended to keep ledger state within allowed limits, such as supply caps.Invariant testingTesting that checks whether critical rules remain true under many conditions.InventoreThe person legally recognized as the originator of an invention for patent purposes.Inventory bufferExtra stock kept on hand to absorb shortages or delivery delays.Inventory debtThe buildup of untracked or poorly classified assets over time.Inventory driftThe loss of accuracy in records over time as systems, assets, or conditions change.Inventory freshnessHow current a security tool's view of cloud resources is, which affects detection of transient states.Inventory handlingThe operational management of available stock, including tracking, allocation and replenishment decisions.Inventory integrityConfidence that stock and availability records match operational reality.Inventory ManagementThe process of tracking devices, roles, and system state across an environment.Inventory mappingThe process of matching purchased items to the correct user account.Inventory shockA sudden mismatch between demand and available stock.Inverse-square lawA relationship in which strength decreases with the square of distance.Inverter-based resourceA grid component that relies on power electronics rather than rotating machinery.Investable asseta resource that can attract capital because its value can be assessed.Investigative informationContext that helps defenders review why a message was flagged and how it may relate to other activity.Investment climatethe combined conditions that influence whether capital enters a market.Invisible watermarkingHidden signals placed in text or media to support later detection or recovery.Invitation linka URL that grants access to a specific session or resource.Invite-only teamA team that should admit members only through explicit invitation.InvocationA single execution of a serverless function, often used as a billing or monitoring unit.InvoiceThe authoritative record of what a customer owes after billing is finalized.Invoice metadataSupporting information around an invoice, such as identifiers, dates, references, and related parties.Invoice PDFa billing document that can reveal financial or vendor details.Invoice recordsbilling documents that can reveal trading and payment relationships.Invoice Redirection FraudA scam that tricks a business into paying the wrong bank account by changing supplier payment details.Invoicing recordsfinancial documents that can reveal billing activity and commercial relationships.io_uringA Linux interface for high-performance asynchronous I/O.IO-LinkA standardized point-to-point protocol for connecting industrial sensors and actuators.IoMTInternet of Medical Things, networked medical devices that can introduce clinical and safety risk if mismanaged.Ionizing radiationRadiation energetic enough to remove electrons from atoms and damage tissue.IOPSInput/output operations per second, a measure of storage performance under load.iOS appSoftware built to run on Apple’s mobile operating system.iOS patchingInstalling security updates for Apple devices to close known flaws.IOS XECisco’s network operating system used across routing, switching, wireless, and related infrastructure.IOS XRCisco’s operating system for high-end routers, built to manage carrier-grade network infrastructure.IoT baselineA security baseline for connected devices covering access, updates, and data protection.IoT devicesInternet-connected hardware such as TVs, cameras, and appliances with limited resources.IoT endpointA connected device, such as a camera, that sits on a network and needs active security management.IoT GatewayA device or service that connects Internet of Things devices to wider networks such as satellite or cloud links.IoT securityProtection of connected devices that communicate over networks.IoT sensorA connected device that measures physical conditions and sends data to a system.IoT vulnerabilitiesSecurity weaknesses in internet-connected devices that attackers can abuse for unauthorized access or control.IOTLBA translation cache used to speed up device address lookups.IP AllowlistA control that permits access only from preapproved network addresses.IP AllowlistingA control that limits access to a service or admin panel to approved IP addresses.IP managementUsing internet address information to help shape access decisions.IP prefixA block of internet addresses that routers use when deciding where traffic belongs.IP restrictionA control that limits access by network address, but does not cover every application path.IP rotationRepeatedly switching between addresses to make blocking and tracing harder.IP routeA rule that tells network traffic where to travel next.IPCEIAn EU state-aid tool for major cross-border projects with high strategic importance and risk.IPMIIntelligent Platform Management Interface, a protocol used to manage servers independently of the operating system.IPSIntrusion Prevention System, a control that detects and blocks malicious traffic patterns.IPv4-mapped IPv6an IPv6 representation that embeds an IPv4 address for compatibility in dual-stack systems.IR blasterA device that sends infrared signals to control nearby electronics.IRAPAustralia’s Infosec Registered Assessors Program, used to independently assess cloud and ICT security against government guidance.IRAP-aligned assessmentA review shaped to map controls and evidence to IRAP-style security requirements.IRGC-CECThe IRGC Cyber-Electronic Command referenced in U.S. reward and sanction materials.IRMInformation Rights Management, policy enforcement that travels with documents and files.ISA/IEC 62443-4-2A component-level OT security standard used as a technical baseline.ISAC (Information Sharing and Analysis Center)A sector-focused group that shares threat information among participating organizations.ISMThe Information Security Manual, which sets baseline cybersecurity controls for Australian government systems.ISM bandunlicensed spectrum used for industrial, scientific, and medical devices in many regions.ISO 15189a quality standard for medical laboratories.ISO 22301An international standard for business continuity management systems and continuity controls.ISO disk-image fileA container format that mounts as a virtual disk and can carry multiple files inside one attachment.ISO fileA disk image format that can package software and is often abused to hide malicious content.ISO/IEC 27035an international standard that frames information security incident management in a structured way.ISO/IEC JTC 1/SC 42The international committee responsible for AI standardization work, including terminology and trustworthiness.Isolated PatchA targeted fix released outside the normal update cycle for a specific issue.Isolated phishing sitesSeparated landing pages or site instances that can limit how much one campaign affects another.Isolation boundaryThe technical separation meant to keep testing environments from reaching live services or secrets.Isolation flawA weakness that lets data or behavior cross a boundary that should separate tenants, workloads, or users.Isolation PlanningPredefining how to separate vital systems from the rest of the environment during a cyber incident.IsopropanolA commonly used cleaning alcohol for removing oils and residue from surfaces.ISPMIdentity Security Posture Management, a continuous approach for finding and reducing risky identity configurations.ISRUIn-situ resource utilization, the practice of using local space materials to support missions without relying only on Earth shipments.Issuer authorizationThe bank-side decision that approves or declines a payment after the terminal sends transaction data.Istruttorie privacyFormal privacy proceedings used to assess a suspected data protection violation.IT asset disposition (ITAD)Secure handling, reuse, and destruction of retired technology assets.IT estateThe full collection of devices, servers, operating systems, and applications an organization runs.IT inflationRising total technology spending even when some unit costs fall, usually because usage expands faster than efficiency gains.IT modernizationThe process of updating legacy systems so they can better support current business, security, and performance needs.IT rolesJobs focused on information technology, including systems, support, networking, and related technical work.IT service providerAn organization that delivers shared digital services to customers or partners.IT supportassistance that helps small teams manage security tools and respond to basic issues.IT systems integratora firm that plans, deploys, and maintains technology infrastructure for clients.IT-OT ConvergenceThe linking of business networks and industrial control environments, often increasing complexity and exposure.IT-OT dependencyThe operational link between business systems and industrial or production environments.IT/OT boundaryThe interface between information technology systems and operational technology such as power infrastructure.ITaaSIT as a Service, a model where providers deliver managed technology functions to clients.ItaniumIntel’s processor family based on IA-64.Item Shopa digital storefront inside a game where users browse and buy in-game items.ITOA transparent conductive coating used to let a surface carry electrical signals without blocking visible light.IVAItaly’s value-added tax, which must be recorded consistently across invoices and corrective documents.IVASSItaly’s insurance supervisory authority, which sets and interprets rules for insurance processes.IXPInternet Exchange Point, a facility where networks interconnect and can sometimes share local services.Java process privilegesThe permissions and access rights inherited by the running Java application.Java supporta built-in runtime feature that can expand what an office app is able to execute.Java-Based MalwareMalicious software built in or packaged with Java, often used for flexible delivery.Java-based RATMalware described as written in Java and used for remote access.JavaScript build artifactA file generated during web app compilation that may be publicly served after deployment.JavaScript embedExternal code inserted into a web page so the browser loads and runs it from another host.JavaScript engineThe component that executes webpage scripts inside a browser.JavaScript for Automation (JXA)A macOS automation framework that can be abused to run scripted actions on the host.JavaScript implantMalicious JavaScript used as a loader or remote-control component on a compromised system.JavaScript loopRepeating code logic in a web page; if it never exits, it can keep the browser from progressing normally.JavaScript OSA system that uses JavaScript as part of its runtime or control model.JavaScript secret scanningInspecting client-side code for tokens, endpoints, keys, or other sensitive values.JavaScript stealerMalware written to collect sensitive data from browsers, apps, or local storage.JavaScriptCoreApple’s JavaScript engine used within WebKit, often central to browser exploit chains.JAX-WSA Java web-services programming model used to build service endpoints in enterprise applications.JAXPJava API for XML Processing, the Java framework used for parsing and transforming XML documents.Jet engineAn engine that produces thrust by expelling high-speed exhaust gases.Jet turbineA turbine engine that produces thrust by compressing air, mixing it with fuel, and exhausting hot gas.Jetpack ScanA security scanning tool used in WordPress-related review workflows.Jira credentialsCredentials or API tokens used for Jira automation and service access.Jira permissionsAccess controls that determine what a Jira account can view, edit, or administer.JITJust-In-Time compilation that turns hot JavaScript into machine code for speed.JIT (Just-In-Time)Runtime code generation that compiles code on demand for speed.JIT (Just-In-Time) compilerA browser component that translates JavaScript into fast native machine code at runtime.JIT compilationA browser performance technique that converts JavaScript into machine code while a page runs.Job titleA formal role label that can describe hierarchy or function, but not always real capability.Joiner-Mover-Leaver (JML)A lifecycle model for granting, changing, and removing access as people or roles change.Joiner-mover-leaver lifecycleThe common human identity process for onboarding, role change, and offboarding.Joiner-mover-leaver workflowAn automated process that updates access when people join, change roles, or exit an organization.Joint advisorya coordinated security notice issued by multiple agencies to help defenders assess and reduce risk.Joint alertA coordinated warning issued by multiple authorities to flag a shared security concern.Joint controllerA GDPR role where two or more parties jointly decide the purposes and means of processing personal data.Joint controllershipA legal relationship where more than one party shares decisions about personal data processing.Journaling filesystemA filesystem that records changes in a log so recovery after a crash is more reliable.Journalistic narrationspoken reporting that guides the viewer through facts and context.Joystick supportA feature that lets software accept directional control from a joystick instead of only from keys.JPEGa common image format designed to reduce file size through compression.JPEG 2000An image codec sometimes embedded in PDFs, with complex parsing logic that can introduce security bugs.JSON parserSoftware that reads JSON input and turns it into objects an application can use.JSON poisoningTampering with trusted JSON data or metadata so software processes manipulated instructions or configuration.jsonArrayContainsA GeoServer filter function used in query logic that is relevant here because the reported flaw involves this path.JSSEJava Secure Socket Extension, the Java platform’s built-in SSL and TLS framework.Judgment under uncertaintyThe ability to make a sound choice when evidence is incomplete, conflicting, or ambiguous.Judicial Authoritythe legal body that receives cases for criminal evaluation or prosecution steps.Judicial authorizationFormal approval from a court or judge before certain actions can proceed.Judicial interpretationhow courts apply existing law to a concrete dispute.Jumbo hotfixA bundled update that combines multiple fixes and security changes into one release.Junior rolesEntry-level jobs where workers usually learn core tasks and build experience for promotion.Junos OSJuniper Networks’ network operating system for routing and security appliances.Jupyter notebookA structured .ipynb file used for interactive computing and data work.JupyterLabA web-based interactive environment for notebooks, terminals, editors, and extensions.Just-in-Time (JIT) accessPrivileged access that is activated only when needed and for a limited time.Just-in-time procurementA supply approach that minimizes inventory by matching deliveries closely to demand.Justified textParagraph alignment that makes both left and right edges line up by varying word spacing.JVMJava Virtual Machine; the runtime environment that executes Java applications.JWT authentication bypassA flaw that lets an attacker skip or defeat JSON Web Token-based identity checks.K-selectionAn ecological strategy that favors fewer offspring, slower reproduction, and higher investment per individual.Kármán linea widely used threshold near 100 kilometers above sea level that marks the edge of space.KB5127648An October Windows 11 security update linked to a reported issue affecting Smart App Control re-enablement on some devices.Kelvin-Helmholtz instabilitya fluid or plasma instability caused by shear between moving layers.KerberoastingAn attack technique that requests Kerberos service tickets and attempts offline password cracking against associated service accounts.Kernel datapathThe in-kernel forwarding path that handles fast packet processing and related control messages.Kernel flawa weakness in core operating system code that can affect many systems.Kernel hardeningDefensive techniques that reduce the chance a kernel bug becomes an exploit path.Kernel read/writeA powerful primitive that allows direct access to kernel memory for reading and writing.Kernel subsystemA functional area of the kernel, such as networking or storage.Kernel timerA scheduled callback mechanism used inside the operating system kernel.Kernel vulnerabilityA flaw in the core layer of an operating system that can affect memory, access control, or driver execution.Kernel writeA memory modification operation inside the operating system kernel, often highly dangerous if abused.Kernel-adjacentnear the deepest layers of the operating system, where faults can affect system stability.Kernel-level evasionstealth behavior that targets lower-level system visibility and can make detection harder.Kernel-mode codeSoftware that runs with high privilege inside the Windows operating system core.Kernel-mode code signingThe Windows trust requirement that kernel drivers be digitally signed before they can load.KERNELBASE.dllA core Windows library often seen in crash reports when applications fail.KEVsKnown Exploited Vulnerabilities, CISA’s catalog of vulnerabilities with evidence of active exploitation.KeyA secret value that controls how encrypted data is locked and unlocked.Key custodyThe practical question of who holds the decryption keys and who can recover them.Key Distribution Center (KDC)The service that issues and validates Kerberos tickets in a domain.Key inventorya tracked list of cryptographic keys and their lifecycle status.Key lifecycleThe full path of a key from creation to deletion.Key Management Service (KMS)Microsoft’s enterprise activation system for licensing Windows at scale through a managed network service.Key separationA security design that splits control over signing material so no single point can approve everything alone.Key Signing Key (KSK)The root-zone key used to sign DNSSEC data at the top of the trust chain.Key verificationA process for confirming that a cryptographic key belongs to the expected contact.Key-encapsulation mechanismA protocol used to securely establish shared encryption keys.Key-pair authenticationA login method based on a private and public key pair rather than a shared password.Key-person riskexposure that appears when critical knowledge is concentrated in too few people.Keyboard inputText or commands sent by a user to control a system.Keyboard LEDa status light on a keyboard, such as Caps Lock or Num Lock.Keychain ServicesmacOS APIs and storage designed to keep passwords, keys, certificates, and other secrets protected.KeycloakAn open-source IAM server used to centralize authentication and account management.KeyringA collection of wallet keys and account records used to manage crypto accounts.Keystroke timingthe intervals and rhythm associated with typing activity.Keyword-based filterA detection rule that flags messages by matching exact words or phrases associated with abuse.Kickstartera crowdfunding platform where projects seek early backers before full market launch.Kill lineA pre-set milestone or condition that triggers stopping a project if it misses agreed criteria.Kill mechanismsEmergency controls that can stop or deactivate an automated system when behavior goes wrong.Kill ZoneA tactical area where forces expect to concentrate fire on a target.Kilowatt-hourthe unit used to measure electricity consumption and billing.Kimsukya threat actor group widely reported in public research as North Korea-linked and associated with trusted-platform C2 abuse.KindleAmazon's e-reader platform, often associated with reading and document handling.KinematicsThe study of how motion is produced and controlled, without focusing on the forces that cause it.Kinetic clockA clock that uses motion as part of its display or operation.Kinetic warfarePhysical combat carried out with military force, such as weapons, troops, or strikes.Kiosk modeA restricted device mode that launches a single app or workflow with limited user access.Kiosk sessionA locked-down device mode that limits the system to approved apps or workflows.Kirigamia paper-cutting variation of origami that starts with a sheet of paper and allows cutting to create functional designs.Kiro PowersOn-demand tool bundles that extend Kiro’s capabilities through permissions and workflows.KISS"Keep It Simple, Stupid" - a design principle that favors clarity and avoids unnecessary complexity.KMIPKey Management Interoperability Protocol, a standard for communication between key managers and cryptographic systems.KMSKey Management Service, a Windows activation system that serves many devices through a central host.Know-howPractical, proprietary knowledge that gives a business an edge.Knowledge DistillationA training method where a smaller model learns to imitate a larger model’s behavior from its outputs.Knowledge economyan economy where information, expertise, and intangible assets drive growth.Knowledge governanceThe rules for approving, versioning, updating, and retiring organizational knowledge.Knowledge infrastructureThe shared tools and systems through which information is produced, filtered, and distributed.Known flawA vulnerability that is already documented or understood by attackers and defenders.Known-Good BackupA backup that has been tested and trusted as clean before restoration begins.Known-good componenta part that has already been verified to work properly.Knox SuiteSamsung’s bundle of enterprise mobility tools for enrollment, policy control, update staging, and fleet monitoring.Knox VaultA hardware-isolated security subsystem designed to help protect sensitive keys and credentials from the main operating system.KNX SecureA security layer for KNX communication that adds stronger protection than legacy KNX.KPIsKey Performance Indicators, the metrics organizations use to measure whether a team is meeting its goals.KQLKusto Query Language, used to search and analyze security data.KRBTGTThe Kerberos service account whose secret material is central to ticket issuance and domain trust.KRITISCritical infrastructure such as energy, water, transport, and healthcare systems whose disruption would have major societal impact.KSCPoland’s national cybersecurity framework that sets security and notification duties for covered entities.KSeFPoland’s national e-invoicing system, built around structured electronic invoice exchange.kTLSKernel TLS, a feature that processes some TLS traffic inside the Linux kernel.KubeconfigA file that stores Kubernetes cluster access details, often including credentials and context settings.Kubernetes nodeThe host that runs workloads in a Kubernetes cluster.Kubernetes operatorSoftware that automates the deployment and lifecycle management of applications inside a Kubernetes cluster.Kubernetes posture managementReview of cluster settings and resources for compliance and security misconfigurations.Kubernetes RBACRole-based access control that limits what users can create, view, or change in a cluster.Kubernetes schedulerThe component in Kubernetes that assigns Pods to nodes, affecting placement, contention, and performance.Kubernetes tokenA credential used by workloads to authenticate to the Kubernetes API; some tokens may be stored in Secrets.Kubernetes YAMLA declarative manifest used to describe the desired state of objects in a Kubernetes cluster.KubeVirtA Kubernetes extension that lets teams manage virtual machines in a cloud-native control plane.KV cacheStored attention data reused during inference to reduce repeated computation and speed up responses.KVM switchA device that lets one keyboard, display, and mouse control multiple computers.KYC recordsIdentity verification documents such as passports, certificates, and related onboarding files.L-BTCA Liquid token designed to track bitcoin held in reserve.Labor framingthe way a debate presents work, skills, and employment as central to understanding a technology's impact.Labor shareThe portion of national income paid as wages and salaries rather than to owners of capital.Labor-market instabilityfrequent change, uncertainty, or disruption in employment conditions.Labor-market matchingAligning workers’ skills with real employer demand and open vacancies.Labor-market stagnationA slowdown in hiring, movement, or wage growth in a professional market.LacanA theorist whose work links subjectivity to language and structure.LANA Local Area Network used for on-site devices and tightly managed event connectivity.Land registrya government system that records property ownership and related legal information.Landing dynamicsthe forces and motion a system must manage when it contacts the ground.Language conformanceHow closely a compiler follows the rules and behavior defined by a programming language standard.Language-aware targetingA technique where malware or lures are tailored to a specific language to improve infection success.Large Scale NAT (LSN)A network configuration that lets many internal devices share a smaller pool of public IP addresses.Large-load tariffA utility pricing structure designed for customers with unusually high electricity demand.Laser beamA narrow, directed stream of coherent light used for precise transmission or illumination.Laser carvingusing a laser to cut or pattern material with precision.Laser pulseA brief burst of laser output rather than continuous emission.Laser rangingA measurement technique that times laser pulses to calculate distance with extreme precision.Laser smoothingA post-processing method that uses laser energy to alter a printed surface.Last mileThe final part of the network that connects service to the end user.Late registrationa final enrollment period that closes before standard access rules change.Late-binding attack patternA failure mode where a generated name is only checked or resolved later, creating a window for abuse.Latency-sensitive workloadA task, such as gaming, where small delays can be noticeable to the user.Latent heatEnergy absorbed or released during a phase change without a temperature change.Latent riskA hazard that remains present but does not immediately show its full impact.Lattice-based cryptographyA family of schemes built on hard problems in structured math objects called lattices.Launch failurea case where an application opens unsuccessfully or closes before use.Launch profileThe initial motion pattern of a rocket as it leaves the launch system.LauncherSoftware used to start and manage a game or game library.Launcher cadenceThe pace at which a launch system can perform missions over time.Laundering networka coordinated structure that hides the origin of criminal proceeds.Laundering routeThe sequence of transfers used to hide the origin of funds.Law Enforcement Directive (LED)An EU directive setting privacy and security requirements for police data processing.Law enforcement pressurethe investigative and prosecutorial activity meant to disrupt criminal operations.Law-enforcement disruptionActions intended to interrupt a criminal ecosystem rather than only arrest individual suspects.Law-enforcement intelligenceSecurity-relevant information shared by investigators that can guide defensive action.Law-enforcement investigationA formal inquiry used to test evidence and determine whether a crime occurred.Law-enforcement pressureInvestigative action that can disrupt criminal activity or communications.Law-enforcement takedownA disruption effort intended to break criminal infrastructure, accounts, or operations.Lawful basisthe legal ground that allows an organization to process personal data or make contact.Layer 3 VRFA routing context that separates network traffic and can create distinct exposure paths inside the same device.Layer adhesionThe bond between printed layers, which affects strength and durability.Layered authenticationUsing multiple checks to reduce the chance that one stolen credential is enough.Layered packagingMultiple wrapping stages that hide the real payload until it is unpacked or executed.Layered permissionsMultiple levels of access control that govern what users can view or modify.Layered VerificationA defense approach that combines multiple checks instead of trusting one detector alone.LayeringMoving money through multiple transactions to obscure its source and destination.LayupThe arrangement of layers in a composite part before it is formed or cured.Lazarus GroupA North Korea-linked threat cluster associated with cyber intrusion activity.ld-primeApple’s newer linker path used in Xcode workflows to combine objects into final outputs.LEAthe essential level of care that the health system must guarantee.Lead databaseA repository of prospective customer details used by sales teams.Lead indicatoran early signal that may justify closer scrutiny.Lead managementThe process of tracking, qualifying and prioritizing potential customers across sales workflows.Lead scoringA method for ranking prospects by how likely they are to convert or create value.Leadership successionA planned transfer of executive authority from one leader to another, often with little immediate operational impact.Leaf-spineA data-center network design with leaf switches connecting to spine switches for low-latency, scalable traffic flow.LeakUnauthorized release of information, files, or other sensitive material.Leak claiman asserted disclosure of data that may not be verified.Leak countdowna timed publication threat meant to raise urgency.Leak deadlinea date used to pressure a victim in an extortion campaign.Leak entrya public post used to advertise claimed stolen data and intensify pressure on a target.Leak inventoryA file count or data list used to imply scope and impact.Leak leveragepressure created by threatening to expose sensitive material.Leak listinga public post that claims stolen data from a named target.Leak marketA place where exposed data is posted, sold, or redistributed.Leak materialFiles or screenshots circulated to support extortion claims, which may be authentic or altered.Leak monitoringtracking public or semi-public places where stolen-data claims are posted or aggregated.Leak notea claim that files or data were taken, often before proof is available.Leak noticeA public claim that data was stolen or published.Leak samplea small data excerpt used to support a theft claim.Leak sizethe amount of data a threat actor claims was taken.Leak surfacethe collection of systems or channels where sensitive material can escape.Leak threata warning that data may be published if demands are ignored.Leak timerA deadline used to pressure a target before alleged data is released.Leaked malware frameworkReusable malicious code that can be repackaged by different operators.Lean massThe body’s non-fat tissue, especially muscle.Lean theorem proverA formal proof environment that checks mathematical steps with machine precision.Learner ModelA system’s internal representation of what a student knows, misses, or may misunderstand.Learning loopthe cycle in which operational feedback is used to improve a system over time.Learning management systemsoftware used to manage classes, users, and course access.Learning organizationA company that turns experience, including failure, into shared knowledge and better future decisions.Learning phaseThe period when an ad system collects data to stabilize optimization decisions.Lease expirationThe end of a contractual term that can trigger a change in access or use.Lease originationThe process of reviewing and approving a new customer agreement, often with identity and fraud checks.LED attachmentA small light add-on that creates controlled illumination for scanning a scene from multiple angles.LED illuminationcontrolled light used to reveal reflective surfaces or optical signatures.LED matrixA grid of light-emitting diodes used to display numbers, symbols, or simple animations.LED signalingusing an LED's visible state changes to convey information.Legacy applicationOlder software that may not natively support modern MFA methods.Legacy architectureOlder or fragmented infrastructure that can be harder to secure, monitor, and update consistently.Legacy branchAn older supported software line that still receives security fixes.Legacy brandAn older name that still carries recognition and trust long after the original era.Legacy broadcast bandAn older transmission range that remains in use but may be less central over time.Legacy ControllerAn older control device that may still function well operationally but often lacks modern security design.Legacy dataOlder information stored in systems or archives that may not use modern controls.Legacy domainan older web address that may remain visible after a service changes.Legacy estateThe collection of older applications, infrastructure, and dependencies an organization still relies on.Legacy extensionAn older add-on that may remain installed or in use after a store policy change.Legacy gameAn older title that continues to be played or modified after release.Legacy IAMTraditional identity and access management built mainly around human users and fixed application roles.Legacy ITOlder or harder-to-maintain technology that organizations keep using because replacement is costly, risky, or delayed.Legacy objectan older product that remains notable because of its historical or cultural significance.Legacy OTOlder industrial systems that often require special controls because they were not built for modern security assumptions.Legacy parts inventoryolder, hard-to-replace hardware stock that can create operational pressure.Legacy platformolder hardware or software that remains in use after newer generations arrive.Legacy processan older procedure that continues to shape work even after new tools arrive.Legacy RESTful action mapperAn older Struts routing path that can change how requests are interpreted and may widen exposure.Legacy utilityAn older tool or feature preserved for compatibility, teaching, or historical reference.Legacy vulnerabilityA weakness that can persist in older code for years before it is discovered and fixed.Legacy web appAn older browser-based application that may depend on outdated standards or behaviors.Legacy WidgetAn older WordPress widget format that may follow different parsing rules than modern blocks.Legal ambiguityUnclear wording that can make enforcement or interpretation uncertain.Legal certaintythe principle that rules should be clear and predictable.Legal dramaa story format built around disputes, authority, and formal conflict.Legal opacityRules or clauses that are difficult to understand in practice.Legal privilegeA rule that can protect certain confidential communications from being disclosed in legal proceedings.Legal reasoningthe process of interpreting rules, facts, and precedents to reach a conclusion.Legal statusthe current status of a patent’s enforceability, such as whether it is in force or no longer in force.LegionLoaderA malware payload named in the reported delivery chain.LegislationThe process and result of making laws.Legislative powerthe authority to create or change laws through Parliament.Legislative sessionThe period during which a legislature meets and considers bills.Legitimate credentialsvalid logins that can be abused when stolen or misused.Legitimate web service abuseA technique where attackers route malicious traffic through trusted online services to blend in with normal use.Lens upgradeA modification intended to improve how a camera focuses or captures light.LenticularA visual effect that changes appearance as the viewing angle changes.LEOLow Earth orbit, a satellite orbit class used by many modern space-based networks.Leslie speakera vintage speaker cabinet associated with a distinctive moving sound effect.Lessons learnedfindings from an incident review that are used to improve future response and resilience.Letter of intentA preliminary agreement that outlines a proposed transaction before final contracts are signed.Level capThe maximum progression level a player can reach in a game or trial.LFP cellsLithium iron phosphate rechargeable battery cells used in many practical power applications.LiabilityA backward-looking obligation to answer for conduct or its consequences.Liability shieldlegal protection that can limit responsibility for third-party content or activity.libclamavThe library core of ClamAV that can be embedded into other software.libcryptoThe OpenSSL library that provides core cryptographic functions such as encryption, hashing, and key handling.Liberalized marketA market structure where customers can choose among competing suppliers.LiberatoriaA release document used to authorize image use in specific, defined circumstances.libextractorA GNU library used to extract metadata from files and digital content.libheifAn open-source library used to decode and encode HEIF and AVIF images.libmongocryptA C library that supports MongoDB client-side and queryable encryption workflows.LibraryA reusable collection of code or modules designed to speed up development.libsslThe OpenSSL component that implements SSL/TLS and related secure transport behavior.liburingA helper library that simplifies working with io_uring from user space.libvipsA fast image-processing library that Rails can use for server-side transformations.Licence renewalExtension of a regulated right to use a public resource.LicenseA permission to use software under set terms, which is different from owning a physical copy.License compliancechecking whether open-source terms fit intended use and distribution.License exposureCompliance risk created by software license terms and obligations.License metadataThe formal terms that describe how a model may be used, modified, or redistributed.License setA group of licenses that Oracle’s support rules treat as linked for support purposes.License syncThe matching of purchase rights across devices or storefronts.License-plate readeran automated system that captures and indexes vehicle plate data.Licensed contentmedia or assets used with permission from the rights holder.LicensingThe rules that define how many users or devices can use a product.Licensing signalA technical or contractual indicator that defines how content may be accessed, reused or trained on.Life cycleThe full span of a technology’s existence, from design and release to support, monitoring, and retirement.Life quakea major personal disruption that can force a reassessment of work and identity.Life-extensionWork that allows an existing plant to operate longer through upgrades, inspections and regulatory review.Lifecycle Assessment (LCA)A method for measuring environmental impact across a product's full life, from manufacturing to disposal.Lifecycle complianceMaintaining regulatory alignment across development, deployment, updates, and ongoing use.Lifecycle costsOngoing expenses such as maintenance, upgrades, support, migration, and training.Lifecycle deadlinethe point at which a product reaches the end of a supported update period.Lifecycle economicsThe study of costs and value across the full life of a system, from deployment to maintenance and retirement.Lifecycle mismatchA gap where cloud resources are deleted, but their DNS records remain in place.Lifecycle monitoringWatching timing, queueing, runtime, recurrence, and recovery together instead of relying only on final status.Lifecycle policyRules that define how long different classes of data are retained, moved, or deleted.Lifelong learningOngoing learning across a person’s life, especially to adapt to new skills and changing conditions.Light sheet microscopyAn imaging method that illuminates a thin slice of a specimen to reduce blur from out-of-focus light.Light-field displaya display method that presents different light rays to create depth cues.Lighter-than-air craftAn aircraft that stays aloft using buoyant lift rather than wings alone.Lightning NetworkA Bitcoin payment layer designed for faster, lower-cost transactions.Lightning walletSoftware that manages Bitcoin Lightning payments and the keys or permissions needed to authorize them.Line of sightA clear path needed for many infrared signals to reach a target.Line-item visibilityThe ability to see individual costs or components separately rather than only as a bundle.Line-of-business (LOB)Employees who work directly in business functions such as finance, operations, or supply chain and understand the process in detail.Line-of-sightA direct path that radio signals need to travel between spacecraft and receivers.LineageOSA community Android distribution designed for customization and user control.Linear actuatorA device that produces motion in a straight line.Linear playbackA media model where content is consumed in a fixed sequence from start to finish.Linear scannerA device or method that captures an image along a narrow strip.Link analysisExamining connections between URLs, accounts, or domains to find patterns.Link hygienethe practice of handling invitation links carefully to reduce misuse.Link verificationChecking where a link really leads before opening it.Link wrappingPlacing an intermediary URL in front of a final destination link.Link-based sharingA model where possession of a URL can be enough to view content.Link-local addressAn address that is only valid on the local host or link, often used for metadata services.Linkage analysisA method for connecting related accounts, devices, or infrastructure to reveal hidden coordination.Linkage riskThe chance that separate data fields can be combined to identify someone.Linked sessionAn authenticated companion-device connection that can be managed or revoked by the account holder.Links roundupA curated post that collects multiple items into one brief update.Linux backdoorMalware designed to keep covert access to a Linux system after initial compromise.Linux bridgeA kernel networking feature that forwards frames between interfaces at layer 2.Linux ELFThe standard executable file format for Linux binaries.Linux encryptorMalware component designed to encrypt data on Linux systems.Linux Espionage ToolkitMalicious software built to run on Linux systems for stealthy access, monitoring, or persistence.Linux feature paritymatching security capabilities across Linux and other server platforms.Linux handheldA portable computer running Linux in a hand-held form factor.Linux implantMalware designed to run on Linux systems and provide an operator with persistent or interactive control.Linux malwareMalicious code designed to run on Linux systems, often used against servers and web infrastructure.Linux migrationThe process of moving users, devices, or services from another operating system to Linux.Linux PackagingThe software delivery layer used to build, distribute, install, and update packages on Linux systems.linux-cve-announceThe Linux mailing list used to publish CVE notices.linux-nextAn integration-testing branch that helps catch conflicts before changes reach mainline.Liquid damageharm caused when spills or moisture affect electronic components and traces.Liquid extrusionThe controlled movement of liquid material through a printer or dispensing path.Liquidationautomatic closing of a leveraged position when losses exceed margin.Liquidity Provider VaultAn on-chain pool that holds deposited assets and backs trading activity.Liquidity riskthe chance that an institution cannot meet cash or funding needs when they come due.List pricethe standard advertised price before any promotional discount is applied.ListingA public market debut that can change how a company raises capital and distributes ownership.Listing integrityThe degree to which a product page accurately describes the item being sold.ListKeysAn Azure operation that returns storage-account access keys for later use.LiteLLMA proxy server used as a gateway for accessing large language models.LiteLLM ProxyA gateway that routes requests to multiple model providers while managing access, keys, and usage controls.Literal substitutionReplacing text directly, which can be safer than regex-driven template handling in security-sensitive code.Lithium batteryA rechargeable battery type widely used in consumer, industrial, and transport devices.Litigation supportservices that handle case-related records, media, and workflow tasks.Live AI inventoryA continuously updated list of AI systems, owners, access rights, and integrations.Live audioReal-time audio capture or streaming from a device, often through microphone access.Live conversationAn ongoing exchange where a request or message can still be influenced or stopped.Live detectionA term for monitoring or spotting suspicious activity during an active interaction.Live translationreal-time conversion of spoken language into another language.Live VerificationA test that checks whether a discovered credential is still valid and usable.Live-service updateA software change pushed to an online game after launch, often affecting gameplay systems.LivelockA failure mode where a system keeps reacting and retrying but never completes useful work.Liveness verificationa check intended to confirm that a real person is present during a digital interaction.LivestreamA video broadcast delivered in real time over the internet.LivestreamingReal-time broadcast of audio, video, or both to an audience.Living LabA real-world test environment where technologies are developed and evaluated with users.Living textileA textile that includes active biological components during production or use.Living tissueMaterial made of active biological cells or organisms rather than inert matter.Living-off-the-land attacksAbuse of legitimate tools already present in an environment.Living-off-the-land tacticsAbuse of legitimate system or admin tools to reduce obvious malware signals.llama.cppAn open-source C/C++ inference engine for running large language models locally or as a service.llhttpA fast HTTP parser used by Node.js to process incoming requests and headers.LLM applicationSoftware that uses a large language model to process, generate, or classify text.LLM attack classA category of threats aimed at large language models, often by influencing their input or behavior.LLM hallucinationA confident but false or unsupported answer produced by a large language model.LLM inputText or data sent into a large language model, which should be treated as sensitive if it contains secrets.LLM MemoryA persistence feature that can store useful context from prior interactions, depending on product design.LLM ProxyA service that brokers requests to large language models and can centralize authentication, routing, and logging.LLM safety filterA screening layer that tries to block unsafe or policy-breaking content before it reaches a model or tool.LLM SuiteAn internal generative AI platform used by employees inside a controlled enterprise environment.LLM taxThe extra cost created when a language model is used for tasks that could be handled more simply.LLM-based forensicsusing a large language model to help review logs and incident data.LLM-jackingAbuse of legitimate access to large language model services for unauthorized use or resale.LLM-powered security scannerA triage tool that uses a language model to classify, summarize, or flag suspicious files or code.LLM-related crawleran automated client used to collect web content for large language model systems.llms-full.txtA fuller documentation bundle used in some llms.txt ecosystems.llms.txtA machine-readable instruction file that can point AI tools toward curated documentation and resources.LNG carrierA ship designed to transport liquefied natural gas at very low temperatures.Load paththe route force travels through a structure, often where hidden weakness appears.Load profilethe pattern of power demand over time for a facility or system.Load testingA method for checking how a system behaves under heavy or realistic traffic conditions.Load-balanced farmA group of servers sharing one service, where security settings must stay synchronized across all nodes.Loader-as-a-Service (LaaS)A criminal service model that provides reusable malware delivery infrastructure.LoadUserProfileA Windows API used to load a user profile when a service or app impersonates a user; the profile includes registry-backed state.Lobbyingorganized efforts to influence lawmakers or regulators.Local adminA device account level that can increase the impact of misuse or compromise.Local AIAI that runs on infrastructure controlled by the operator instead of a remote cloud service.Local AI workloadsAI processing that runs on the device instead of being sent to a remote cloud service.Local artifactData stored on a device that may reveal user activity or application state.Local attack surfaceThe parts of a system reachable from a logged-in account or local session.Local Authenticated UserA person or process that already has valid access on the machine being targeted.Local Data ModeA DJI feature that can disconnect the flight app from the internet.Local Denial-of-Service (DoS)An availability attack that disrupts a system or service from the local machine or trusted context.Local discoveryA device mechanism that advertises or reveals information to nearby systems on the same network.Local forwardingA tunnel that lets a client reach a remote service through a local port.Local machine learninga model that runs on the device or in a nearby trusted environment instead of depending on constant remote processing.Local map editorA reviewer who checks some Waze map-update suggestions before they are applied.Local model runtimeSoftware that runs an AI model on the device itself.Local networkThe internal wired or Wi-Fi environment inside a home or organization, separate from the public internet.Local network adjacencyThe condition where an attacker must be on the same LAN or Wi-Fi segment as the target device.Local network attackerA person or device already on the same LAN segment as the target, often with closer access than an internet-based attacker.Local optimizationImproving one team’s results in a way that can hurt broader organizational goals.Local PINA device-bound numeric login method used to unlock a session on the endpoint itself.Local privacy surfaceThe parts of a device that may reveal personal or work-related habits through normal use.Local privilege boundaryThe line separating low-privileged user actions from higher-privileged system control.Local privilegesPermissions available on the device itself, often below full administrator access.Local processingHandling data on the device instead of sending it elsewhere for analysis.Local subprocessA separate process launched on the same machine by another application.Local Wireless ConnectionA short-range link between nearby devices that does not require internet access.Local Zero-DayA previously unknown vulnerability exploitable from the local system, often with user-level access.Local-first designAn approach that keeps core data and functions on the device whenever possible.Local-first experiencesoftware behavior that relies more on the device itself than on remote services.Local-first softwareAn application model that performs core functions on the user’s device instead of requiring cloud processing.Locally hosted AIAn AI system run on infrastructure controlled by the operator, rather than through an external cloud service.LocalSystem (SYSTEM)A powerful Windows service account with broad local privileges on the host.Location dataInformation that can reveal where a device or user is operating.Location informationData that describes where a player or object is in the game world.Lock fileA file that pins exact dependency versions so builds stay reproducible over time.Lock ScreenThe pre-login screen that can display limited information before access is granted.Lock screen phishingA tactic that imitates the Windows sign-in screen to steal credentials.Lock-in termthe length of time funds must remain committed.Lock-screen phishingA deceptive screen that appears while a device is locked, designed to trick users into entering sensitive information.Locked deposita savings product that requires money to stay deposited for a fixed period.Lockouta state where legitimate users lose account access after suspicious activity or failed logins.Lockout/tagoutA safety method that isolates energy sources so equipment cannot be accidentally energized during service.Lockstep releaseA release model where related packages move together in matching versions.Locomotion PCThe robot’s control computer, described here as the Linux-based system handling motion and related subsystems.Log fileA record of events that supports troubleshooting, monitoring, and auditing.Log hygienePractices that keep sensitive data out of logs and limit who can access telemetry.Log recordan activity entry that can reveal system events and user metadata.Log serverA system that stores, processes, and helps analyze security and event logs.Log validationchecking access records to separate claims from confirmed activity.Logged-in user contextThe permissions and access level of the active user account on a device.Logging and monitoringDefensive controls that record activity and help detect suspicious access or misuse.Logging Reference ArchitectureA blueprint for deciding what security events to collect, how to organize them, and how defenders should use them.Logic driftThe gradual divergence of business rules across tools, files, or teams when the same process is rebuilt in multiple places.Logic errorA programming mistake in how a system makes decisions or enforces rules.Logic LayerA governed layer of business rules, calculators, and workflows that lets AI produce organization-specific answers.Logic levelA voltage range interpreted by electronics as a digital 0 or 1.Logical decodingPostgreSQL feature that streams database changes to consumers through output plugins.Logical qubitAn error-mitigated or error-corrected qubit built from one or more physical qubits for more reliable computation.Login anomaly detectionMonitoring sign-in patterns to spot unusual access attempts or suspicious behavior.Login recordsauthentication logs that can expose access patterns and device details.Login throttlingA control that slows or limits repeated sign-in attempts to make guessing attacks less effective.Login tokenA credential that represents an authenticated session and may allow reuse of that session.Logisticsthe systems and workflows used to move goods, coordinate delivery, and manage transport operations.Logistics chainthe connected process that moves goods from supplier to customer.Logistics providera business that supports freight movement and related services.LogsTime-stamped records of events or actions inside a system.Long-horizon AIAn AI system designed to work across extended sequences of steps instead of a single prompt.Long-horizon planningChoosing actions today that improve options and resilience over time.Long-lived dataInformation that must remain confidential for years or decades.Long-term access keyAn AWS credential that remains valid until it is manually revoked, making exposure especially risky.Long-term capacity contractAn agreement that secures future compute or hardware access in exchange for commitment.Long-term holdera participant who typically keeps assets for an extended period.Long-term maintenancethe ongoing work needed to keep hardware functional over time.Long-term persistenceA technique or design goal that helps malware remain active on a system over time.Long-Term Servicing Channel (LTSC)A Windows servicing track built for stability and long deployment windows with limited feature churn.LongevityThe extension of human life expectancy, which can also lengthen working life.Longitudinal measurementTracking outcomes over time instead of at a single moment.Longitudinal studyResearch that follows outcomes over time to see whether an effect lasts beyond the immediate moment.Longterm supportA maintenance model that provides fixes for a branch over an extended period.Lookalike linkA web address crafted to resemble a real service so a fake page feels legitimate.Lookalike packageA dependency named to resemble another package closely enough to cause confusion or trust abuse.LoopbackThe local-only network interface, usually 127.0.0.1, meant for traffic on the same machine.Loopback addressA local address such as 127.0.0.1 that refers back to the same device.Loosely organized networkA group structure without a strict central hierarchy or single control point.Loot directorya storage folder used by criminals to collect stolen files, credentials, or artifacts.Loss measurementestimating the direct and indirect financial impact of a cyber incident.Loss of AvailabilityA security impact where a system or service cannot be used as intended, often critical in industrial settings.Lossless audioAudio that preserves the original signal more faithfully than compressed formats.Lossy compressiona method that removes some data to make files smaller.Lossy dataInformation that has been reduced or compressed, leaving out some original detail.Lost-wax processA method for making precise metal castings.Lottery automationsoftware and hardware systems that support wagering, terminals, and transaction handling.Low Latency ProfileA Windows power-management profile that Microsoft documents as active during boot and app launch.Low PrivilegeLimited user permissions that should not allow administrative actions.Low privilegesLimited user permissions intended to restrict what an account can view or change.Low-and-slow activitysmall, repeated actions that can be harder to detect than obvious bursts.Low-Bandwidth DesignInterface and service choices that keep a product usable on slower or less stable connections.Low-cost designAn engineering approach that prioritizes affordability and simple construction.Low-impact activityroutine processing that may qualify for lighter handling in some policy models.Low-latency alertingMonitoring that aims to flag suspicious activity quickly enough for human review before it compounds.Low-Latency HLSA streaming mode that reduces playback delay while preserving scalable delivery over HTTP.Low-level computingProgramming close to hardware behavior rather than using high-level abstractions.Low-level driversoftware that interacts closely with hardware or core operating system functions.Low-power deviceHardware designed to use very little energy while performing a task.Low-pressure environmentA space with less air pressure than normal atmosphere, often used to alter material behavior.Low-privileged accountAn account with limited permissions that may still expose useful data or serve as a stepping stone.Low-resource languageA language with less training data or fewer evaluation resources, which can make AI behavior less predictable.Low-voltage DCDirect current used by many small electronic devices and projects.LPDDR4XA low-power memory standard commonly used in compact devices.LPDDR4X SDRAMA low-power memory type used in Raspberry Pi 5 hardware configurations.LPDDR5Low-power system memory used on the CPU side of AI servers, important for overall platform cost.LSA ProtectionA Windows safeguard designed to prevent unprotected processes from reading or injecting into LSASS.LSTM Neural NetworkA machine learning model designed to work with sequences and time-series data.LTECellular connectivity that lets a device communicate without a nearby phone.LTSLong Term Support, a release model that emphasizes stability and extended maintenance.LTSBLong-Term Servicing Branch, a Windows servicing track designed for low-change, long-lived deployments.LUKSLinux disk-encryption format that uses keyslots and metadata to protect volume data.Luna ServiceLG webOS's internal service layer for app-to-system communication and device functions.Lunar LanderA classic game concept centered on controlled descent and careful input timing.LureA deceptive message or file designed to prompt a victim to click, open, or install something.Lure brandingVisual styling meant to make a fake page look familiar and trustworthy.Lure DomainA domain used as a front door to draw victims into a malicious delivery chain.Lure pageA page designed to attract clicks by appearing useful, familiar, or urgent.lwIPA lightweight TCP/IP stack designed for embedded and resource-constrained systems.LZ77 dictionary coderA compression mechanism used by OpenSSH’s compression path and disabled in 10.6 to reduce side-channel risk.M-BusA communication protocol used for remote reading of utility meters and related building equipment.M&A integrationThe process of combining teams, systems, and controls after a merger or acquisition.Mac clusteringA setup where multiple Macs are coordinated to handle distributed compute jobs.Machine Account QuotaAn Active Directory setting that controls how many computer accounts a user can create.Machine Account Quota (MAQ)The AD setting that controls how many computer accounts non-administrators can create by default.Machine codeThe low-level instructions a processor executes directly.Machine identitiesNon-human identities used by systems, services, and automated workloads to authenticate.Machine Identity IsolationA Windows policy area tied to protecting machine identity material and related authentication behavior.Machine KeyAn ASP.NET cryptographic key used to protect tokens and view state; rotation can be part of incident response on affected servers.Machine keysIIS cryptographic keys used to protect web application data such as cookies and tokens; theft can help persistence.Machine Learning (ML)A subset of AI in which models learn patterns from data instead of following fixed rules.Machine timeScheduled access to a shared computer for work or experimentation.Machine TranslationAI systems that convert text from one language to another.Machine unlearningTechniques that reduce or remove the influence of specific training data from a trained AI model.Machine-readable consentStructured authorization data that software can validate without guessing human intent.Machine-readable contentData that software can parse and act on, even when it is not obvious to a human reader.Machine-readable definitionA definition stored in a structured form that software can query and enforce automatically.Machine-readable evidenceData structured so systems can automatically process and verify it.Machine-readable labelingEmbedding disclosure data in a format software can detect automatically, supporting transparency for synthetic content.Machine-readable markEmbedded metadata or a detectable signal that identifies content as AI-generated or AI-modified.Machine-readable metadataStructured information embedded so systems can process and check it automatically.Machine-readable opt-outA rights-reservation signal formatted so automated systems can detect and respect it during ingestion.Machine-readable reservationA technical opt-out signal that tells systems not to use a work for automated processing.Machine-to-machine authenticationCredential flows used by services, scripts, and other non-human systems.macOS baseline defensesBuilt-in security controls that provide a starting layer of malware protection on Apple devices.macOS forensicsThe practice of examining Apple Mac systems for digital evidence.macOS Privacy & SecurityThe settings area where Apple groups sensitive permissions such as file access, automation, and monitoring.macOS security protectionsBuilt-in controls that help reduce malware risk, but do not stop every user-assisted attack path.macOS supportCoverage for Apple desktop systems inside an enterprise security stack.macOS TerminalApple’s command-line interface for running shell commands and scripts on Mac computers.Macro blockingA control that prevents Office macros from running in files obtained from the internet.Macro keypadA small programmable keypad that sends shortcuts or custom key actions.Macro malwareMalicious code delivered through document macros, often used in Office files to trick users or automate abuse.Macro warninga prompt that alerts users before a document runs embedded automation.Macro-enabled documentAn Office file that can contain macros; those macros only run if enabled and permitted by policy.Macro-enabled Word documentAn Office file that can contain embedded code in macros, which attackers often abuse for initial execution.MacSync StealerA macOS malware family described as an information stealer and remote-access staging framework.MAECIThe acronym for the Italian Ministry of Foreign Affairs and International Cooperation.Magnetic flakessmall magnetic particles used in a separation or cleanup concept.Magnetic fluxA measure of how much magnetic field passes through a given area.Magnetic switchA key switch that uses magnetic sensing rather than a traditional contact mechanism.MagnetsMaterials that produce a magnetic field and can be used for fastening, alignment, or closure.Mail flow inspection pipelineThe sequence of checks that analyzes incoming email before it is delivered.Mail GatewayA system that inspects and filters email before it reaches internal users.Mail Security GatewayA device or service that filters and inspects email traffic before it reaches users.Mail sessionThe authenticated browser state that lets a user interact with a mailbox without logging in again.Mail SpoolThe on-disk area where a mail server stores queued messages.Mail Transfer AgentSoftware that routes email between systems and manages delivery.Mail-tracking featureA function that traces or reports email delivery activity and can become sensitive if it interacts with system resources.Mailbox exporta bulk copy of email messages and attachments from an account.Mailbox exposureemail data can support phishing, impersonation, and internal mapping.Mailbox forwarding rulesEmail settings that can redirect messages and are sometimes abused to hide attacker access.Mailbox governancethe rules and controls that decide who can access and manage email content.Mailbox retentionthe period during which email content is kept after it is no longer actively used.Mailbox riskthe security impact of sensitive email content, contacts, and internal references.Mailbox RuleAn email filter or forwarding rule that can be abused to hide, redirect, or persist access to messages.Mailbox-level controlAdministrative settings that can allow or block webmail access for specific accounts.MailstoreThe server-side storage area where email, attachments, and related user data are kept.Main threadThe browser execution path that handles script work, rendering, and user interaction.MainlineThe primary development branch where new Linux kernel changes are integrated first.Mainstream supportthe earlier support phase before extended support begins.Maintenancethe work needed to keep equipment functional over time.Maintenance abuseA tactic where attackers exploit service access, keys, or hardware handling to reach an ATM’s internals.Maintenance blind spotA system component that is easy to overlook during routine checks.Maintenance branchA supported software release line that receives security fixes after a major version ships.Maintenance evolutiveOngoing work that updates, improves, and adapts a digital system after deployment.Maintenance HorizonThe support window that defines how long a platform receives updates, fixes, and official assistance.Maintenance pathThe approved way technicians service, inspect, or update equipment.Maintenance PlannerSAP’s tool for checking dependencies and planning updates across an SAP landscape.Maintenance releaseA vendor update that bundles fixes into the normal software update channel.Maintenance statusThe support state of a product release, which can affect how and when fixes are delivered.Major nonrecoverable faultA controller fault state that stops normal operation and requires a power cycle to recover.Maker-checker approvalA control where one person performs an action and another person independently reviews it.Malicious browser extensionA browser add-on designed to steal data or manipulate sessions.Malicious campaigna coordinated set of harmful actions carried out to deceive, steal, or disrupt.Malicious commita code change intended to introduce harmful or deceptive behavior.Malicious copy-and-pasteA user-execution technique where victims are persuaded to paste attacker-controlled commands into system tools.Malicious copy-and-paste executionAn ATT&CK user-execution pattern where the victim pastes attacker-controlled commands into a shell or terminal.Malicious domainA web address used by attackers to host lures, payloads, or credential-harvesting pages.Malicious library executionA supply-chain technique where harmful code runs after a user installs a seemingly normal package.Malicious linkA URL designed to lead victims to harmful content, credential theft, or other attacker-controlled pages.Malicious scriptsJavaScript or similar code inserted to perform unwanted or harmful actions in a browser session.Malicious updateA software update that delivers harmful code instead of legitimate maintenance or fixes.Malicious update packageA software file crafted or altered to carry harmful behavior.Malicious URLA web address crafted to send a victim to a phishing page or other harmful destination.Malicious-extension listA registry-maintained record of extension IDs flagged for suspected abuse or unsafe behavior.Malware advisoryA security record that identifies a package as malicious rather than merely vulnerable.Malware analysisThe process of studying suspicious software to understand what it does and how it behaves.Malware artifactsThe files, processes, registry entries, and other traces that can reveal malicious activity.Malware delivery chainThe sequence of infrastructure and actions used to get malicious code or payloads onto a target system.Malware dropperA small malicious program designed to install or launch a larger payload.Malware InfectionThe presence of malicious software on a system, which may lead to disruption, persistence, or data exposure.Malware infrastructureThe domains, servers, and services malware relies on to operate.Malware stagingThe setup phase in which malicious software is placed on a target system before the main attack runs.Malware triageThe process of quickly sorting and assessing suspicious code or files for threat indicators.Malware-freeAn attack or detection context where traditional malware is absent, so defenders must rely on identity, behavior, and context.Malware-free attackAn intrusion that relies on legitimate tools, credentials, or services instead of dropping malicious files.Man-in-the-middle (MITM) attackAn attack where traffic is intercepted or altered between two endpoints.Managed AI security agentAn AI system run with administrative controls, oversight, and defined permissions for security tasks.Managed allowlistAn administrator-approved list of software or extensions permitted to run in an enterprise environment.Managed ChromebookA Chromebook enrolled under administrative control with centrally enforced settings.Managed clusterA Kubernetes cluster administered through a central control plane or management layer.Managed detectioncontinuous review of telemetry and alerts to spot suspicious activity.Managed Detection and Response (MDR)A security service model that combines continuous monitoring, threat hunting, and incident response support.Managed File Transfer (MFT)Software designed to move files securely while supporting automation, auditing, and access control.Managed firewalla firewall service run by a provider that handles monitoring and administration.Managed IT servicessupport and administration functions that can concentrate privileged access.Managed policyA reusable AWS permission set that can be attached to users, groups, or roles.Managed ProfileAn Android profile controlled by management policies, commonly used in enterprise and BYOD setups.Managed Security Service Provider (MSSP)An outside team that monitors and manages security for client organizations.Managed Security ServicesOutsourced security functions such as monitoring, incident handling, or advisory support.Managed serviceA provider-operated service that handles some or all of a customer’s IT or security functions.Managed services contractAn agreement that outsources defined IT or business functions to a third-party provider.Managed services providerA company that administers IT systems for other organizations.Managed systemA centrally administered setup that applies security rules consistently.Managed WordPressA hosting model that handles parts of WordPress administration so site owners can focus on content and use.Managed WordPress hostingA hosting model where the provider handles key operational tasks for WordPress sites.Managed XDRA managed service that combines detection, investigation, and response across multiple security layers.Management agentSoftware on an endpoint that receives administration, monitoring, or control commands.Management certificateA certificate used within a system’s administration or trust setup, often as part of service control or authentication.Management feea charge taken for running or maintaining a financial product.Management hostA server used to administer infrastructure such as routers, virtual machines, or other enterprise systems.Management InfrastructureThe administrative systems used to configure, monitor, and control security products.Management layerThe part of a system that governs configuration, access, and operational control.Management productThe administrative system used to configure and govern security infrastructure.Management surfaceThe administrative interface or service used to configure and control a system.Management systema structured framework for controlling processes, responsibilities, and risk.Management system standardA formal framework for organizing controls, documentation, and continual improvement, such as ISO/IEC 27001 or ISO/IEC 42001.Managerial layerThe middle-management level that coordinates teams, reviews work, and helps absorb organizational change.MandateThe permission boundary that defines what an agent is allowed to do.Mandatory principles and outcomesRequired legal goals that must be turned into practical action.Mandelbrot setA well-known fractal defined by iterating a simple mathematical rule.ManifestsDeclarative configuration files that define how Kubernetes objects should be created and run.Manipulationa robot's ability to grasp, move, and use objects in the physical world.Manipulation of ControlAn ICS attack pattern involving unauthorized changes to commands or process values.Manual ApprovalA human check required before an AI agent performs sensitive or high-risk actions.Manual cleanupA scanner-and-remediation approach used to find and remove threats on demand.Manual enableA setting that must be turned on by the user.Manual evidenceproofs collected by people instead of being gathered automatically from systems.Manual log analysishuman review of logs to infer what security controls are doing.Manual processA workflow that depends on repeated human action instead of automation.Manual review overrideA decision path where staff can bypass automated controls, sometimes creating fraud risk if abused.Manual validationHuman review used to confirm whether an automated finding is real and exploitable.ManufacturabilityHow easily a design can be produced consistently in real-world hardware assembly.ManufacturerThe regulated actor that places a product on the market under its name or trademark.Manufacturer responsibilityThe duty borne by the product maker for security-related components under its control or oversight.Map directiveAn NGINX configuration construct that creates one variable from another, including regex-based matches.Map of WorkA governed record of the real steps, exceptions, and judgment calls involved in a business process.MapLibre GL JSAn open-source JavaScript library for rendering interactive web maps.Mapped portA port forwarded or translated by NAT so traffic reaches an internal service.Marginthe supplier's added amount above the indexed reference price.MariaDB Connector/CThe official C/C++ client library used by applications to connect to MariaDB.MariaDB ServerAn open-source relational database engine used to store and query structured data in applications and enterprise systems.Marine shippinglogistics and port operations that rely on connected systems and coordinated access.Maritime cyber riskThe chance that compromised information or systems disrupt ship operations, safety, or security.Maritime economythe business and support ecosystem around shipping, ports, logistics and related services.Maritime operatorAn organization or entity that runs vessels, terminals, ports, or related maritime infrastructure.Maritime satellite connectivitysatellite-based broadband used to connect ships beyond terrestrial coverage.Maritime situational awarenessThe ability to monitor, understand, and react to activity at sea through sensors, reporting, and coordinated decision-making.Mark of the Web (MotW)Windows metadata that marks a file as having come from the internet or another untrusted source.Mark-of-the-WebWindows provenance metadata that marks files from the internet or other untrusted locations.Mark-of-the-Web (MotW)A Windows trust marker that flags files as coming from the internet or another untrusted source.MarkdownA lightweight text format often rendered inside notebook cells and outputs.MarkdownStringA VS Code API for rendering markdown that can include clickable command links when trusted.Market demandthe level of customer interest in a product or service.Market leaderThe company or product family that sets the pace in a competitive field.Market substitutionA situation where a new product can reduce demand for the original work it resembles or replaces.Market surveillanceRegulatory oversight meant to check whether systems meet legal requirements.Market surveillance authorityThe national EU authority that receives and reviews certain AI Act incident reports.Market testA limited experiment used to learn whether expansion is worth scaling.Market-implied productivityAn estimate derived from financial-market reactions that reflects expected future gains, not direct measurement of output.Marketing consentPermission to use personal data for promotional contact.Marketplace abusemisuse of a platform feature to mislead users or boost deceptive content.Marketplace trust signala platform cue that can make content seem safer than it is.Markupthe extra amount charged above an underlying cost or expense.Marshal.loadA Ruby method that deserializes data back into objects and should not be used on untrusted input.Masked domainA partially hidden website name that limits direct public identification.Masked identifiera partially hidden name used when full identity is unclear.Masked namean obscured organization label that limits immediate identification.Masked victima partially hidden target name that signals an alleged case without full identification.MasqueradeA technique where attackers imitate a trusted brand, product, or service to gain confidence.Mass budgetThe strict limit on how much weight a spacecraft or aircraft can carry.Mass printingthe large-scale production of many identical copies using a repeatable process.Mass productionLarge-scale manufacturing designed to produce repeated units efficiently and consistently.Mass scanningAutomated probing of many internet-facing systems to find exposed devices or services.Mass scrapingAutomated collection of large numbers of web pages or links.Mass-scanning campaignAutomated probing of many internet-facing targets to find a common weakness or exposed data.Master copyThe primary version of a file, often the most valuable one in a workflow.Master partthe original item used to create the mold.Master templateThe original pattern or form used to generate multiple copies in a duplication process.Mastery-Oriented MetricsMeasures that focus on retention, skill application, and progress rather than speed alone.Match coordinationThe scheduling and synchronization needed to start and run games on time.Match patternA rule that limits which sites or URLs an extension is allowed to interact with.Match stateThe live record of what is happening inside a game session.Materia energiaThe part of an electricity bill linked to the supply of energy itself.Material compatibilityThe degree to which different materials can be used together successfully in one system.Material databaseA reference collection of settings or notes tied to specific printing materials.Material erosionGradual loss of surface material caused by heat, pressure, or abrasion.Material selectionThe process of choosing a substance that fits the intended use and environment of a part.Material stabilityHow well a material keeps its form and properties over time.Material supportLegal language covering assistance that may create sanctions compliance exposure.Materials scienceThe study of how the properties of materials affect their use in real systems.Materials simulationComputer modeling used to predict how compounds and structures may behave.Mathematical fragilitya weakness in the underlying structure of a cryptographic scheme.MatterA smart-home standard designed to help devices work across different ecosystems.Maturity AssessmentA structured review used to measure current capability and track improvement over time.Maturity modelA structured framework used to assess how well an organization performs a process and where it can improve.Maximized windowAn application window that fills the available screen space.Maximum severityA label used for vulnerabilities considered to require urgent remediation because of their potential impact.Maxwell’s equationsFour equations that describe classical electromagnetism.MbpsMegabits per second, a measure of data transfer speed.MCP bridgeThe interface layer that connects AI agents to external tools and commands.MCP connectorAn integration that gives an AI assistant access to a remote tool or service.Mean time to detectThe average time between an incident starting and it being discovered.Mean time to respondThe average time between detection and containment or remediation action.Meaningful ConnectivityA framework for real digital access that includes quality, availability, affordability, devices, skills, and security.Measurable criteriaSpecific test conditions used to judge performance consistently.Measurable processesSecurity workflows that can be checked through evidence, records, or repeated outcomes.Measured bootA process that records boot components into TPM PCRs so later trust decisions can compare system state.Measurement biasa distortion that happens when a metric captures activity better than effectiveness.Measurement chainThe full path from sensor reading to final interpreted output.Measurement errorThe difference between a measured value and the true value.Measurement fidelityHow closely a system’s output matches the real thing it is trying to measure.Measurement scienceThe discipline of making test results consistent, reproducible, and comparable.Measurement validityThe degree to which a test actually measures what it claims to measure.Mechanical designthe arrangement of parts and forces that makes a device function.Mechanical displayA display that uses moving parts instead of only light.Mechanical switchA physical input part that changes state through movement.MechatronicsEngineering that blends mechanics, electronics, and software into one system.Media playerThe software component that handles video or audio playback inside a page or app.Media pluralismthe presence of diverse sources, viewpoints, and access paths in the information environment.Media provenanceMethods used to track the origin and authenticity of digital content.Media recoveryThe process of reconstructing usable data from a stored medium or archive.Media serverSoftware that organizes, stores, and delivers personal media to connected apps and devices.MediaProjectionAn Android API that lets an app capture screen content after user consent.MediaTekA chip platform commonly used in smartphones and other mobile devices.Mediation toola mechanism that shapes how communication happens between two sides.MediaWiki APIThe interface Wikimedia platforms use for programmatic reading, editing, and other operations.Medicaid IDA unique identifier used to link a beneficiary to program records.Medical aid schemeAn organization that manages member health benefits and claims.Medical billing companya business handling billing and claims-related records.Medical datasensitive health-related information that can create legal, operational, and privacy risk if exposed.Medical device cybersecurityThe protection of connected clinical equipment against misuse, tampering, and software risk.Medical Device Regulation (MDR)EU rules that classify certain software as medical devices when it is intended for a medical purpose.Medical device regulationsEU rules that govern the safety, performance, and compliance of medical devices.Medical device securityControls and oversight applied to connected clinical equipment that may have unique technical and safety constraints.Medical Identity FraudThe misuse of someone’s personal or health information to obtain care, prescriptions, or insurance benefits.Medical Identity TheftFraud that uses personal and health information to obtain care, benefits, or insurance payments.Medical liabilitylegal responsibility for harm linked to healthcare decisions or omissions.Medication managementThe process of organizing, timing, and tracking medicine use.Medicine Value ChainThe full path of medicine from sourcing and production to packaging, distribution, and delivery.Medium confidenceAn assessment level meaning the evidence is credible and plausible, but not strong enough for a definitive conclusion.Medium formatA camera format with a larger image area than 35mm, often valued for detail and tonal depth.Meeting securitycontrols that help verify participants and reduce deception during collaboration sessions.Megatexturea large texture approach designed to manage detailed surface imagery.Member databasea stored collection of personal or administrative records tied to an organization’s users.Member State systemsNational systems or services that fall under the authority of EU countries and may be included in the revised scope.Membership inference attackA privacy attack that tries to determine whether a record was part of a model’s training set.MemeA piece of content that spreads rapidly online and can carry political meaning.MemeticsThe study of how ideas spread through imitation and repetition.MemorandumA formal agreement that can set out how agencies cooperate on shared cases.Memoria organizzativaThe shared context an organization preserves to support decisions and continuity.Memorized secretA password or passphrase that a user must remember and type during login.MemorizzazioneThe storing of invoice data within an official or managed system.Memory accessthe process of reading from or writing to system memory.Memory analysisExamining code in RAM, where unpacked malware often becomes visible.Memory consolidationThe process of stabilizing useful information so it lasts longer in the model.Memory constraintA limit on how much RAM a program or system can use effectively.Memory controllerHardware that manages how data moves between the CPU and memory.Memory dumpa capture of data held in RAM, which may include sensitive runtime material.Memory expansionA hardware addition that increases the amount of available RAM.Memory FeatureA function that retains prior context across sessions to make conversations feel persistent.Memory footprintThe amount of RAM a program or operating system uses while running.Memory ForensicsAnalysis of volatile system memory to uncover running malware, keys, or command activity.Memory HygieneThe practice of controlling what an AI system stores, recalls, and retains over time.Memory IntegrityA Windows security control that helps block untrusted kernel-mode code from running.Memory interposerHardware placed in the memory path to observe or influence communication.Memory managementThe operating system logic that controls how software uses system memory.Memory modelBackground term for the rules that describe how software expects memory to behave.Memory modificationUnauthorized changes to privileged memory that can corrupt kernel state or alter behavior.Memory overflowA software flaw where data exceeds allocated memory, often causing crashes or unstable behavior.Memory overwritereplacing data already loaded in a process, which can disrupt behavior without closing the program.Memory paththe route data follows between processor and memory.Memory Safety VulnerabilityA bug that can corrupt or read memory in unintended ways, sometimes leading to exploitation.Memory specificitythe level of detail in a recalled event, such as time, place, or context.Memory wallThe performance gap between fast compute and the slower movement of data from memory to processor.Memory-coherent architectureA design where CPU and GPU maintain coherent access to memory, reducing explicit data movement overhead.Memory-onlyA tradecraft pattern where malicious activity is described as running without obvious files left on disk.Memory-residentSoftware that operates in volatile RAM rather than as a normal file on disk.Memory-resident malwareMalware that operates primarily in RAM, often reducing filesystem traces.Memory-resident payloadsMalicious code that runs in system memory instead of leaving obvious files on disk.Memory-safety vulnerabilityA bug that breaks rules for safe memory access and can lead to crashes or exploitation.MentoringGuided learning from an experienced person that helps a junior worker build judgment and confidence.Mercati informativiSystems that aim to turn dispersed knowledge into price signals.Merchant accounta business account that can process payments through a provider.Merchant activationThe onboarding step that makes a business ready to accept payments.Merchant vesselA civilian ship used for commercial transport of goods, which can still become a security target in conflict-adjacent waters.Mercurya dense liquid metal historically used in scientific instruments.Merge authorityThe role or person with final approval to accept changes into a codebase.Merge-time scanningChecking code or configuration before it is merged, so problems are caught early in the delivery flow.Mergera combination of two companies into one corporate structure.Merits hearinga court proceeding that examines the facts and arguments of a case.Mesh networkA network where devices relay traffic for one another instead of depending on a central hub.Mesh resolutionThe level of detail used in the computational grid that supports a simulation.Mesh-Style InfrastructureA distributed control layout with multiple nodes, often used to relay traffic and manage operations.MeshCentralAn open-source remote-management platform that supports remote desktop, terminal, and file control.MesonA hadron made of one quark and one antiquark.Message disciplinekeeping public communications consistent across channels.Message filteringAutomated screening that tries to separate suspicious texts from normal traffic.Message headerEmail metadata that can help trace routing, origin, and handling details during an investigation.Message routingThe process that carries email between mail systems and domains.Message-origin validationA control that checks whether a message really came from a trusted source.Meta agentA supervisory AI layer that monitors, governs, and optimizes other agents.MetabaseAn open-source business intelligence platform used to query and visualize data.Metadata catalogA system that stores and searches descriptive information about data resources.Metadata exposureNon-content information about a connection, such as timing or destination details.Metadata serviceA cloud endpoint that can provide instance details and, in some setups, temporary credentials.Metadata sprawlOperational details spread across systems that can reveal more than intended.Metadata-Based Attack TestA technique that uses package metadata or related fields to probe or trigger registry behavior.Metadata-first approachAn analysis method that prioritizes file and telemetry data before executing suspicious code.Metal cardA physical payment card made from metal, often positioned as a premium product.Metasploit FrameworkAn offensive security platform used to develop and automate exploit modules.methodprefix: A Struts request pattern used in DMI-style dispatch that can be abused in vulnerable configurations.Method DispatchThe process a framework uses to decide which application method handles an incoming request.Methodological integrationhow well a technology fits teaching methods and lesson design.MethodologyThe test design and measurement rules used to produce a technical result.Metodo seguitoThe reasoning and steps used to reach a decision, not just the final outcome.Metric catalogA defined list of measurements, formulas, owners, and update rules used to keep reporting consistent.Metropolitan ecosystemThe set of utilities, skills, networks, and rules that support urban activity.MFA challenge interceptionA tactic where an attacker relays or captures the authentication step needed to complete login.MFA prompt abuseTricking a user into approving a multifactor authentication request they did not initiate.MFA Push AbuseRepeated authentication prompts sent to pressure a user into approving access.MICR linesmachine-readable check markings that can help enable payment and document fraud if copied.Micro-credentialsShort, targeted learning certificates meant to document specific skills or competencies.Micro-expressionsVery brief facial expressions that may be used as weak signals in emotion inference.Micro-nicheA very narrow topic area that targets a specific question or audience.Micro-paymentA very small financial transaction that may be uneconomic on conventional payment rails because fees and settlement costs can dominate the value.Micro-SLAA high-precision form of stereolithography designed for extremely small features.Microbusinessa very small business with limited staff, budget, and operational slack.Microcode ROMread-only memory that stores a processor's microcode.Microcrimesmall-scale offending that can still cause meaningful harm when repeated.Microelectronicsthe field focused on very small electronic components and related systems.Microfinance banka lender focused on smaller-scale financial services.MicrohubA small logistics node used to stage or transfer goods closer to delivery zones.Micron scaleA size range measured in millionths of a meter, used for extremely small features.Micropaymentssmall-value transactions that rely on fast processing and low fees.Microplasticstiny plastic fragments that can persist in the environment.Microsoft 365 E5a Microsoft subscription tier referenced here as the context in which Defender for Endpoint may offer strong value.Microsoft 365 RoadmapMicrosoft’s public planning tracker for in-development product features and rollout timing.Microsoft 365 sessionAn authenticated cloud access state that can remain valid after the initial login is complete.Microsoft 365 sharingThe set of controls that govern how data is shared across collaboration services in a tenant.Microsoft 365 tenantA separate organizational environment in Microsoft’s cloud with its own identity and policy controls.Microsoft Account CredentialsSign-in details that can unlock email, cloud storage, and connected services.Microsoft Defender for EndpointMicrosoft’s enterprise endpoint security platform, which still depends on Defender Antivirus for file-scanning capability.Microsoft Defender for Office 365Microsoft’s cloud email security service for detecting and blocking common message-borne threats.Microsoft Defender tamper protectionA Windows security control meant to prevent unauthorized changes to key Defender settings.Microsoft SentinelMicrosoft’s cloud security platform for detection and response.Microsoft SQL ServerMicrosoft’s database platform, which can serve as a backend for WSUS in some deployments.Microsoft Store suggestionsapp or product recommendations surfaced inside Windows search.Microsoft-nativeBuilt to integrate closely with Microsoft security products and cloud services.MicrotomographyHigh-resolution X-ray imaging used to visualize internal structures inside small specimens.MicroVMA lightweight virtual machine designed to isolate workloads with less overhead than a traditional VM.Mid-careerthe stage in a professional life where priorities and goals often begin to shift.Mid-drive motorAn e-bike motor mounted near the crank, where it works through the drivetrain.Mid-market firmscompanies between small business and large enterprise size.Migration complexityThe operational difficulty of replacing embedded security technology without breaking services.Migration InventoryA structured list of where a technology is used, created to plan upgrades or replacements safely.Migration planA documented method for moving data or users to a replacement system before retirement.Migration riskSecurity and operational issues that can appear when content moves between platforms or formats.Migration RoadmapA phased plan for testing, prioritizing, and replacing vulnerable cryptographic components over time.MikroTrickA label used for the RouterOS vulnerability cluster linked to active exploitation.Milestone editionA notable version of a recurring event, often used when a conference reaches an important count or anniversary.Milestone managementTracking progress against specific goals so projects are judged by evidence, not aspiration.Military mobilityThe ability to move troops, equipment, and supplies quickly across borders and through transport networks.Military readinessThe ability of armed forces to sustain and carry out operations with the support they need.Military targetsDefense-related networks, systems, or organizations that may be valuable for espionage, disruption, or access operations.Millennium Prize ProblemOne of seven major unsolved mathematics problems identified by the Clay Mathematics Institute.Millennium Prize ProblemsA set of landmark unsolved problems defined by the Clay Mathematics Institute.MIME parsingThe process of interpreting structured email content, which can be risky when messages are crafted maliciously.Mind virusA self-propagating idea or goal that can move from one AI agent to another through interaction.Miner-like PayloadA payload reported to resemble or behave like mining malware; the exact purpose is not confirmed from the source excerpt.Minimal modela simplified explanation that captures the core behavior of a system.Minimal runtimeA stripped-down execution environment that keeps only essential features.MinimalismA design approach that removes anything not considered essential.Minimalist designAn approach that uses only the essential parts or features.Minimalist editorsoftware that focuses on core editing tasks with little interface overhead.Minimalist hardwarea design approach that uses as few components as possible.Minimization rulesSafeguards designed to reduce collection, retention, or impact on unintended persons or systems.Minimum depositThe smallest amount required to open or fund an account.Minimum necessaryA privacy principle that limits access to only the data needed for a specific task.Minimum Viable CompanyThe smallest set of people, processes, and technology needed to keep critical operations running during disruption.Minimum-necessary disclosureReleasing only the smallest amount of data needed for a legitimate request.Minority OpinionA less common viewpoint that can disappear when a model favors the dominant sentiment.Minors onlineChildren and teenagers using digital services, often with different needs from adult users.Mint conditiona description meaning the project is presented in excellent, clean state.Mipmappinga texture method that uses smaller image versions for distant detail.MiraiA well-known botnet lineage that infects IoT and embedded systems, often for DDoS activity.Mirai-derivedbuilt from or influenced by the Mirai botnet family.Mirai-likeA description for automated bot activity that resembles the scanning style associated with Mirai.Mirror domainA secondary domain that serves mirrored content from another source.Misconfigured serverA system left with settings that expose it more broadly than intended.Misordered ruleA rule placed in a sequence that can change how traffic is evaluated.Missing authentication for a critical functionA condition where sensitive actions can be reached without valid login checks.Mission capacityThe practical ability of an organization to carry out its core duties under pressure.Mission extensionAdditional operational time gained beyond the original plan.Mission windowThe limited time period when a space operation can safely occur.Mission-critical communicationscommunication systems that must remain reliable during emergencies or high-stakes operations.Mission-critical softwaresoftware whose failure can seriously disrupt an essential operation.Misurazione scientificastructured evaluation used to check whether outcomes are real.Misure cautelaritemporary court measures used to limit harm before a final judgment.Mitigation evidenceRecords showing what an organization did to reduce harm, correct issues, or prevent recurrence.MITMShort for man-in-the-middle, an attack where someone intercepts or alters traffic between two parties.MITM-resistantDesigned to reduce man-in-the-middle attacks by verifying the pairing or communication path.MITRE ATT&CK MobileA reference framework that catalogs adversary tactics and techniques against mobile platforms.MITRE ATT&CK T1003.001A technique category for LSASS memory credential dumping in Windows environments.MITRE ATT&CK T1027.018A classification for abusing invisible Unicode characters as an obfuscation method in malicious content.MITRE ATT&CK T1068A technique category for exploiting software vulnerabilities to gain higher privileges.MITRE ATT&CK T1091A technique covering replication through removable media, often used to describe USB-based spread.MITRE ATT&CK T1204.004A technique for user-driven malicious copy-and-paste execution.MITRE ATT&CK T1539The technique for stealing web session cookies to gain unauthorized access through a valid session.Mixed contractA contract that covers multiple services or scopes, which may require different control treatments.Mixed data repositoryone storage area holding both personal and business records.Mixed developmentA property combining multiple functions such as retail, residence, and dining.Mixed procurementA contract structure that combines different types of services, works, or supplies in one award.Mixture of ExpertsA model design that activates only selected sub-networks for each input.Mixture-of-ExpertsAn architecture that activates only selected submodels for each input.ML-DSAA post-quantum digital signature algorithm used in Internet X.509 certificates and CRLs.MLB Ballpark appThe mobile app used for digital tickets and fan services at Major League Baseball venues.MLflowAn open-source platform used to manage machine learning experiments, models, and artifacts.MMSMultimedia Messaging Service, an older messaging standard for media and rich content.MMUMemory Management Unit, hardware that helps manage memory and isolate processes.MNRFMajor nonrecoverable fault, a controller state that typically needs manual recovery.Mobile appsecSecurity practices and tools used to protect mobile applications across development and deployment.Mobile bankingAccount management and financial operations performed through a smartphone app.Mobile banking interfaceThe app-based screen and workflow used to manage financial products.Mobile deviceA phone or tablet that runs apps, settings, and user-facing system services.Mobile device managementA policy and software layer used to deploy updates and enforce settings across managed devices.Mobile fleetA group of phones or tablets managed together by an organization.Mobile fraud platformA malware setup that can be reused to support repeated fraudulent activity on infected phones.Mobile marketthe commercial environment for carrier services, subscriptions, and device access.Mobile notificationan alert shown on a phone that may prompt immediate action.Mobile opticsThe lens and optical components that control how a phone captures light and detail.Mobile POSA portable payment tool used by merchants to accept card transactions away from a fixed checkout.Mobile SASTStatic application security testing focused on mobile code before release.Mobile satellite servicessatellite-based services designed to support communication on the move.Mobile Threat DefenseSecurity tooling that looks for suspicious behavior on phones and tablets.Mobile Threat Defense (MTD)Security controls that monitor mobile devices for malicious apps, risky behavior, and network threats.Mobility as a Service (MaaS)A digital layer that combines transport options into a single user-facing service.Mobility simulationthe use of data and models to estimate how people and vehicles move.MobilizationThe coordination phase where teams assign owners and drive remediation to completion.MobyThe upstream codebase that underpins Docker Engine and related container components.Mock flightA live rehearsal that simulates airport and onboard passenger workflows before a system launch.MOD fileA tracker music file commonly linked to the Amiga ecosystem and sampled music sequencing.mod_proxyAn Apache module that forwards requests to back-end systems and can widen the trust boundary if misconfigured.mod_rewriteAn Apache module that changes request paths or redirects traffic based on rules.ModbusA widely used industrial communication protocol that was not originally designed with native security features.Moddingunofficial modification of hardware or software to change behavior or form.Modding ecosystemThe network of third-party add-ons, clients, and tools used to customize a game like Minecraft.Model abuseMisuse of an AI system for harmful, prohibited, or policy-violating activity.Model API chargesThe cost of calling AI services during research, which can be an operational detail rather than proof of any specific technique.Model backendThe underlying AI model or provider that performs the actual generation task.Model calibrationTuning a detection system so its alerts are accurate enough to remain useful.Model cardA record that describes a model’s purpose, limits, evaluation, and licensing details.Model cascadingRouting requests to different models based on complexity, cost, and latency tradeoffs.Model changeAny update that alters how a system behaves, makes decisions, or processes data.Model checkpointa saved snapshot of a model during training or deployment.Model Context ProtocolAn AI integration protocol designed to let applications connect to servers that provide tools, resources, and prompts.Model deprecationThe planned retirement of an AI model version, after which requests to it no longer work as before.Model extraction attackA technique that tries to replicate a target model by repeatedly querying its interface.Model gatewayA layer that normalizes requests so applications can use multiple AI providers through one interface.Model gatingA design where a feature exists only on specific hardware versions, even if other products get the same update.Model Hardware Standard (MHS)A provisional or research-preview interface intended to connect AI agents with hardware; it is not established here as an EU standard.Model HubA platform for storing, sharing, and deploying models, datasets, and related artifacts.Model improvementThe process of using permitted data to refine AI behavior and outputs.Model MisalignmentA situation where an AI system behaves in ways that diverge from its intended or safe goals.Model opacityA situation where the reasoning behind an AI decision is difficult to inspect, explain, or audit.Model OversightThe practice of checking an AI system’s outputs, behavior, and failures before acting on them.Model PortabilityThe ability to move workflows from one AI model provider to another with limited rework.Model RegistryA server-managed system for versioning, organizing, and governing machine learning models.Model RouterA platform that routes requests across multiple AI models based on price, performance, or policy.Model signatureA cryptographic mark used to verify the integrity and origin of a model artifact.Model template poisoningTampering with the instructions or template an AI agent reuses, so future outputs or actions can be influenced.Model Training DataThe information used to build or improve a model, which can create privacy and leakage concerns.Model turnA single model processing step in which the AI produces text, structured output, or a tool request.Model vulnerabilityA weakness in an AI system that may be exploited to alter behavior, decisions, or reliability.Model-agnostic AIAn architecture that decouples an application from any single foundation model.Model-agnostic platformA system that can work with multiple underlying AI models instead of relying on only one.Model-generated reportA finding created by an AI system rather than a human researcher.Model-risk oversightThe governance used to test, monitor, and control AI or statistical models in regulated settings.Model-specific siliconHardware designed around one trained model or narrow model family.ModelineA per-file Vim directive that can set options and must be treated carefully on untrusted content.ModelingThe use of abstract or computational representations to study complex systems.Modelo 347annual tax declaration data that can reveal supplier and customer transaction details.ModemA device that moves data over communication lines by converting signals into a transferable format.Modem firmwareLow-level software that manages cellular radio functions and communications with the mobile network.Moderation capacityThe ability of a platform or team to review and manage content at scale.Moderation gapA delay or weakness in reviewing and acting on harmful content or accounts.Moderation latencyThe delay between harmful activity and platform response.Moderation processthe review and handling of harmful content or reports by a platform or service operator.Moderation screeningAutomated review used to inspect ads or links before they are approved.Modern attacksContemporary intrusion methods that may bypass older, file-focused defenses.Modern Lifecycle PolicyMicrosoft's support model that expects customers to remain on current supported versions.Modified exploitan attack method changed to improve success or reduce detection.Modular constructionA design approach built from repeatable parts that can be rearranged.Modular hardwareEquipment designed from separate parts that can be tested or replaced individually.Modular implantMalware built from separate components that can be loaded or activated as needed.Modular malware frameworkMalicious software built from interchangeable components that can be reused for different tasks.Modular RATA remote access trojan built from components that can add or change capabilities after infection.Modular storageAn arrangement of interchangeable parts designed to fit different items and spaces.module cacheThe local storage area where dynamically loaded Python modules can be reused later.Module integrityVerification that loaded libraries and executables match approved, expected files.Module registryA service that hosts and distributes reusable modules for automated consumption by tools like Terraform.Module signingA Linux control that checks cryptographic signatures before allowing a kernel module to load.Modules cacheA local storage area where dynamically loaded code is kept for reuse.MoistureWater present in or on a material, which can change its electrical behavior.Molecular detectionThe identification of a chemical compound through observational or analytical methods.Monero minerSoftware that uses a device's processing power to generate Monero cryptocurrency.Money trailThe path funds take through accounts, payment services, and transfers after fraud.MongoDB C DriverThe official C library used by applications to connect to MongoDB.MongoDB DriverThe client library applications use to connect to and query a MongoDB database.MongoidThe official Ruby object-document mapper for working with MongoDB data in Ruby applications.MonitorabilityThe ability to observe, audit, and understand a system’s behavior during operation.Monitoraggio clinicorepeated observation of a patient’s condition to assess response and recovery.Monitored stopA controlled halt used in robotics when sensors, spacing, or operating conditions indicate risk.Monitoring configurationSettings that define how systems are observed, alerted on, and administered.Monitoring PlatformSoftware used to observe systems, networks, and service health from a central interface.Monitoring windowA period of heightened log and behavior review used to spot unusual activity after remediation.MonoA managed runtime for .NET-style applications that can bundle code and runtime components together.Monopedal robota robot that moves using a single leg or leg-like support.MonorariaA single-rate electricity tariff that charges the same price at all hours.Monoraria tariffA flat-rate pricing model where the same price applies at all hours.MonorateA pricing model with one unit price for usage across the plan.Monthly Active User (MAU)A billing metric that counts unique users who authenticate or otherwise act within a month.Monthly interest creditingThe posting of earned interest once each month.Monthly reporta periodic status update showing progress or outcomes over time.Mortgage lendera financial-services business that handles loans and related customer documentation.Motherboardthe main circuit board that connects a device’s core electronic parts.Motion dataRecorded movement information used to study, reproduce, or validate physical actions.Motivationthe reasons a person wants a role or career path.Motor sizeThe scale of the propulsion unit, which can affect power and safety.Motorola 68000a classic processor family used in many early personal computers.Motorola MC14500BA historical single-bit industrial control processor often associated with simple automation logic.MountA way to attach one filesystem path inside another environment, which can expand access if misused.Mount boundaryThe line that defines which folders a guest environment can access.Mount namespaceA kernel isolation feature that gives a process its own view of mounted filesystems, helping separate application environments.Mount ServiceA backup-related service path that can handle sensitive data and operations in Veeam Backup & Replication.MountingThe process of making storage accessible to a host system for reading or writing.Mouse pointerThe on-screen indicator controlled by a mouse to select and move between items.Mouse supportPointer control used for navigating graphical interfaces remotely.MRIMagnetic Resonance Imaging, a medical imaging modality that produces detailed internal body scans.MRNmedical record number used to identify a patient in clinical systems.mRNAthe messenger molecule that carries instructions for protein production.MRZmachine-readable passport zone, the encoded line used in passport verification.MSI installerA standard Windows installation package format that can be used to deploy software or, when abused, to introduce malicious tooling.MSI packageA Windows installer format that can be abused to deliver payloads inside a familiar installation flow.MSI-based installA traditional Windows Installer package format used by some Office deployments.msiexecThe Windows Installer command-line utility, sometimes abused to fetch or run malicious packages.MSIXA Windows application packaging format used to distribute and install software.MSIX bundleA bundled package format related to MSIX that can group multiple app packages.MSIXBundleA package format that can combine MSIX-related payloads for distribution.MSP (Managed Service Provider)A company that remotely manages IT systems for multiple customers.MSP portalAn administrative interface used to manage client environments and services.MSP toolingremote management software used by service providers to administer client environments.MSRC Security Update GuideMicrosoft’s advisory hub for CVEs, mitigations, and affected products.MSSQLMicrosoft SQL Server, a database platform that can become a security pivot if exposed features are abused.MTAMail Transfer Agent, the server software that moves email between systems.MTA-STSA policy layer that helps prevent downgrade and redirection attacks against SMTP TLS.MTPDMaximum Tolerable Period of Disruption - the longest outage a business can endure before impact becomes unacceptable.MTSAThe Maritime Transportation Security Act, a U.S. law that sets security requirements for certain maritime operations.MTVMigration Toolkit for Virtualization, a tool used to move virtual machines between platforms.Mu metalA shielding material discussed in the article.Multi Round-Trip RequestsA mechanism for multi-step exchanges without keeping a persistent connection open.Multi-account workflowA browsing pattern where one person uses distinct accounts for different roles or tasks.Multi-agent AIA set of coordinated AI components that can divide tasks and act in sequence toward a goal.Multi-agent AI frameworkA system that coordinates several autonomous agents so they can split tasks, share state, and work in sequence or parallel.Multi-agent orchestrationA design where one AI system coordinates several subagents that each handle part of a task.Multi-agent systems (MAS)Distributed agents that negotiate, coordinate, and respond to local conditions.Multi-AV scanningThe use of multiple antivirus engines to improve the chances of detecting malicious files.Multi-client monitoringA deployment model that lets one platform manage separate environments for multiple customers or business units.Multi-cloud environmentAn architecture that spreads workloads across more than one cloud provider or region.Multi-cloud portabilityThe ability to move workloads between cloud providers or environments with manageable technical effort.Multi-color plottingProducing a drawing with more than one ink or pen color.Multi-color printingA workflow that changes colors during a print job.Multi-currency accountan account that can hold and move funds in more than one currency.Multi-device accessthe ability to use one subscription across different screens or hardware.Multi-device planA subscription model that allows the same service to be used on several devices.Multi-device securityone subscription designed to protect several devices under a single plan.Multi-device viewingthe ability to watch the same service on more than one type of screen.Multi-Domain ManagementA setup that centralizes administration across multiple security domains from one management platform.Multi-Domain Security ManagementA centralized setup that can manage multiple policy domains from one control surface.Multi-Domain Security Management (MDS)A Check Point management platform that hosts and manages multiple Domain Management Servers from a central management tier.Multi-Domain Security Management (MDSM)A Check Point management architecture for administering multiple security domains from a central interface.Multi-Domain Security Management Server (MDS)A centralized Check Point management layer for handling multiple domains.Multi-hop ProxyA chain of relays that makes it harder to trace where malicious traffic began.Multi-layered detectionA security approach that correlates signals from endpoints, identity systems, networks, cloud logs, and other sources.Multi-material printingA 3D printing method that uses more than one material in a single build.Multi-model databaseA database that supports more than one data model, such as document and relational-style data, within the same platform.Multi-operator SIMa SIM setup that can use more than one mobile network.Multi-process architectureA design that splits a browser into separate processes for better security and stability.Multi-process BrowserA browser design that separates web content from more trusted internal components.Multi-provider routingA setup where one user request can be forwarded to different upstream AI services.Multi-rotor droneA drone that uses several rotors for lift and control.Multi-session misuseHarmful or policy-violating behavior that emerges across more than one interaction, rather than a single request.Multi-signatureA control that requires more than one approval before funds can be moved.Multi-site managementCentral administration for keeping policies consistent across locations.Multi-site networklinked locations that may share systems, data, or identity controls.Multi-stage infection chainAn attack flow that splits malware delivery into several steps to reduce detection and complicate analysis.Multi-stage loaderMalware that delivers infection in steps, handing off work to later components.Multi-stage payloadAn attack chain delivered in steps to reduce noise and increase flexibility.Multi-stage routingA chain of redirects or filters that controls which visitors reach the final lure.Multi-step operationA campaign made up of connected stages such as probing, execution, and adjustment.Multi-tenant hostingA setup where one server supports multiple customer sites or accounts.Multi-tenant platformA shared system where separate groups use the same infrastructure with enforced isolation.Multi-tenant SystemA shared environment where one host serves multiple users, projects, or customers.Multi-vendor environmenta network made up of products from several vendors, which can complicate unified policy control.Multi-vendor estatean environment where security tools from different manufacturers must be managed together.MulticastNetwork traffic sent to multiple receivers on a segment at the same time.Multichannel serviceService delivery through more than one channel, such as online access, assisted desks, or remote sessions.Multicloud key managementCentralized control of encryption keys across more than one cloud provider or environment.Multicloud parityConsistent security coverage and policy handling across more than one public cloud.Multicluster EngineA Red Hat platform for managing multiple Kubernetes clusters from a central operational plane.Multidisciplinary skillsA mix of technical, legal, organizational, and policy expertise used to manage complex systems.Multifactor Leadership Questionnaire (MLQ)A widely used instrument for measuring leadership behaviors linked to transformational and transactional styles.MultikernelA design where more than one kernel participates in managing a system’s resources.Multilingual contentMaterial produced or adapted in more than one language to reach different audiences.Multilingual PluginSoftware that helps a site manage and display content in multiple languages.Multilingual resourcecontent provided in more than one language to improve access and comprehension.Multimodal authenticationAuthentication that combines more than one biometric or factor, such as face and fingerprint.Multimodal pipelineA system that combines different kinds of inputs, such as text, sensor data, or user feedback, to produce a single output.Multinational investigationa cross-border law-enforcement case involving more than one country.Multiplatform releaseA product launch distributed across several hardware or software ecosystems.Multiple ledger approachA situation where different teams or tools create separate cost tracks instead of one shared bill.Multiple-Hypervisor StrategyAn approach that runs more than one virtualization platform to reduce dependence on a single vendor.Multiplexed SSH channelsMultiple logical data streams carried over one SSH connection.Multiprocess ModeA design where cache handling runs as a separate service from the inference engine.MultisigA wallet or approval setup that requires multiple signatures before funds can move.Multistage chainAn intrusion that unfolds in steps, with each stage preparing the next one.Multistage infection chainAn attack that delivers malicious components in several steps instead of one obvious payload.Multitenant SaaSA cloud application design where many customers share the same underlying service while relying on logical separation.Multiyear contractAn agreement that extends over several years and can improve revenue predictability.Municipal networkThe connected systems a city or local government uses to run public services.Municipal utilitya public service operator that can face heightened continuity demands during cyber incidents.Municipal websitean official local-government site that may support public services and administration.mup.sysA Windows kernel component in the DFS and MUP path, associated with referral handling.Muscle memoryRepeated actions performed automatically, sometimes without conscious review.Muscle-based inputcontrol signals derived from muscle activity rather than from a hand-operated device.Music sequencerA device or program that triggers musical events in a timed pattern.Must-use pluginA WordPress plugin type that loads automatically on every request and is managed from a special directory.Must-use plugin (mu-plugin)A WordPress plugin that loads automatically and is harder to disable through the normal admin interface.Mutable tagA version label that can be moved to different commits, which makes it less safe than a pinned SHA.Mutationa change in genetic sequence that may alter function.Mutual TLS (mTLS)A certificate-based authentication method where both client and server verify each other before data is exchanged.MVCModel-View-Controller, a design pattern that separates data, interface, and request handling.MVEMonitoring, vigilance, and enforcement, the supervisory side of compliance.MXDRManaged extended detection and response, a service model that broadens monitoring and response beyond a narrower MDR scope.MXFa media file format commonly used in professional video workflows.MyDisneyDisney’s shared account system used across its services for sign-in and identity management.myGovAustralia’s government account gateway used to link and manage services such as Medicare.MyHealth@EUThe EU health-data exchange framework associated with cross-border digital health services.MySQL profileA cPanel setting that controls how database connections are handled.MySQL/MariaDB featureThe database-management function implicated in the reported issue.Mystery shoppingan undercover testing method used to observe how a service or sales process behaves in practice.N-day exploitAn attack that targets a vulnerability after it has been patched but before systems are updated.N-day windowThe period after a flaw becomes known when unpatched systems remain exposed to abuse.NACNetwork Access Control, a system that decides what can connect to a network and what it may access.namedThe BIND daemon process that handles DNS service functions.Named pipean interprocess communication channel that local processes can use to exchange data.NamedNodeMapA live browser collection of an element’s attributes.Namespace hijackmisuse of a trusted naming space to make a package appear legitimate.Namespace hijackingUsing naming identity to confuse package ownership.Namespace ownershipThe claim of authority over a publisher or project name inside a software registry.Namespace serverA server that helps present and resolve a shared DFS path for clients.Naming collisionA risk where an attacker registers a name that a trusted system expects to be unavailable.Naming conventionA standard format used to assign consistent labels.NAND flash memoryNon-volatile storage technology used in SSDs and data-center storage arrays.Nanometerone billionth of a meter, a unit used for extremely small distances.Narrative analysisThe study of repeated themes, framing, and messaging patterns across content.Narrative launderingRepackaging a message so it looks organic, casual, or community-driven.Narrative riskthe chance that rumors or incomplete claims distort how an event is understood.NASA-STD-1006A NASA technical standard applicable to NASA programs and projects that establishes protection requirements to help ensure mission resilience.NasdaqA major U.S. stock market known for listing technology companies.NAT tableThe state database a gateway uses to track active translations and mappings.NAT table exhaustionFilling the device’s session table until new connections are blocked or delayed.Nation-state threata cyber operation linked to state interests or state-backed actors.Nation-state threat actorA cyber operator assessed to have state backing or state-aligned goals.National Airspace System (NAS)The interconnected aviation environment that includes aircraft, ground systems, airports, and operational infrastructure.National competent authorityThe public body responsible for applying and interpreting a specific regime.National Cybersecurity Coordination Centera government body named for coordinating cyber-related activity across institutions.National ecosystemThe network of research, industry, policy, and investment that supports technology development.National ID numbera government-issued identifier that can increase identity theft risk if exposed.National security agencyA government body focused on intelligence, security, and sensitive technical work.National strategyA government's long-term plan for setting priorities and coordinating action on cyber risk.National threat assessmentA government judgment about the most significant cyber risks facing a country or its institutions.Native bridgeThe code layer that lets JavaScript in a WebView call device features provided by the app.Native codesoftware written in languages like C or C++ where memory-safety bugs can be especially severe.Native extensionAdd-on code written in a low-level language such as C that is called by a higher-level runtime.Native featureA capability built directly into the application.Native KMSThe cloud provider's built-in key management layer, used as the first-line encryption control.Natural Language Processing (NLP)AI techniques that help computers read and extract meaning from human language.Natural processA change or structure produced by physical forces rather than deliberate design.Natural-language interfaceA system that accepts plain-language requests instead of rigid syntax.Naval weather concernsThe operational need for ships and fleets to anticipate dangerous conditions at sea.Navier-Stokes equationsPartial differential equations that describe the motion of incompressible viscous fluids.Navier-Stokes problemA major open mathematics problem about fluid motion and the equations that describe it.Navigation seasonThe part of the year when waters are open enough for regular vessel movement.NBFCa non-banking financial company that provides financial services without holding a banking license.NdYAG: A solid-state laser medium made from neodymium-doped yttrium aluminum garnet.NDAA non-disclosure agreement, often sensitive if exposed in a leak.NDcPPCollaborative Protection Profile for Network Devices, a certification profile used for secure network equipment.Near-frontier performanceA claim that a model is close to the best current systems on some tasks.Near-TDP drawOperating close to a chip's thermal design power limit, where it is consuming near its maximum intended power.Nearby-device permissionsAndroid permissions that control access to local device discovery and short-range communication features.NEETa person not in education, employment, or training.Negative resistanceA behavior in which the current-voltage relationship can appear opposite to the usual positive-slope expectation.Negotiated agreementan agreement reached through discussion rather than a purely adversarial process.NegotiationThe bargaining phase in which attackers and victims may exchange demands.Negotiation windowa short period when attackers may demand contact before publication.NEMAA U.S. standard family used to define the physical form of plugs and receptacles.Neo-cloudAn AI-focused cloud provider that offers dedicated accelerator capacity and infrastructure tuned for large workloads.Neo4jA graph database platform that stores information as connected nodes and relationships.Nervous systemthe network of cells that coordinates signals and behavior.Net interest outlaysFederal interest payments minus interest income, showing how much debt service costs the government.Net priceThe energy price after removing certain additional charges, used for cleaner comparisons.Net promoter scoreA metric that gauges employee or customer sentiment by measuring willingness to recommend a company.Net returnThe amount left after defaults, recoveries, costs, and tax effects.Net zeroA balance between greenhouse-gas emissions produced and removed.net/schedThe Linux kernel networking area that handles traffic control, queuing, and packet scheduling.NetBlocksAn internet monitoring group that tracks disruptions using measurement and corroborating signals.NetbookA small laptop designed for portability and basic everyday computing.NeTExA European standard for exchanging planned public transport information.NetlinkThe Linux communication channel between userspace and kernel space for networking and system control.Netlink attribute lengthA size field that must match the data being carried; mismatches can create security bugs.Netlink attributesStructured messages used by userspace and the kernel to exchange networking data.netrwA bundled Vim plugin for file browsing and related tasks that can become part of the exposure path.NetScalerCitrix’s appliance family used for application delivery and secure access at the network edge.NetShieldProton VPN’s filtering feature for blocking ads, trackers, and some malicious domains.NetSupport RATRemote access trojan software that can give an operator control over an infected device.Network accessThe ability of a device to connect to online services and exchange data over a network.Network adminA person responsible for maintaining and troubleshooting network systems.Network allowlistA policy that permits connections only to approved domains or IP addresses.Network allowlistingA control that permits connections only to approved domains or addresses.Network analysisA method for mapping relationships inside an organization to identify influence patterns and connectors.Network and Information Systems (NIS) RegulationsThe UK framework that sets cybersecurity and incident-response obligations for essential service operators.Network blackouta claimed or actual shutdown of business connectivity and services.Network connectivityThe ability of systems to exchange traffic across internal and external network paths.Network controlauthority over how a communications service is managed and operated.Network denial of serviceTraffic flooding aimed at exhausting bandwidth or related resources on a target.Network disruptionInterference that degrades or blocks normal communication between systems and users.Network flowa record of traffic between systems, used to describe communication without full packet capture.Network Flow TelemetryTraffic records that help analysts spot unusual outbound communication or data movement.Network HardeningSecurity measures that reduce exposure by restricting who and what can reach a service.Network identificationA service that helps identify drones and their operators through connected digital tracking.Network limitationsReachability constraints that can prevent a test from touching every asset.Network management systemThe control layer used to monitor, configure, and operate communications infrastructure.Network MappingDocumenting how systems communicate so defenders can understand pathways and dependencies.Network ObservabilityThe use of telemetry such as traces, metrics, and logs to understand how distributed systems are behaving.Network outageA loss of connectivity or service that prevents systems from communicating or operating normally.Network perimeterThe boundary layer where external traffic meets internal systems, often enforced by firewalls and gateways.Network policyRules that limit which IP addresses or networks can reach a cloud account or service.Network resilienceThe ability of a network to keep operating and recover gracefully when stressed or disrupted.Network sandboxingA controlled environment used to execute suspicious content and observe its behavior safely.Network Security PerimeterA cloud control designed to define and restrict allowed network access around managed resources.Network security policy management (NSPM)tools and processes for reviewing, approving, and auditing network access rules.Network ServerA system that stores or processes shared data and services, often a high-value target in healthcare environments.Network slicingA way to create separate logical network services with different performance profiles.Network speedThe practical rate at which a connection transfers data, which can vary by plan and conditions.Network switchA device that connects multiple devices on a local network and forwards traffic between them.Network technicianA worker who installs and maintains connectivity infrastructure such as cabling and fiber.Network telemetryNetwork logs or signals that help verify online behavior.Network Time SecurityA cryptographic extension for NTP that authenticates time synchronization traffic.Network topologydocumentation showing how systems, links, and segments are arranged inside an environment.Network Traffic Analysisinspection of network communications to understand behavior, relationships, and anomalies.Network traffic analysis platformSoftware that inspects network flows and reconstructs communication for security monitoring.Network traversalmoving through internal systems after the first point of entry.Network triggerA specific packet or message that causes dormant malware to activate.Network tunnelingA method of relaying traffic through a host to hide command-and-control or reach internal systems.Network-exploitableA flaw that can be triggered over a network connection rather than by physical access.Network-layer attackA flood aimed at packet handling and transport infrastructure rather than application content.Networked deviceHardware that can communicate over a network for monitoring, control, or updates.NetworkingThe connectivity layer that moves data between AI components and services.Networking outlookA company forecast for future performance in its network products and services business.Neural EngineA dedicated Apple silicon component optimized for machine learning tasks.Neural interfaceA system that connects biological signals to software or hardware inputs.Neural wiringThe pattern of connections linking neurons into circuits.NeuraleseA shorthand for machine-internal representations that may be hard for humans to read.NeuromarketingMarketing practice that uses behavioral or response-based signals to study or influence consumer choices.Neutral criteriajob-related factors used to justify pay decisions without bias.Neutrinoan extremely light particle that interacts very weakly with matter.New OutlookMicrosoft’s newer Outlook client with policy-driven mail handling.New Tab pageThe screen shown when a browser opens a fresh tab, often used as a starting point for browsing.New Tab surfaceThe browser page shown when a new tab opens, often used for shortcuts, recommendations, or widgets.Newsletter aziendalea recurring email communication sent by a company to an audience.Next-generation firewallA firewall that inspects traffic more deeply than basic packet filtering.Next.jsA React-based web framework used to build server-rendered and hybrid web applications.Nexus switchesCisco switches designed for high-throughput data center and fabric deployments.NGINX Stream moduleThe NGINX subsystem used for TCP and TLS stream proxying and routing.NGOAMA Cisco feature name tied to network operations and maintenance functions on NX-OS devices.Nickel platingThe application of a nickel coating, often used for appearance, wear resistance, or corrosion protection.Nipkow diska rotating disk with apertures used to scan an image mechanically.NIS subjectsOrganizations placed within the NIS framework and therefore expected to meet the related cybersecurity obligations.NIST IAL2A NIST identity assurance level that requires stronger evidence and verification than lower assurance tiers.NIST SP 800-115A NIST guide for technical security testing and assessment methods.NIST SP 800-171 Rev. 2A federal security standard with 110 requirements for protecting CUI in nonfederal systems.NIST SP 800-63-4NIST’s digital identity guideline suite covering identity proofing, authentication, and federation.NIST SP 800-63AU.S. guidance for digital identity proofing and related assurance considerations.NIST SP 800-82U.S. guidance for securing industrial control and operational technology environments.No lockupA feature that allows funds to be withdrawn without a fixed waiting period.No target victim websitea missing field that leaves the claim harder to validate.No-edits videoA recording left largely intact so viewers can follow the full sequence of work.No-logs policyA provider commitment to avoid storing user activity or connection metadata.No-trainingA promise that customer data will not be used to improve or train a model.noarchpython: A Conda package type for pure-Python packages that can be installed across platforms.node.exeThe Windows executable that starts Node.js scripts and applications.Node.js backdoorMalicious code built for the Node.js runtime that may create unauthorized access or secret theft risk.Node.js Permission ModelA process-level control feature that limits what a Node.js process can access at runtime.Node.js runtimeA JavaScript execution environment that runs applications outside the browser.Noindex TagAn HTML directive that tells search engines not to index a page.NoInputNoOutputA Bluetooth I/O capability category for devices with no keyboard, display, or other interactive controls.Noise budgetThe amount of computational error an encrypted workload can absorb before results become unreliable.Noise floorThe background level below which a useful signal becomes difficult to detect.Noisy neighbor problemPerformance degradation caused by another workload sharing the same infrastructure.Nominal rateThe headline interest rate before losses, fees, or taxes are applied.NomofobiaAnxiety or discomfort tied to being without a mobile phone or connection.Non-asset freight brokeragea logistics broker that arranges shipments without owning the transport fleet.Non-cacheable variableA value that is recomputed instead of stored, which can affect how NGINX evaluates expressions.Non-CartesianA coordinate or motion system that does not use the standard perpendicular grid.Non-consensual intimate image abuseThe sharing or use of intimate images without a person’s permission.Non-consensual intimate imagerySexual or private images of a real person created or shared without permission.Non-contactsSenders outside a user’s saved address book, often a higher-risk source of outreach.Non-custodialA model where users control their own keys rather than handing custody to a provider.Non-default configurationA setting that is not enabled by default, but can still create serious risk when it is active.Non-delegable dutyAn obligation that remains with leadership even when tasks are assigned to others.Non-deterministic behaviorBehavior that can change even when the same request is repeated.Non-discriminationA principle requiring fair treatment without unfair bias based on protected characteristics.Non-emergency systemsInternal or administrative platforms that support operations but do not handle urgent public calls.Non-human framingDesign choices that make it clear the system is software, not a person or friend.Non-human identitiesAccounts used by applications, services, scripts, or automation rather than by people.Non-proliferationThe set of policies and controls aimed at preventing nuclear material from being diverted to weapons use.Non-qualitythe total cost created by defects and process drift, not only discarded output.Non-security updateA release focused on usability, compatibility, or feature changes rather than vulnerability remediation.Non-system indexa user-created index that holds application or operational data rather than internal cluster metadata.Non-terrestrial network (NTN)A mobile architecture that extends connectivity through satellites or other platforms above the ground.Non-verbal communicationmeaning carried through posture, tone, eye contact, and gesture.Non-violent resistancePolitical pressure applied without physical aggression, often through symbolism or mass participation.Nonconsensual Intimate Imagery (NCII)Sexual images or videos shared or created without a person’s consent.Nondeterministic softwareSoftware that can produce different outputs from the same input, making behavior harder to predict.Nonemployer businessA firm with no paid employees, typically run by an owner or owners alone.Noniusa technical term associated with measurement, often used in precision reading contexts.NonstationarityA condition where the statistical properties of data change over time.NordLynxNordVPN's WireGuard-based VPN technology.Norton CommanderA DOS-era file manager that spawned many clones.NoSQLA database model built for flexible data structures and scalable handling of large datasets.Nostalgiaemotional attachment to past experiences that can shape how digital goods are valued.NostrA decentralized protocol where signed events and profile data are published through relays.Not ConfiguredA state where no explicit policy value has been assigned.Nota di creditoA credit note used to adjust or reverse a previously issued invoice.NOTAFTERA sudoers date constraint that sets the latest valid time for a rule.NOTBEFOREA sudoers date constraint that sets the earliest valid time for a rule.NotebookA laptop computer used in workshops and labs for hands-on technical exercises.Notebook metadataEmbedded configuration stored inside a notebook file alongside visible content.Notebook ServiceAn interactive environment for code and data work that can also expose network-facing features.Notice systema platform used to publish official case updates, alerts, or procedural messages.Notifiable Data Breaches schemeAn Australian privacy framework that can require notification when a breach is likely to cause serious harm.Notificathe official delivery of a legal or regulatory act.Notification authoritythe body designated to handle notifications under the framework.Notification CategoriesA feature for organizing notifications into groupings.Notification controlsSettings that limit or silence alerts so they interrupt work less often.Notification obligationThe duty to formally report a qualifying cyber incident to the relevant authority or body.Notification permissionsThe browser setting that lets a website send alerts to a user.Notification spamRepeated unwanted alerts that overwhelm users and reduce attention.Notification windowthe fixed time limit for formally reporting a security issue after it is identified.Notified BodyAn independent third party designated to assess conformity in cases where the regulation requires external review.Noveltysomething valued mainly because it feels new, unusual, or surprising.Novelty objectAn item made mainly for curiosity, humor, or display rather than strict practical use.Now PlatformServiceNow's enterprise platform for workflow automation, data handling, and application services.NozzleThe shaped exit that directs expanding gases to produce motion.Nozzle geometryThe internal shape of the nozzle channel, which can affect how material moves through it.Nozzle-extrudableCapable of being pushed through a nozzle in a manufacturing process.npm access tokenA credential used to authenticate to the npm registry, often with install or publish permissions.npm namespaceThe ownership boundary that identifies who controls a package name in the npm registry.npm provenanceMetadata that links a package to its source and build path for auditing.npm trusted publishingA release method that uses short-lived, workflow-bound identity instead of long-lived registry tokens.NPSAUK National Protective Security Authority, the body that runs CAPSS and publishes related physical-security guidance.NRV2EA compression algorithm documented in UCL and associated here with a compressed wrapper behavior.NSA 5GNon-Standalone 5G, which uses existing 4G infrastructure alongside 5G radio access.NSIPThe management IP used to administer a NetScaler appliance; it should be tightly restricted.NsiproxyA Windows networking-related component that helps expose network information to user-mode clients.NSPMNetwork Security Policy Management, a method for tracking and verifying network security policy across its lifecycle.Ntds.ditThe main Active Directory database file stored on a domain controller.Nth-party riskRisk that comes from a supplier’s suppliers, and further down the dependency chain.Nuclei templateA reusable scanner rule that tests for a known vulnerability pattern.Nucleo APRa dedicated unit focused on APR operations.NudifyA tool or service that transforms ordinary photos into synthetic sexualized images.NuitkaA Python compiler that can package code into standalone Windows executables.Null ByteA zero-value character that can truncate or alter how a parser reads input.Null resultan outcome where no predicted signal is detected, often used to rule out theories or tighten limits.Null reverse-pathA MAIL FROM:<> value that SMTP permits for certain message types, such as bounce-related mail.Numerical modelA mathematical representation that is solved by computation rather than by direct observation.Numerical Weather PredictionComputer-based forecasting that simulates atmospheric conditions to estimate future weather.Nutrition monitoringOngoing attention to diet quality and eating patterns during treatment.NVIDIA BlackwellNVIDIA’s rack-scale AI accelerator architecture, built for high-density deployments that rely on liquid cooling.NVMeA high-speed storage interface designed to reduce latency and improve access to flash-based storage.NVRNetwork video recorder, the appliance that stores and manages surveillance video streams.NX protectionA memory safety control that marks regions as non-executable to limit code execution abuse.NX-APIA management interface that can be used to interact with a switch programmatically, increasing exposure if enabled.NX-OSCisco’s operating system for Nexus-class data center switching platforms.O_DIRECTA Linux I/O mode that bypasses the page cache for direct disk access.OASISOpen Automated Security Initiative for Software, an OWASP program for AI-assisted patch generation and human validation.OAuth 2.0 client credentialsA machine-to-machine authentication flow for confidential software clients acting on their own behalf.OAuth 2.0 device authorization grant flowA sign-in method for devices with limited input that lets a user authorize access on a separate device.OAuth authorization serverThe component in an OAuth setup that issues tokens and makes authorization decisions.OAuth profileA BIG-IP configuration element used in OAuth-related access handling.OAuth token theftStealing access or refresh tokens so an attacker can reuse an authenticated session, depending on token lifetime and protections.OAuth2 bearer tokenA token that grants API access to whoever possesses it until it expires or is revoked.OAuth2 credentialsSecrets or tokens used to authorize apps and services through the OAuth 2.0 framework.OAuth2 ProxyAn authentication reverse proxy that sits in front of upstream applications.Obfuscated commandA command written to be harder to read or inspect, often to hide harmful behavior.Obfuscated HTMLWeb content deliberately altered to conceal malicious logic or delivery steps from inspection.Obfuscation infrastructureTools or networks used to conceal the origin of malicious traffic or operations.Object authorityThe IBM i permission model that determines what a user or job can access or modify.Object-document mapperA library layer that translates database documents into application objects and back again.Object-level access controlrules that decide who may view or change a specific record, order, or profile.Objective proofEvidence that shows a finding is real and reproducible, such as a working exploit or clear validation trail.Obligation of meansa duty to take reasonable steps without guaranteeing a perfect outcome.ObscurationA privacy control that hides specific records from ordinary consultation while keeping them available to limited parties.Obsolete ICan integrated circuit that is no longer commonly manufactured or sold.oc-mirrorA command-line utility that copies OpenShift release and image content into an internal registry for disconnected deployments.OcclusionAnything that blocks or obscures parts of a body or face from a camera view.OCI DistributionThe container content distribution specification used by registries and image delivery systems.OCI image manifestStandard container metadata that describes image content and references layers and configuration.OCI image specificationThe Open Container Initiative format that defines container images through manifests, configuration, and layers.OCI-POpen Client Interface - Provisioning, the BroadWorks provisioning path used for configuration changes.OCSP staplingA TLS feature where a server provides certificate-status information during the handshake instead of forcing a separate lookup.OCT InstAn EPC scheme for instant credit transfers with one leg inside SEPA and the other outside it.ODBC DriverA client-side driver that lets applications connect to data sources through the Open Database Connectivity standard.odhcpdOpenWrt’s daemon for DHCPv4, DHCPv6, router advertisements, and related network configuration services.ODMOriginal design manufacturer; a company that designs and produces goods for customer brands.OECD averagethe benchmark created from participating countries’ results for comparison.Off-balance-sheetAn accounting arrangement where certain obligations are kept outside the main balance sheet presentation.Off-chain InfrastructureServers, APIs, and automation that operate outside the blockchain but support protocol functions.Off-chain spendingBuying goods or services outside the blockchain, such as travel or property rentals.Off-screen recordingCapturing a device’s visual output for later viewing.Off-the-shelf devicea ready-made product that can replace a custom-built solution.Offensive cyber operationan active attempt to disrupt, damage, or interfere with a digital target.Offensive cyber operationsauthorized digital actions meant to disrupt or degrade hostile systems.Offensive operationsCyber actions designed to disrupt, degrade, or interfere with a target rather than only defend against it.Offer windowThe period during which a plan can be purchased or activated.Office of Management and Budget (OMB)The executive office that reviews federal information collection requests and related approvals.Office productivity softwareapplications used for documents, spreadsheets, and related work.Official feedA trusted broadcast or page published by a known organization.Offline accessThe ability to use a product without a live server check, often subject to platform rules or cached verification.Offline attackA guessing attempt against stolen hashes or data without interacting with the live service.Offline brute-force attackPassword guessing performed against stolen hashes without contacting the live system.Offline copiesbackups stored away from live systems to support recovery after destructive attacks.Offline dataoutcomes that occur outside web analytics, such as store sales or signed contracts.Offline guessingTesting many password candidates against captured credential material without interacting with the target again.Offline installerA package that can be installed without a constant connection to a store or service.Offline listeningThe ability to download media to a device and play it without an internet connection.Offline password crackingTrying password guesses against captured hash material without contacting the target again.Offline password guessingTrying many candidate passwords against captured material without interacting with the live system.Offline paymentstransactions completed without a live network connection.Offline registry hive manipulationEditing or mounting a hive file outside its normal live registry context for maintenance or analysis.Offline scanA reboot-based scan that runs outside the normal Windows environment to help find persistent malware.Offline websiteA site designed to remain usable without constant dependence on live external services.OffloadThe practice of moving work from general-purpose compute to dedicated hardware or accelerator logic.Offtake agreementa contract in which a buyer commits to purchase future output.OGC filter processingThe part of a geospatial platform that interprets standardized query filters for map and feature requests.OGNLA Java expression language used by Struts that can become dangerous if untrusted input reaches expression evaluation.OGNL injectionA flaw where attacker-controlled input reaches Object-Graph Navigation Language evaluation and may lead to code execution.OIDC metadataStructured client details submitted during OpenID Connect registration, such as redirect URIs and application settings.OIDC trusted publishingA release method that uses short-lived identity tokens from a CI workflow instead of long-lived publish secrets.OLE dataembedded object content inside a document that can be abused to trigger malicious behavior.OLE objectembedded content inside a document that can trigger follow-on execution.Omni-completionAn editor feature that suggests code completions and can expand the attack surface when it processes hostile input.On-access scannersEndpoint protections that inspect files when they are written, opened, or executed.On-chain analysisexamination of blockchain transactions and addresses to trace asset movements.On-chain levela price zone informed by blockchain activity and holder behavior.On-chain signalsblockchain data used to infer investor behavior and market flows.On-chain tracingThe practice of following cryptocurrency transactions across public blockchains to identify movement patterns and linked wallets.On-chip debuggingA hardware-assisted way to inspect and troubleshoot code while it runs on the device.On-device analysisDetection that runs locally on a phone or tablet instead of relying only on cloud processing.On-device footprintThe files, processes, and other traces a program leaves on a device.On-device MLMachine learning that runs locally on a phone instead of sending data to a remote server.On-device modelAn AI model stored and run locally on a user’s machine rather than only in the cloud.On-host compilationBuilding malware directly on the victim machine instead of dropping a prebuilt binary.On-orbit servicingWork performed on a spacecraft after it has reached space.On-prem deploymentSoftware run inside an organization’s own environment instead of being fully hosted by a vendor.On-premise systemsSoftware or infrastructure hosted inside an organization’s own environment rather than in a public cloud.On-Premises DataInformation stored and managed on an organization’s own infrastructure rather than in a cloud service.On-premises ITsystems hosted and managed inside a company’s own environment rather than in the cloud.On-premises managementA deployment model where administration tools run on an organization’s own infrastructure.On-Premises ServerA server run by an organization in its own environment, with patching and exposure managed internally.On-premises serversSystems hosted and managed inside an organization rather than by a cloud provider.On-premises softwareSoftware installed and operated inside an organization’s own environment rather than as a hosted service.On-the-job trainingLearning through practical work tasks instead of only classroom instruction.Onboard autonomyThe ability of a spacecraft to make limited decisions and execute actions without real-time human control.Onboard connectivityWireless network services provided inside an aircraft or other vehicle.Onboarding fraudFraud that occurs when criminals create or hijack accounts during registration or verification.Onboarding remotethe hiring and access setup process for employees who work offsite.Once-only principleA public-service design approach that avoids asking citizens or businesses for data the state already holds.Once-through coolingA system that draws water from a natural source, uses it to absorb heat, then returns it downstream.One UISamsung’s Android-based interface layer for Galaxy devices.One UI 6Samsung’s Android-based interface layer for its phones and tablets.One-bit audioSound generation using only two signal states, usually on and off.One-click vulnerabilityA flaw that can be triggered through a single user action, often a click or tap.One-size-fits-allA solution assumed to work equally well in every situation, even when needs differ.One-time passcodeA short-lived authentication code used for login or transaction verification.One-Time Passcode (OTP)A single-use login code used to verify identity during sign-in or recovery.One-to-Many MatchingSearching one biometric sample against a larger database to find a possible identity match.One-way migrationAn upgrade path that cannot be reversed, usually because the new format changes security-sensitive data handling.OneDrive syncA feature that copies cloud files onto a local device for access and offline use.OneDrive-backed whiteboardsWhiteboard content stored and managed through OneDrive rather than a separate standalone workflow.OneLakeFabric's unified data lake that acts as the shared storage layer for the platform.Onion addressa Tor-based web address that can hide hosting location.Onion linka Tor-based address that hides the location of a service.Onion sitea Tor-hidden service often used to publish leak pages or proof files.Online identityThe self-image a person builds and manages through profiles, posts, and platform activity.Online learningA method that updates a model incrementally as new data arrives.Online lifetime spent communicating, learning, or socializing through digital platforms.Online messaging groupsChat spaces where users can exchange messages, files, and links in semi-private or private settings.Online onboardingA digital account-opening process that collects identity and consent details without a branch visit.Online stageA tournament phase played remotely over the internet.Online votingA voting process carried out through a digital platform rather than in a physical room.OpacityThe difficulty of understanding how a model or decision process produced its result.Opaque modelA model whose internal details or lineage are difficult to inspect or verify.Opaque URLa link that hides useful clues about where it will actually lead.OPASOfferta Pubblica di Acquisto e di Scambio, a public offer used to buy or exchange shares in a listed company.OpcodeThe machine-readable code that identifies a processor instruction.Open accessA publishing model that makes research available without reader paywalls, often shifting costs elsewhere.Open APIA documented interface design that helps systems integrate, test, and replace components more easily.Open betaA public test phase that lets players try a build before final release.Open callA formal invitation for organizations to apply for funding, support, or participation.Open directorya publicly reachable folder listing that can reveal stored files if left unprotected.Open GraphA metadata format that controls how links appear when shared on social platforms.Open Graph (OG) imageA preview image generated for link sharing on social platforms and messaging apps.Open Graph imageA preview image used by social platforms when links are shared.Open Policy AgentA policy engine used to evaluate rules and enforce controls across cloud-native systems.Open RegistrationA setting that lets users create accounts without prior approval.Open source AIAI systems designed to let users use, study, modify, and share them, with access to the preferred form for making changes.Open source projectSoftware whose source code is publicly available for inspection, use, and contribution.Open Source Software (OSS)Software whose source code is publicly available for use, review, and modification.Open source supportpaid or managed assistance for maintaining and securing open source software.Open vSwitchA virtual switch used for software-defined networking, with both userspace and kernel components.Open vSwitch (OVS)A Linux virtual switch used to route and filter traffic in virtualized and overlay-networked environments.Open VSXAn extension registry for VS Code-compatible editors.Open VSX Registrya marketplace for extensions used in developer tools and related environments.Open weightA model release format where the learned parameters are made available for download and local use.Open worlda game environment that lets players move and explore freely.Open XDRAn architecture that aims to integrate multiple security tools and normalize their data rather than forcing one vendor stack.Open-flowA flow-data approach built around open or widely supported network telemetry formats.Open-source AIAI systems whose code, model parameters, and the information needed to derive those parameters are made available under terms that support use, study, modification, and sharing.Open-Source AuditorA freely available tool used to review cloud settings and highlight security or compliance gaps.Open-source dependencyA third-party library or package an application relies on, which can inherit its own security flaws.Open-source hardwareHardware design released so others can study, modify, and build from it.Open-source intelligence (OSINT)information gathered from publicly available data, including social posts and profiles.Open-source libraryReusable software code published for others to inspect, integrate, and update.Open-source sharingExchange of security indicators or context through public or community-driven channels.Open-source software securityPractices that help protect freely shared code against bugs, misuse, and supply-chain risk.Open-source software stewardA party that helps manage an open-source project and may have specific security-related responsibilities.Open-Source ToolingSoftware components made available for inspection, reuse, or modification by the public.Open-weightA model whose learned weights are released publicly for inspection or reuse.Open-weight modelsAI models released with accessible weights that can often be self-hosted or customized.Open-weights modelAn AI model whose weights are released for external use, inspection, and local deployment.OpenJDKAn open-source Java runtime commonly used by enterprise software.OpenSCADA code-based tool for creating 3D models and geometric designs.OpenSSFThe Open Source Security Foundation, which maintains community security efforts for open-source software.OpenSUpdaterThe malware family discussed in this case.OpenVPNopen-source software for creating virtual private networks (VPNs).Operating assumptionsThe conditions a system expects in order to work as designed.Operating bandThe range of frequencies a radio device is designed to use.Operating cash flowCash generated by normal business operations after expenses and working capital changes.Operating conditionsthe practical environment in which a business or project must function.Operating contextThe real-world environment in which a financial control or monitoring process is used.Operating leverageThe ability to create more organizational output through delegation and structure.Operating system kernelThe core software layer that controls hardware access, memory, and process isolation.Operating-model redesignReworking roles, workflows, and responsibilities so new technology changes how work is done, not just what tools people use.Operating-room schedulingThe planning of surgeries, staff, and resources to improve efficiency and service delivery.Operating-system command executionRunning shell or system commands on a server through software input.Operational abuseusing a service as part of a fraud or scam workflow.Operational AI securitySecurity controls, monitoring, and response practices applied to AI systems while they are running in real environments.Operational alignmentthe process of making separate teams follow the same goals and workflows.Operational ambiguityuncertainty about whether an incident is real, limited, or fully understood.Operational archivestored business records that can reveal workflows, partners, or infrastructure details.Operational artifactleftover metadata or files that can reveal attacker tooling, workflow, or infrastructure.Operational assuranceConfidence that a security process works repeatedly in real operations, not only on paper.Operational attack capabilityA system’s ability to support or carry out harmful cyber activity.Operational automationUsing software to reduce manual effort in repetitive parts of an attack or defense workflow.Operational BaselineA measured starting point used to compare whether automation improves performance, quality, or risk.Operational cadenceThe pace at which repeated operations, such as launches, are carried out.Operational complexitythe difficulty that grows when many services, teams, or systems must work together.Operational concernsresponse actions a company may need to take after a public allegation.Operational constraintsPhysical, timing, and reliability limits that shape what a system can safely do.Operational databaseA live system that stores data used to run day-to-day operations.Operational datastoreA database layer used by live applications to read and write production data.Operational debtThe long-term cost of temporary fixes, exceptions, and shortcuts.Operational defensesecurity controls that are actively used and validated in live environments.Operational delayThe time gap that gives attackers room to move before defenders can respond.Operational denial-of-serviceA condition where process overload, not system compromise, disrupts normal work.Operational doctrineformal guidance that shapes how a unit trains, decides, and carries out missions.Operational documentationrecords that describe workflows, procedures, or system use.Operational ecosystemThe connected environment where people, processes, and systems affect each other.Operational exposurebusiness functions that may be disrupted if access or systems are affected.Operational fatiguethe strain created by repetitive manual work, exceptions, and friction.Operational hubthe coordination center where people, communication, and logistics are managed for a criminal scheme.Operational hygieneroutine habits that reduce avoidable security mistakes.Operational incidentA security event that can disrupt response, communications, or business decisions.Operational informationinternal business records such as pricing, financing, or workflow details.Operational leakageaccidental exposure of internal details that can help defenders or investigators.Operational lifetimethe period a satellite can function before fuel, hardware wear, or other limits end its mission.Operational limitsRestrictions on how a model can be used, accessed, or connected in practice.Operational linkssigns that two threat identities may share infrastructure, personnel, or methods.Operational lock-independence on a single vendor or platform that can make switching harder over time.Operational logsSystem records that can reveal activity, errors, and internal workflow details.Operational marginThe buffer between normal performance and failure conditions.Operational maturityThe ability to run technology reliably in live business processes, not just test it.Operational memoryThe accumulated messages and records that capture how an organization actually works.Operational networka live system used to run essential services, where interruptions can have immediate consequences.Operational nodeA key point in a criminal network, such as an account, device, or facility that supports the wider operation.Operational noisethe distraction created when incomplete alerts or claims force extra security work.Operational outagean unplanned interruption that stops a service from functioning normally.Operational overheadThe ongoing effort needed to configure, monitor, and maintain a system.Operational phaseThe stage where legal obligations must be implemented in day-to-day practice.Operational pressurethe business impact created by urgent public allegations.Operational realityThe day-to-day conditions under which security work is actually performed.Operational reportsinternal documents that can reveal schedules, procedures, or business routines.Operational requirementsthe tasks, conditions, or standards that must be met during a contract.Operational restraintA cautious response that avoids overreading limited information or acting on speculation.Operational reviewa careful internal check triggered by a security claim.Operational routingThe selection and control of traffic paths used to move activity through intermediary systems.Operational sample materialTest or example files that can still contain sensitive business context.Operational scalethe ability of a criminal network to expand its activity beyond local limits.Operational scopethe practical extent of what a law or command can do in real-world use.Operational scriptsautomated code that supports routine business or technical tasks.Operational shutdowna stoppage that interrupts manufacturing or related business processes.Operational signala cue that may justify checking logs, access, and service integrity.Operational simplicityA design quality that reduces unnecessary complexity in a process or system.Operational Software AssuranceA market framing for protecting software after deployment, especially in long-lived operational environments.Operational sovereigntyThe ability to control and recover digital infrastructure without relying on fragile external dependencies.Operational thresholdA pre-set decision point that triggers extra safeguards, review, or a stop-deployment action.Operational triagethe process of checking logs and alerts to separate facts from noise.Operational uncertaintythe period when the full scope of an incident is not yet known.Operational verificationthe process of checking logs, access, and backups to confirm or reject an incident claim.Operational windowThe limited period when an event’s systems and staff must perform reliably.Operational workflowthe practical sequence of tasks people use to manage systems and software.Operational workshopa structured session used to discuss practical use, procedures, and readiness.Operational-technology (OT)Systems that manage physical processes such as power generation, transmission, or industrial control.OperationalisationThe process of turning a tool or model into a working security capability.Operationally verifiableproven in practice, not only described in policy documents.Operativea person used to carry out tasks within a campaign.Operatorthe person coordinating a criminal campaign, including infrastructure and extortion activity.Operator DeceptionManipulating displays, alarms, or status information so a human controller sees a false picture of system state.Operator interfaceThe human-facing layer used to issue commands and read machine state.Operator panelThe attacker-controlled console used to manage infections, collect data, and steer fraud activity.Operatori TLCtelecom operators affected by how the CUP is interpreted and applied.OpExOperating expense, a cost category for running the business rather than directly producing a product or service.Opinion SummarizationAn NLP task that compresses multiple subjective reviews into a short summary.Opinion-based selectiona curated choice based on editorial judgment rather than a strict ranking method.OPNsenseOpen-source firewall and routing software used for network control and segmentation.Opportunity costThe value of the best alternative forgone when money, time, or staff are assigned to one AI project instead of another.Opt-inA model that requires prior permission before contact or processing.Opt-in disclosureA reporting model where maintainers choose to receive direct security findings.Opt-in serviceA service that only runs when a project or user explicitly chooses to participate.Opt-in settingA privacy control that requires active user permission before data is used for an extra purpose.Optical cavitya pair of mirrors that traps light through repeated reflections.Optical chainThe combined path of lens, sensor, and processing that shapes image quality.Optical diskA removable storage medium that stores data on a disc read by a laser.Optical encodingTurning data into visual patterns that can be read back by a compatible process.Optical feedbackA loop in which light influences the next cycle of a physical process.Optical filtera component that selectively passes or blocks certain light wavelengths.Optical interconnectA data link that uses light to carry information between components, racks, or systems.Optical mediastorage that uses light-based reading, such as CDs, instead of purely electrical memory.Optical reflectionlight bouncing off a surface in a way that can expose hidden structures.Optical waveguideA structure that guides light through a material with minimal loss.Optimization solverSoftware that searches for the best solution to a problem defined by objectives and constraints.OptionA command flag that changes how a tool behaves.Option valueThe strategic worth of keeping future choices open instead of locking into one path too early.Optional add-onA bonus service or benefit that may come with extra terms or conditions.Optional ComponentA feature or package not required for basic operation, but still capable of expanding attack surface.Optional preview cumulative updateA non-mandatory Windows update used to deliver fixes and changes before broader servicing.Optional serviceA feature that is not required for core operation but can still introduce risk when enabled.Optional updatea non-mandatory software release that users or admins can choose to install.OptionalityThe ability to keep future choices open by avoiding unnecessary lock-in, complexity, or narrow design decisions.OptionsExtra flags or parameters that change how a command behaves or what it returns.OptogeneticsA technique that uses light-sensitive proteins to control specific cells, often neurons, with high precision.Oracle Access ManagerA component for authentication and authorization in Oracle environments.Oracle attackAn attack that learns secrets by observing how a system responds to chosen inputs or errors.Oracle databaseAn enterprise database platform that can store data and execute stored logic.Oracle HTTP ServerOracle’s web server front end, often used to receive public traffic before forwarding it to application services.Oracle Internet DirectoryOracle’s LDAP-based directory service used to store and manage identities.Oracle vulnerabilityA flaw where differences in responses or timing reveal information useful to an attacker.Oral communications interceptioncapturing spoken conversations without authorization.ORAMOblivious RAM, a technique that hides memory access patterns to reduce privacy leakage.Orbit insertionThe process of placing a spacecraft into orbit around a body.Orbital environmentthe conditions of space around Earth, including microgravity and vacuum.Orbital habitata structure designed for people to live in space rather than only visit it briefly.Orbital interferencea broad term that can mean radio-frequency disruption or unsafe proximity operations in orbit.Orbital launchA flight that reaches space and achieves stable Earth orbit.Orchestration platformSoftware that coordinates workflows, tools, and services into a managed process.Orchestration softwareSoftware that coordinates workloads, resources, and deployment flow in production.ORDBMSObject-relational database management system, a database model that blends relational storage with object-style features.Order fulfillmentThe process of receiving, processing, and shipping customer orders across warehouse and logistics systems.Order Management System (OMS)Software that tracks an order from purchase through fulfillment, delivery, and return handling.Order metadataOperational details tied to a purchase, such as order numbers, shipment status, or fulfillment records.Order processingThe workflow that turns customer requests into fulfilled transactions.Order-trackingA support function that lets customers check the status of a purchase or shipment.Ordinary architectureThe standard institutional framework used for regular state functions.Ordini professionaliItalian professional bodies that oversee admission, conduct, and continuing education in regulated professions.Org-modeA plain-text markup system with document structure, metadata, and include-style features.Organic presenceVisibility earned without paid promotion.Organic trafficVisits that arrive through unpaid search results rather than ads or direct navigation.Organisational frictionInternal delays, silos, and process bottlenecks that slow security work.Organismo di VigilanzaThe oversight body that monitors whether a 231 model is actually working in practice.Organization accessControlled availability of a tool or service to approved groups rather than the general public.Organization SchemaA structured data type used to describe a company or institution in a way search systems can interpret.Organization-scoped packageA package published under a namespace owned by an organization.Organizational change management (OCM)The planning and communication needed to help people adopt new tools or workflows.Organizational epistemic riskIn this article, the working idea that AI may weaken an organization's ability to know, justify, and challenge decisions.Organizational frictionDelays and misalignment created by unclear priorities, heavy process, or weak coordination.Organizational improvisationReal-time adaptation by teams facing uncertainty or change.Organizational latencyThe delay between recognizing a risk and putting the right control in place.Organizational learningThe practice of turning exceptions, failures, and edge cases into improvements in process.Organizational measuresPolicies and procedures that help enforce privacy and security requirements in daily operations.Organizational psychologythe study of behavior, motivation, and relationships in workplaces.Organizational ReadinessThe ability of a company to absorb new technology through skills, processes, leadership, and controls.Organizational transformationa broad shift in structure, process, culture, or operating model.Organizational trustConfidence inside an institution that processes, responsibilities, and decisions are reliable.Orientation sensingMeasuring the direction or angle of an object in space.Origamithe art of shaping paper through folding, usually without cutting.Origin maskingThe practice of making the true source of network traffic difficult to identify.Origin of lifeThe scientific study of how living systems first emerged from non-living chemistry.Origin Validation ErrorA flaw where software fails to verify that data or commands came from a trusted source.Orphaned infrastructurePublic systems left unmanaged after a migration, project change, or ownership shift.OS payloadsCrafted inputs intended to influence how a command parser or shell interprets a command.OS-backed protectionOperating-system controls that help encrypt or guard stored secrets on the local device.OS-level IsolationOperating system controls that enforce separation between processes, files, and execution environments.OSCPA cybersecurity certification focused on practical offensive testing skills.OSDOn-screen display, the menu layer used to change monitor settings.OSD chipA controller that handles the monitor’s menu and related behavior.OSS ScannerAn opt-in Anthropic service that generates vulnerability reports for open-source maintainers.OSS VRPGoogle’s Open Source Software Vulnerability Reward Program for security issues in qualifying open-source projects.OSS-FuzzGoogle’s continuous fuzzing service for open-source projects that helps discover bugs by testing with unexpected inputs.OT and IT convergenceThe blending of operational technology and information technology into connected industrial environments.OT Asset InventoryA current record of devices, software, firmware, and related attributes in an OT environment.OT availabilityThe ability of operational technology systems to remain reachable and functional for control, monitoring, and maintenance.OT cybersecuritySecurity work focused on systems that control physical processes such as manufacturing, utilities, and transport.OT defendersteams responsible for protecting industrial and operational technology environments.OT isolationA security approach that separates industrial systems from other networks while preserving required operational functions.OT remote accessRemote connectivity used to administer or support operational technology systems in industrial environments.OT/ICSOperational Technology and Industrial Control Systems, the software and hardware that run physical processes.OTAPNSA’s Operational Technology Assurance Partnership for OT security evaluation.OTP applicationsReusable components in Erlang/OTP that shape which features and code paths a deployment actually uses.OTTERCOOKIEA malware family name associated with developer-targeted intrusion activity and used here as the label for the payload described.Out-of-band approvala separate verification step for sensitive actions before they are published.Out-of-band channelA communication path that does not rely on the normal internet connection, such as Bluetooth or NFC.Out-of-band communicationA backup channel used when the primary communication path is unavailable or unreliable.Out-of-band console accessAn alternate management path, such as a hypervisor or cloud console, used when normal remote access is unavailable.Out-of-band coordinationCommunication that happens outside the expected system path, often on an unrelated platform.Out-of-band monitoringObservation or control performed outside the main execution path, which can reduce reliance on the workload being monitored.Out-of-band telemetryIndependent monitoring data collected outside the device itself, useful when local logs may not be trustworthy.Out-of-band watchdogA separate monitoring mechanism that can intervene without relying on the main software path.OutageA period when a system or network is partially or fully unavailable.Outbound activityunusual data leaving a network, often checked during incident review.Outbound AllowlistA list of approved destinations a system is permitted to contact.Outbound connection monitoringdefensive review of where devices are sending traffic, useful for spotting unexpected relay behavior.Outbound connectionsnetwork traffic that can help reveal suspicious activity during review.Outbound data movementtraffic leaving a network or service that may warrant review during incident triage.Outbound egressTraffic leaving a device or network toward an external destination.Outbound egress controlA security measure that limits where systems can connect on the network, useful for stopping unwanted build-time downloads.Outbound Network AccessThe ability of a system to initiate connections to external services or the internet.Outbound transfer behaviornetwork activity that may indicate data being sent out of an environment.Outcome logicThe intended behavioral or business change that justifies the work.Outcome verificationThe practice of checking whether a policy or control actually produces the intended real-world result.Outcome-based engagementsContracts judged by delivered results rather than the number of people or hours assigned.Outcome-based evaluationMeasuring a program by results such as job placement, retention, or wage progress.Outcome-based measurementA way of judging technology by measurable business results, not by deployment counts or spending alone.Outdated confidencethe risk of treating an unverified claim as established fact before checks are complete.Outer Space TreatyThe 1967 treaty that bars weapons of mass destruction from orbit and limits certain military uses of celestial bodies.OutletThe point where a fluid or gas exits a device.Outlook PSTan email archive file that can preserve years of messages and attachments in one place.Outlook WebThe browser-based version of Microsoft Outlook for email access.Outlook Web AccessMicrosoft Exchange’s browser-based email interface, commonly used for remote mailbox access.Output controlsReview and approval rules that determine how AI-generated results are checked before use.Output formatThe expected structure of the model’s answer, such as bullets, summary, or table.Output gatingA control step that checks or approves AI output before it is published or shared.Output handlingThe process of reviewing and safely using AI-generated content before it is reused.Output harvestingCollecting model responses at scale so they can be reused as training data.Output minimizationA defense that reduces how much detail a model reveals in its responses.Output pluginA dynamically loaded module that defines how logical decoding data is formatted and delivered.OutputsThe content a model produces after being prompted or deployed.Outsourced capabilityA function or skill that has been moved outside the organization, sometimes taking critical know-how with it.Outsourced ProcessingHandling personal data by a contractor or service provider on behalf of another organization.Over-permissioned accessaccounts granted more rights than they need for daily work.Over-privileged accessA condition where a system has more permissions than its job requires.Over-relianceHeavy dependence on a tool that can weaken independent judgment or effort.Over-the-air TVBroadcast television delivered through electromagnetic waves instead of cables.Over-TrustExcessive confidence in a system's output or behavior, even when its limits are unclear.OverfishingFishing at a rate that exceeds what a stock can sustain over time.Overhanga section of a printed object that extends outward without direct support beneath it.Overlay WindowA screen element displayed above another app, often used to disguise prompts or intercept user actions.Override authorityThe ability for a human operator to interrupt, stop, or deactivate a system.Oversight workflowThe operational process that defines who reviews, who approves, and who can intervene.OWASP ASVSAn open standard for verifying web application security controls.OWASP Core Rule Set (CRS)A generic set of attack-detection rules often deployed with ModSecurity.OWASP Web Security Testing GuideA widely used framework for web application security testing.OwnCloudSelf-hosted file sync and sharing software used to store and exchange documents.Owned mediacommunication channels a company controls directly, such as newsletters and websites.Ownership structurethe legal and financial arrangement that determines who controls a company.OxidizerA chemical that supports combustion by providing oxygen or an equivalent function.P&LProfit and loss, the financial statement that shows revenue, costs, and profitability.P&L impactThe effect an initiative has on profit and loss, showing whether it changes financial performance.P2B RegulationEU rules aimed at improving fairness and transparency for business users on online platforms.P2P relayA remote-access design that brokers device connections through an intermediary service instead of a direct port.P2P remote managementA convenience feature that helps operators reach devices without direct local access, often by relying on vendor-mediated connectivity.PA generativaA public-administration model that uses generative AI to support administrative tasks.PaaSPlatform as a Service, where the provider manages more of the runtime stack and the customer still secures code and data.PACPrivilege Attribute Certificate, a Kerberos data block that carries authorization details.Package governancePolicy controls that decide which packages may be used, approved, or blocked.Package hijackingAn attack in which someone gets a legitimate package name to publish a malicious version under that trusted label.Package lifecycle hookA script that runs automatically during package installation or another package-manager event.Package MetadataStructured information in a dependency package that can influence how installers handle files and executables.Package mirrorA service that copies registry content and serves it from another location, often for speed or reliability.Package Name-and-Version PairA unique identifier combining a package name with a specific released version.Package signingA cryptographic method used to verify the origin and integrity of software.Package takeoverAn attack class where an attacker can publish or replace releases for a legitimate package name.Package trust enforcementA control that applies security policy to software packages before they are accepted into a workflow.Packagingthe materials and methods used to protect and present a product during shipping.Packaging capacityThe amount of advanced assembly throughput available to turn chip dies into finished AI accelerators.Packet coreThe central mobile-network layer that handles data sessions, routing, and connectivity for internet traffic.Packet filteringA basic firewall approach that applies allow or block rules to traffic.Packet rateThe number of control updates sent per second across a radio link.Packet sniffingCapturing and inspecting network packets for analysis.PACSPicture Archiving and Communication System for storing and sharing medical images.PaddingExtra structure added before encryption or signing to make cryptographic schemes safer in practice.Padding oracleA side channel where distinguishable error responses let attackers probe encrypted data.Page architecturethe structure and layout of a webpage, including elements that influence how users move through it.Page discoveryThe process of finding web pages or URLs that can be collected.Page loadThe process of fetching and rendering webpage content and embedded resources.Page overridea browser feature that lets an extension replace a built-in page with a custom one.Page protectionsMemory settings that control whether pages can be read, written, or executed.Page-Template ResolutionWordPress logic that decides which page template file should be loaded.Pageless architecturea design approach that assembles content dynamically instead of relying on fixed pages.Pages RouterA Next.js routing model used to define application pages and their server-side handling.Pair programmingA collaboration method where two people review and work through code together, often used to preserve shared understanding.Pairing ProcessThe onboarding step that grants a device trust and connectivity in an app-managed environment.Pairwise pseudonymous identifierA per-service identifier designed to make cross-service tracking harder.Pan-tilt headA motorized mount that moves a camera left-right and up-down.Panel fingerprintsUnique traits in a web control panel that can reveal reused operator infrastructure.Panoramic photographyA photographic format designed to capture a wide field of view.Paper compliancecontrols that look adequate in documents but may fail operationally.PaperCut MFThe version that adds copier and multifunction-device integration to the core print-management server.PaperCut NGThe print-management-only version of PaperCut’s self-hosted platform.PaperCut NG/MFEnterprise print management software used to control printing, scanning, and related services in organizations.Papertronicselectronic devices that use paper or paper-like materials as part of the design.Paperwork Reduction Act (PRA)A U.S. law that requires federal review before agencies impose or request information collections.Parafencing ClassificationThe category assignment process used for para-athletes in fencing competition.Paragraph ComposerA layout engine that adjusts spacing across consecutive lines to improve justified text.ParallaxThe apparent shift in an object's position when viewed from different angles.Parallel DataAligned text pairs in two languages used to train translation systems.Parallel RunOperating old and new systems at the same time to compare outputs and validate behavior.Parameter ContextA reusable configuration object in Apache NiFi that supplies parameters to flows and components.Parameter-efficient fine-tuningA way to adapt a model to new tasks using less compute and fewer trainable parameters.Parameter-to-prompt injectionA flaw where URL or form parameters are passed into an AI prompt or context.Parameterised queryA safe database query method that keeps code and user input separate.Parametric designa model built from adjustable variables rather than fixed geometry.Paraphrasing attackAn edit or rewrite meant to weaken or remove a watermark signal.Paravirtualized deviceA virtual device designed for performance and tighter guest-host communication.Parcel scamA deception that uses delivery or package claims to make a false story seem credible.Parental authorizationConsent or approval from a parent or guardian for a minor’s access.Parental lockAn access-control feature that restricts device use or content based on set rules.Parental SupervisionControls that let a guardian review or manage parts of a minor’s platform activity.Parked domainA secondary domain name that points to an existing primary site, acting as an alias.Parser bugA flaw in code that interprets file formats, which can be triggered by specially crafted input.Parsing flawA bug in code that reads structured data, sometimes leading to crashes, incorrect behavior, or security bypasses.Partial Connectivity LossA degraded internet state where some traffic or access still works, but service is interrupted or unreliable.Partial failureA condition where some functions work while others are impaired.Partial publicationrelease of only some claimed data to increase pressure.Partial redactionmasking part of a name while keeping the entity recognizable.Partial submissionA form started by a user but not fully completed.Participationthe involvement of affected people in decisions that shape outcomes.Particle physicsthe branch of physics that studies fundamental particles and their interactions.Partita IVAItalian VAT registration used by freelancers and businesses for billing and tax purposes.Partner handoffthe transfer of data between organizations or systems in a marketing chain.Partner integrationsconnections between organizations or systems that can raise exposure if credentials or access paths are weak.Partner validationconfirmation from a connected service that a benefit is valid.Parts bina storage place for spare or recovered components waiting for later use.Party-line voteA vote in which lawmakers largely support their own party’s position rather than crossing lines.Pass-throughThe process by which a business shifts added costs into prices or fees.Pass-through chargesseparate items such as transport, fees, and taxes added to the bill.Passenger service system (PSS)Airline software that manages bookings, check-in, baggage handling, boarding, and other passenger journey functions.Passer-by datapersonal data captured from people not directly using the device.Passive accessoryA device that normally performs its job without added electronics or processing.Passive coolingheat removal without fans or pumps, relying on conduction and natural convection.Passive delegationLetting AI take over judgment or decisions without active human review.Passive DiscoveryObserving traffic and device behavior without intrusive probing, often preferred in sensitive industrial settings.Passive measuressafeguards designed to reduce exposure without requiring constant intervention.Passive network monitoringWatching inbound traffic for a trigger rather than making regular outbound connections.Passive satelliteA spacecraft designed to function without onboard power, electronics, or active control.Passive trackingobserving network traffic without altering it in order to infer behavior.PasskeysPhishing-resistant authentication credentials designed to replace reusable passwords.Passport scanan identity document image that can raise fraud and privacy risk.Password blocklistA list of banned passwords, usually including known-compromised or widely reused ones.Password crackingRecovering usable credentials from passwords or hashes through automated guessing or computation.Password hashestransformed password values used to verify logins without storing the plain text password.Password theftstealing login credentials for reuse or resale.Password vaultA secure system for storing, managing, and approving access to credentials and secrets.Password-guessing attackRepeated login attempts using many password combinations or known credentials until one works.Password-protected archiveA compressed file wrapped with a password to slow inspection or conceal contents.Password-reset abuseManipulating account recovery logic to gain control of an account.Password-reset workflowThe recovery process used to regain account access after a password is forgotten or lost.Passwordless authenticationA login method that avoids static passwords and instead uses stronger mechanisms such as keys or federated identity.Passwordless loginAn authentication flow that verifies a user without a memorized password, often using a temporary code or link.Paste-and-runA social-engineering tactic that tricks a user into pasting a malicious command into a terminal or shell.Patch automationUsing software policies and schedules to deploy updates with minimal manual effort.Patch baselineThe current level of security fixes installed on a device or system.Patch chainThe sequence of vendors and operators that must turn a fix into a deployed update.Patch contentStructured code changes and metadata used to update software or repositories.Patch coverageThe protection a system gets from receiving vendor security updates for known vulnerabilities.Patch deliveryThe process of distributing updates and fixes to installed software.Patch deployment windowThe period between a vulnerability fix becoming available and all affected systems receiving it.Patch diffA comparison between patched and unpatched code used to identify what changed.Patch generationThe creation of code changes intended to fix a security flaw.Patch governanceThe process of deciding, testing, approving, and deploying security fixes across enterprise systems.Patch hygieneThe practice of tracking, updating, and removing outdated software before attackers can reuse known flaws.Patch lifecycleThe period during which a product continues to receive security fixes and maintenance.Patch notesThe official update notes that describe what changed in a game release.Patch PluginA vendor-provided add-on used as a temporary security fix for supported older releases.Patch PressureThe operational strain created when many security fixes must be applied in a short time window.Patch prioritizationThe act of moving a security fix ahead of normal maintenance because the risk is urgent.Patch reviewthe process of evaluating and applying software fixes after release.Patch rollbackreversing an update to restore stability when a new build causes problems.Patch velocityThe speed at which organizations deploy fixes after they become available.Patch volumeThe total number of fixes included in a release cycle, often used as a rough measure of workload.Patch workflowThe steps an organization uses to approve, distribute, and install fixes.Patchingapplying updates that fix known security weaknesses.Patching windowThe time available to test, approve, and deploy a security update.PatchworkA patch-tracking system that records emailed code submissions and their review status.Patchwork regulationA situation where different jurisdictions impose different rules, creating compliance complexity for operators.Patent claimthe legally enforceable part of a patent that defines what is protected.Path asymmetryUneven network delay in different directions, which can distort time synchronization.Path ContainmentA control that keeps file writes inside an approved directory.Path DiscoveryThe process of identifying routes through identities, tools, and systems that can be chained into action.Path handlingThe code logic that interprets file locations, names, and directory traversal controls.Path NormalizationThe process a server uses to decode and interpret a URL path before routing it.Path validationSecurity checks that confirm a file or folder path stays inside an approved boundary.PATH_CHALLENGEA QUIC frame used to verify that a network path is still valid.Patient data breachUnauthorized exposure of health-related personal information.Patient data exposureunauthorized disclosure of sensitive health information that can create privacy and legal risk.Patient demographicspersonal details that can help attackers identify, sort, or misuse records.Patient document scansDigitized records that may contain clinical, billing, or identity details.Patient FlowThe movement of patients through various stages of care within a hospital, from admission to discharge.Patient informationData tied to a person's care, identity, or insurance status.Patient safetyThe goal of preventing harm to patients during care delivery, including harm that can arise from technology failures.Patroni REST APIA management interface used to control Patroni and PostgreSQL high-availability functions.Pattern detectionThe process of spotting repeated behavior that may indicate risk or abuse.Pattern discoveryThe process of identifying repeated structures or relationships in data.Pattern formationThe process by which repeated physical conditions create organized structure.Pattern geometrythe arrangement of lines and cuts that determines how a material changes shape.Pattern matchingA rule-based method that responds to recognizable input shapes rather than understanding meaning.Pause and resumeA control that lets a user stop a transfer and continue it later without restarting from zero.Pause mechanismA control that temporarily stops network operations or transfers.Pay recordspayroll-related records that can carry sensitive employee and financial details.Pay-as-you-goA pricing model where cost is tied to usage rather than a flat subscription.Pay-by-LinkA payment method that lets a merchant send a customer a link to complete a transaction online.Pay-per-install (PPI)A malware business model where payment is tied to each successful installation.Pay-per-install loaderA delivery layer used to install payloads on compromised systems, often as part of a criminal distribution chain.Payload builda packaged malware version prepared for deployment.Payload chainThe sequence of files or actions used to move from lure to execution and then to the final malicious load.Payload concealmentHiding malicious content inside another file type to make detection and inspection harder.Payload deliveryThe stage in an intrusion chain where malicious code is transferred to the target environment.Payload obfuscationHiding the structure or content of a payload so scanners and analysts can inspect it less easily.Payload SourceThe server or location that delivers the malware file or next-stage code.Payload validationA confirmation step that uses a test input to see whether a suspected vulnerability truly executes.Payment accountan online account used to receive, manage, or review transaction activity.Payment account misuseUnauthorized activity involving a billing or financial account linked to a service.Payment card datacard details used to authorize purchases or other payment activity.Payment continuitythe capacity to keep transactions functioning under extreme stress.Payment corridorA defined path that allows money to move between specific countries, banks, or networks.Payment detailsfinancial transaction information that can raise breach and fraud risk.Payment deviceAny device used to initiate or authorize a payment transaction.Payment integrity monitoringDetection focused on abnormal transaction behavior, authorization changes, and misuse of payment workflows.Payment interruptiona defensive action intended to stop a suspicious transfer before completion.Payment lureA message designed to make a victim send money or enter payment details.Payment oversightThe monitoring of payment systems to keep money transfers reliable, secure, and efficient.Payment processorA service that handles the flow of payments between parties.Payment protectionFeatures or processes that can help reduce loss or support disputes when a transaction goes wrong.Payment requesta prompt asking a user to approve a transfer or transaction.Payment routingThe path a transaction follows between the merchant, processor, and card network.Payment trailFinancial record or trace linked to a transaction or transfer.Payment-page integrityControls that help ensure checkout scripts and related code have not been altered.Payout systemThe service path that moves money from a platform to recipients.Payroll archivesHistorical pay records that may contain sensitive personal and financial data.Payroll databasea system that stores salary, contract, and employee record information.Payroll FraudCriminal manipulation of pay systems to redirect wages or alter payment details.Payroll recordsemployee pay and tax documents that often contain highly sensitive personal data.PBOMPipeline Bill of Materials, an inventory focused on CI/CD pipeline structure and changes.PCB autorouterSoftware that automatically places circuit-board traces between components.PCB stencilA patterned sheet that helps place solder paste onto board pads.PCI complianceSecurity requirements tied to protecting payment card data and related systems.PCI Express (PCIe)The standard interface used to connect add-in cards such as GPUs to a motherboard.PCI MPoCA security standard for accepting payments on consumer off-the-shelf mobile devices.PCI scopeThe set of systems that must meet payment card security requirements.PCL86A tube identified here as a TV audio tube and used in the transceiver project.PCR valuesTPM registers that record boot measurements and help decide whether a key may be released.PCRsPlatform Configuration Registers, TPM values that change when trusted components are measured during boot.PCTGA similarly named 3D-printing filament mentioned in the comparison.PDC Emulator (PDCe)A special Active Directory role on one domain controller that handles important directory functions such as password changes and account lockouts.PDF inventoryA count of PDF files that may indicate stored documents, but not confirmed theft.PDF leakageexposure of document files that may carry sensitive records or identifiers.PDF/UAA standard for making PDF documents readable by assistive technologies through proper structure and tagging.PDF417 barcodeA two-dimensional barcode commonly used on North American driver’s licenses to store machine-readable identity data.PDP-1An early computer named in the project title and central to the retrocomputing entry.PDP-11a 16-bit minicomputer family with historical influence.PDP-11/70a model in the PDP-11 family.PDTAthe structured clinical pathway that guides diagnosis, treatment, and follow-up.PE headersStructured metadata at the start of Windows executables that helps tools interpret the file.Peak powerthe highest instantaneous power during a pulse.Peak/off-peak pricingA billing model that charges more during busy periods and less during quieter hours.pearcmd.phpA PEAR command-line PHP script that can become a risky local inclusion target if readable by the web server.PedigreeValidation of the composition and provenance of a technology, product, or service.Peer learningKnowledge exchange between practitioners that improves judgment and operational practice.Peer list manipulationA disruption tactic that changes the peer references a botnet trusts, making coordination harder.Peer relayA communication path where one compromised device passes data to another nearby device for onward transfer.Peer-to-peer (P2P) botnetA botnet where infected nodes coordinate without relying on a single central server.Peer-to-peer linkA direct connection between devices without routing traffic through a central server first.Peer-to-peer networkA distributed system where devices communicate directly without a central server.PeeringA direct arrangement for two networks to exchange traffic.Pen plotterA device that creates drawings by moving a pen across a surface.Pending exposurea stated future time for data release that may or may not occur.Pending publicationa timed threat used to intensify pressure.Penetration testerA security professional who simulates attacks to find weaknesses before real adversaries do.Pentest agentAn automated security-testing tool that tries to find weaknesses in a system.PentesterA security professional who designs and runs penetration tests, then interprets the results for defenders.People pleasera person who feels strong pressure to gain approval by avoiding refusal.Per-app permissionsSettings that limit access for one program instead of the whole system.Per-application accessa model that limits a user to a single approved service.Per-endpoint pricingA licensing model based on the number of managed devices.Per-kWh pricingbilling based on each kilowatt-hour of electricity used.Per-service accessA model that limits users to specific applications or services instead of a whole network.Per-user pricingA billing model that charges based on the number of users covered.Percent-encodingA URI method that represents characters with hexadecimal codes, such as %50 for P.PercentileA ranking method that shows how a score compares with the rest of a set.Perceptionthe process of noticing and making sense of what is seen.Perception-action loopA cycle where a system observes state, decides what to do, and then carries out an action.Performance cultureA social environment that rewards constant visibility, productivity, and responsiveness.Performance cycleThe full run of action a device completes before stopping or repeating.Performance overheadthe extra resource cost security tools add to a running system.Performance per wattThe amount of useful work a device delivers for each unit of energy consumed.Perimeterthe traditional outer boundary of a network or environment.Perimeter agevolatoA special rule set or benefit zone that applies only under certain conditions.Perimetro pubblicoThe public-sector boundary where data, accountability, and operational control are kept under public governance.Periodic drivingrepeated external forcing, often using light, fields, or pulses.Peripheral whitelistingAllowing only approved devices, such as keyboards or USB media, to connect to a system.PermissionA setting that controls what an app or service can access on a device.Permission boundariesaccess limits that define what a system is allowed to touch or change.Permission bypassA bug that lets protected actions happen without the normal authorization checks.Permission CreepThe gradual buildup of unnecessary access rights over time.Permission enforcementThe checks that decide whether a user or system is allowed to access data or perform an action.Permission fatigueThe tendency to approve repeated security prompts without careful review.Permission governanceThe control and review of what capabilities extensions or apps are allowed to use in a browser environment.Permission managementThe ongoing work of assigning, reviewing, and adjusting access rights so they stay accurate over time.Permission modeThe setting that controls when an AI tool must ask before acting.Permission reviewthe process of checking which app capabilities are allowed on a device.Permission schemeJira rules that decide who or what can access specific projects, issues, or actions.Permissions boundaryAn AWS control that sets the maximum permissions an identity can receive, even if policies change later.Permissions vulnerabilityA flaw where access controls are applied incorrectly, letting users reach data they should not see.Permit authorityA public body that reviews requests and authorizes access to protected data under defined rules.Perpetual LicenseA software license that may grant indefinite use rights; transferability depends on the licence terms and applicable exhaustion rules.Perplexity AIAn AI search service that retrieves web material in real time and turns it into conversational answers.Persistence of visionthe visual effect that makes rapidly changing images appear continuous.Persistent agent memoryInformation retained across AI sessions so an agent can reuse context later.Persistent backdoorMalware designed to keep remote access available after the first infection step.Persistent backdoor accountAn unauthorized account that can preserve access after normal password changes.Persistent controlAccess that remains effective after normal administrative changes or reboots.Persistent encryptionEncryption that remains tied to the data as it moves between systems.Persistent identitya stable digital reference that continues to identify the same object over time.Persistent promptAn on-screen message designed to remain visible until a user responds.Persistent RootA privileged control state that remains active beyond a normal reboot and can survive ordinary user-space limits.Persistent security stateSecurity-related settings that remain active across requests or handle reuse if not cleared correctly.Persistent stateInformation saved between sessions so an agent can resume work later, such as memory files or logs.Person re-identificationMatching the same individual across different cameras or scenes.Persona fileA file that helps define how an AI agent presents itself and responds.Persona launderingThe practice of building false identities that make manipulative content seem credible and independent.Persona managementThe practice of maintaining a believable fake identity across messages and platforms.Personal accountA user-owned GitHub identity and repository space, separate from an organization-owned workspace.Personal AI agentAn AI tool that can act on behalf of a user across apps or workflows.Personal data exposurethe presence of identifying information in places where others can access it.Personal data processingAny operation performed on personal data, such as collecting, storing, using, or sharing it.Personal data recordsinformation tied to identifiable people.Personal data theftIllegal collection or misuse of identity-related information.Personal ID/Passport filesidentity records that can increase privacy, fraud, and regulatory risk if disclosed.Personal identification numberA unique national identifier tied to a person’s official record.Personal Information Protection Act (PIPA)South Korea’s privacy law framework for handling personal data and breach obligations.Personal Information Protection Commission (PIPC)South Korea’s privacy regulator with enforcement authority over data protection violations.Personal Locator Beacon (PLB)An emergency radio device designed to send a distress signal from remote locations.Personal projectA privately driven creation made for interest, learning, or expression.Personalized feeda content stream ranked to match a user's inferred interests and behavior.Personalized lawA concept in which legal rules or effects may vary according to individual data or characteristics.Personalized medicinemedical care tailored to the characteristics of an individual patient.Personally identifiable informationData that can identify a specific person.Personnel dataEmployee and candidate records that can be abused for fraud or targeting.Personnel recordsAdministrative and service-related records tied to an individual’s defense-related status.Personnel SecurityControls that govern who can access sensitive organizational data and under what conditions.Perspective projectionA method that maps 3D points onto a 2D screen while preserving depth cues.Persuasion architectureThe combined use of media, design, and interaction to steer attention.PETPolyethylene terephthalate, a widely used plastic found in many beverage bottles.PETGA 3D-printing plastic commonly chosen when more toughness is desired.PFCPA 5G control protocol used to manage forwarding behavior in the user plane.pgAdminAn open-source administration tool used to manage PostgreSQL databases.PgMPA PMI credential for professionals who coordinate multiple related projects as one program.PGPA cryptographic signing system used to help verify that content has not been altered.pgvectorA Postgres extension for storing and searching embeddings with vector similarity methods.Phantom domainA plausible but fabricated domain name that may be treated as real by an automated workflow.Phantom StealerAn info-stealer family associated with harvesting browser and wallet-related data from infected systems.PharA PHP archive format and extension used for packaging and loading files.Pharmaceutical wholesalera distributor handling medicine and related regulated goods.Pharmacovigilancemonitoring and reporting on drug safety and adverse effects.Phase changeA shift in physical state, such as from steam to liquid, that can move energy quickly.Phase IIIn this rollout, a later compliance stage tied to expanded requirements.Phase stabilityThe ability of a material to keep the same physical state under changing conditions.Phenotype extractionThe process of turning symptoms and clinical observations into structured features a system can analyze.Phish ScaleA NIST framework for adding context to phishing simulation results beyond raw click rates.Phishing control panelAn operator dashboard used to manage fraudulent pages, messages, or victim activity during a campaign.Phishing emailA fraudulent message designed to impersonate a trusted service and push the victim into unsafe action.Phishing filter normalizationThe process of converting text into a standard form before detection rules are applied.Phishing footholdInitial access gained when a user is tricked into giving credentials or opening a malicious lure.Phishing linkA deceptive URL used to trick a user into opening a harmful page or triggering an unwanted action.Phishing reportingThe practice of flagging suspicious messages so defenders can investigate and respond quickly.Phishing toolkitSoftware built to automate deceptive login flows, credential capture, or account takeover steps.Phishing via servicePhishing delivered through trusted platforms such as chat, collaboration, or messaging tools.Phishing-led intrusion chainA sequence where deceptive email or message delivery is used to trick a target into opening access for an attacker.Phishing-resistant credentialsLogin methods designed to reduce the risk of credential theft through fake prompts or pages.Photo library permissionThe mobile OS authorization that allows an app to access stored photos and videos.Photodetectora device that converts incoming light into an electrical signal.PhotoisomerizationA structural change in a molecule caused by light.PhotonA particle of light, often used to describe light-based transmission in simple terms.Photos of toolsImage input used as the starting point for the bin design workflow.PhotosphereThe visible surface layer of the Sun, where sunspots are observed.Photovoltaictechnology that converts sunlight into electricity.PHP BackdoorA malicious PHP script designed to provide persistent unauthorized access to a server.PHP code templatereusable server-side code that can be inserted into a site to automate behavior such as redirects.PHP ExecutionServer-side interpretation of PHP code, which can turn a uploaded file into active malware.PHP execution pathA server location where uploaded PHP code can run if the directory is not properly restricted.PHP object injectionA weakness where attacker-controlled data can influence PHP objects in unsafe ways.Phygitala service model that blends physical and digital access in one experience.Physical access controlmeasures that restrict who can enter, touch, or service sensitive equipment.Physical activitymovement-oriented behavior that interactive systems may try to encourage.Physical behavioreffects created by motion, scale, vibration, or other real-world properties.Physical buildA real-world object assembled from a digital design.Physical connectionA direct mechanical link that carries force or motion between parts.Physical dependencya non-digital requirement, such as water flow or cooling, that a service relies on.Physical EavesdroppingThe unauthorized capture of conversations through hidden hardware rather than through software or network intrusion.Physical extortionthreats or violence used to obtain money, credentials, or access.Physical inputdirect interaction through a keyboard, mouse, or similar device.Physical intelligenceAI systems that combine sensing, decision-making, and action in the physical world.Physical IsolationA strong form of network separation that removes direct connectivity between systems; the guidance treats it as the preferred end state where feasible.Physical qubitA hardware qubit that is implemented directly in a quantum device and is still subject to noise and errors.Physical reliabilityhow consistently a system behaves in real-world conditions.Physical security sweepA check for unauthorized hardware, cameras, microphones, or other suspicious devices.Physical surveillanceCovert monitoring through hidden devices placed in offices, rooms, or equipment.Physical tamperingDirect manipulation of hardware in an attempt to alter its normal behavior.Physical threatsthreats of harm directed at people rather than systems, increasing the stakes of a cyber incident.Physical-layer securityProtection focused on hardware behavior, proximity, and the environment around a device.Physically secure locationA controlled environment where data may face different protection requirements than in remote or exposed settings.Physics-informed AIAI designed to respect known physical rules or engineering constraints, not just statistical patterns.Pi CameraA camera module designed to work with Raspberry Pi systems.Pi camera modulea compact camera sensor accessory designed for Raspberry Pi systems.Piano actionThe internal mechanism that turns a key press into hammer movement and sound.Piano BULGeneral background term for Italy’s broadband infrastructure plan for underserved areas.PIAOA planning instrument used in public administration to organize goals, risks, and controls.Piazza AffariThe Milan stock exchange, where Italian listed companies are traded.PICO-8A programmable environment for creating small games and interactive software.Picture passwordA Windows sign-in method that uses gestures drawn on an image instead of a typed secret.Pig butcheringA long-con fraud that builds trust before pushing victims toward transfers or investments.Pilot projectA limited test deployment used to evaluate whether a tool or process works in practice.Pilot ringA small deployment group used to test updates before broader rollout.Pilot-to-production gapThe failure point where a promising AI trial does not become a dependable live service.PIN harvestingCapturing a personal identification number during use, often during a sensitive login or approval step.PingA command-line utility used to test whether a network host responds.Pinned PagesMemory pages held in place by the kernel so they cannot be moved or reclaimed until released.Pinned versionA fixed commit, tag, or release reference chosen so the same code is installed again later.PioneerAn early builder or thinker whose work helps establish a new field.Pipe transportA mail-delivery feature that can pass message data into a command or program.Pipeline detectionSecurity checks performed while data is flowing, before long-term storage or later analysis.Pipeline integrityThe assurance that build and release steps have not been altered or abused.Pipeline postureThe overall security state of a CI/CD setup, including workflows, secrets, dependencies, and runner controls.PipeWireA Linux audio and video service that also provides compatibility with legacy multimedia protocols.PivotC2A post-exploitation tool associated with maintaining remote control and persistence after initial compromise.PixelA tracking snippet that records website actions for ad measurement and optimization.Pixel lineupGoogle’s phone family, often used as the main hardware base for advanced Android security projects.Pixel testersusers enrolled to try Android builds on Pixel devices before wider release.Pixelated textcharacters rendered in a coarse grid of visible squares.PKCEProof Key for Code Exchange, a control that helps protect OAuth flows in browser-based applications.PKGA macOS installer package format used to bundle and install applications or components.Placeholder domaina domain name used in examples or documentation rather than for a real service.Placeholder identitya label that may not be the legal name.PlacementThe position of a light source, which strongly affects how a space looks and feels.Placing on the marketThe point at which a model is made available for use or distribution in the EU market.Plain-text patchA code change submitted as text, usually by email, so it can be reviewed and archived cleanly.Plaintext credentiala password stored in readable form, which raises abuse risk if exposed.Plaintext passwordA password stored in readable form rather than protected by hashing or encryption.Plaintext recovery attackAn attack that tries to reconstruct secret text from indirect leakage rather than by breaking encryption directly.Plan gatingA control method that restricts features based on the subscription tier or account status.Plan9A file-sharing protocol sometimes used for host-to-guest folder integration in virtual machines.Plant consolidationreducing production sites, which can concentrate operational risk.Plasmaionized matter made of charged particles that responds strongly to magnetic fields.Platform abuseMisusing a legitimate service for harmful or deceptive activity without necessarily breaching the platform itself.Platform authenticatorA built-in device authenticator such as Windows Hello that stores or unlocks credentials locally.Platform bridgea component that connects two technical environments and handles differences between them.Platform controlthe ability of a service to shape what users see, rank, or overlook.Platform declineThe gradual loss of relevance, support, or availability of a digital service over time.Platform designthe way a digital system is organized to deliver services and manage workflows.Platform economicsthe pricing and incentive structure a digital platform imposes on users or developers.Platform enforcementactions a service takes to remove abusive accounts or content.Platform expansionThe process of adding features, capacity, or supported use cases.Platform firmwareCore firmware that supports system startup and recovery functions.Platform liabilitythe legal responsibility a service may bear for content or system behavior.Platform lock-inDependence on one vendor’s system in a way that makes migration or backup difficult.Platform migrationThe process of moving workloads, tools, or teams from one computing environment to another.Platform portA version of software adapted to run on a different operating system or machine.Platform responsibilityThe idea that service providers must help reduce foreseeable online harm.Platform Security Processor (PSP)A dedicated AMD security subsystem that helps handle trusted platform functions outside the main CPU flow.Platform storefrontA vendor-controlled marketplace for apps, games, or services.Platform UpdatesUpdates that refresh core product components, often on a slower release cadence than signatures.Platform worklabor organized or managed through a digital service.Platform-transparent operationsa model that gives customers clearer visibility into the tools and workflows in use.PlausibilityThe degree to which a claimed scenario is technically and operationally believable.Play Integrity APIAn Android integrity service that helps apps assess whether a device or app environment appears trustworthy.Play Protect certificationGoogle’s status marker for Android devices that have passed compatibility and security testing.Playback fallbackA lower-quality stream or mode used when the device or network cannot support the highest setting.Playback pathThe sequence of software and device steps used to deliver video to a screen.Playback qualitythe resolution and fidelity of video or audio delivered to the user.Playback timingThe sequence and speed at which video is shown, which can shape how well an experience functions.Player agencyThe degree of control a user has over choices inside a game system.Player pacingthe rhythm at which a game reveals tasks, rewards, and new objectives.Player progressionThe structured advancement of a character through levels, skills, or content.PlaylistA set of videos grouped around a topic for easier navigation.PlayStationA console platform that represents a much more capable target than most microcontrollers.PLC (Programmable Logic Controller)A specialized industrial computer used to automate and control equipment in facilities like water plants.Plex DesktopThe desktop client used on Windows, macOS, and Linux to connect to a Plex library.Plex Media ServerThe backend software that stores libraries and serves media to Plex clients.Plottera device that moves a pen or head with controlled precision to create drawings or output.PloutusAn ATM malware family associated with cash-dispensing attacks through the machine’s local control path.Plug and Play (PnP)Windows device-detection system that matches hardware with drivers and installation logic.Plugin AdminNotepad++'s built-in plugin manager, used to install and update extensions.Plugin attack surfaceThe extra code and features added by extensions, which can expand the number of places attackers can probe.Plugin distribution blockA platform action that stops a plugin release from being automatically delivered through the directory.Plugin ecosystemThe extension model around an application that lets users add features, but can also be abused if untrusted code is installed.Plugin frameworkA modular design that lets operators add or swap malware functions without replacing the full implant.plugin headerMetadata in a WordPress plugin file that identifies its name, author, version, and related details.Plugin package validationChecks that verify whether an add-on’s name, format, and content meet safety rules.Plugin vulnerabilitya weakness in add-on software that can widen an attack surface.Plugin-driven malwareA modular design that lets new functions be added after infection.PluralismThe presence of multiple viewpoints and sources in the public information space.Plurality votingA decision method where the option with the most votes wins, even without a majority.PMI Talent TriangleA project management framework built around Ways of Working, Power Skills, and Business Acumen.PMI-ACPPMI's agile certification covering methods such as Scrum, Kanban, Lean, XP, and test-driven development.PMPA PMI certification for experienced project leaders who need to show advanced project delivery competence.Pneumatic displayA display that uses air pressure or vacuum to create visible output.PNG disguisePresenting malicious content as a PNG image file to make it appear benign.PNT resilienceThe ability to preserve positioning, navigation, and timing functions when primary signals are degraded or denied.Podcast episodea recorded discussion format used to explain topics through conversation.PoE++A high-power form of Power over Ethernet that can deliver more electrical power over network cabling.Point of common couplingThe location where a user or facility connects to a wider power network.Point of salea retail checkout location or system tied to sales operations.Point-in-time assessmentA review based on one fixed moment or snapshot.Point-in-time findingAn investigation result that reflects what was observed at a specific moment, not necessarily the entire history of an incident.Point-of-salesystems used to process retail transactions at checkout.Point-of-sale systemsoftware used to process sales and payments in hospitality settings.Point-of-sale terminalThe merchant device that reads a payment card and processes the transaction.Pointer personalizationUser settings that change the mouse cursor’s appearance or behavior.Poisoned packageA software dependency or installer that has been altered to include malicious behavior.Police impersonationA fraud tactic that uses a fake law-enforcement identity to create urgency and compliance.Policentricspread across multiple centers rather than concentrated in one dominant hub.Policy automationSoftware-assisted handling of rule updates, reviews, and enforcement.Policy boundaryAn enforced rule set that defines which internal connections are allowed.Policy bypassA flaw that lets action proceed outside the rules a security control was meant to enforce.Policy changean update to rules that allow or block network traffic.Policy checksRules that determine whether access should be granted based on conditions such as user, device, or context.Policy controlAn administrative setting that can allow, block, or restrict specific sign-in methods on managed devices.Policy coverageThe set of rules that decide which sites, actions, and devices are routed through isolation.Policy Decision Point (PDP)The service or component that evaluates policy and returns an allow-or-deny decision.Policy enforcement point (PEP)A component that applies access-control rules and decides whether a request is allowed.Policy enginethe software logic that applies subscription rules across accounts and devices.Policy evaluationthe practice of judging public measures by the outcomes they produce, not only by the money spent.Policy evasionBehavior designed to bypass platform rules or screening controls.Policy gatea control that can block a release unless security requirements are met.Policy guardrailA rule that limits or blocks risky behavior in an automated system.Policy guidanceSuggested security actions or controls meant to help teams respond to risky behavior.Policy hookA checkpoint where a rule can inspect or stop an action before execution.Policy leverA legal or institutional mechanism that can influence behavior and direction in a sector.Policy regressionAn unintended breakage caused when a software update changes how a security or access rule is enforced.Policy syncthe process of applying central security settings to managed devices.Policy tagsMetadata labels used to apply access rules to sensitive columns or fields in a cloud data platform.Policy TuningAdjusting detection rules so a control stays effective without breaking normal use.Policy versioningKeeping track of which rule set was active when a decision should be made.Policy-bounded autonomyAutomation that can act only within predefined rules, limits, and escalation paths.Policy-installed extensionAn extension deployed through administrative controls rather than a user-only install.Policy-scoped controlA setting that applies through an administrative policy rather than as a one-off manual action.Political conversionthe process of turning attention or interest into measurable participation.Pollsinteractive prompts that let users choose among preset options.Polygon blockchainAn EVM-compatible blockchain network where Ethereum-style contracts can run.Polymer meshA flexible lattice structure used to carry load in some airless tire designs.PolymorphismA technique where malware changes its appearance or code structure to frustrate detection.PolystyreneA plastic polymer that can be manufactured in different forms for different uses.Pooled storageA single storage limit shared by multiple users in one subscription.Pooled usageA shared allowance drawn from one account or plan across multiple products or interfaces.PoPPoint of presence, a provider location where network traffic can be handled close to users or branch sites.Population registerA government database that stores core identity and address information about residents.Port 44818The standard EtherNet/IP encapsulation port used by many industrial devices.Port community systemShared digital environment that coordinates port and logistics operations.Port disbursement recordsshipping-related financial documents that can reveal payment routines.Port forwardingA way to redirect traffic from one port to another destination.Port mappingThe process of identifying or working through network ports exposed by a device.Portable designAn approach that prioritizes easy transport, storage, and reassembly.Portable devicehardware designed to run away from a fixed power source.Portable Digital AssistantA compact personal device concept for managing information on the move.Portable Executable (PE) formatThe standard Windows file format for executables and related binary components.Portable generatora compact power source designed to be moved and used away from fixed infrastructure.Portable media playera handheld device built mainly for music and video playback.Portable workflowa setup designed to be easy to carry, deploy, and use with minimal external equipment.Portable workloadA packaged runtime that can be moved or reproduced across environments with consistent behavior.Portala web entry point that can sit between users and related services.Portal accessthe login path that can connect users to internal business systems and records.Portal exposureRisk created when a web portal provides access to sensitive records or documents.Portal telemetrylogs and signals that show how users and scripts interact with a portal.Portfolio allocationThe deliberate distribution of capital across projects with different risk, timing, and return profiles.Portfolio approachA management method that reviews all AI initiatives together instead of judging each one in isolation.Portfolio managementA way of managing technology as a set of linked bets with different risks, returns, and time horizons.POS Androida payment terminal built on the Android operating system.POS integrationA connection between business systems used for ordering, sales, or payment workflows.POS terminala device used to accept electronic payments at the point of sale.PositioningHow a company defines the value and relevance of its offer in a market.Post hasha unique identifier that can help track a specific bulletin or post entry.Post-acute caremedical support delivered after a hospital stay, often involving ongoing facility operations.Post-ChatGPT premiumThe estimated pay uplift observed after ChatGPT’s public release.Post-click detectionMonitoring that looks for suspicious behavior after a user interacts with a malicious email, link, or attachment.Post-Compromise CheckA forensic review to find signs that a system was modified after intrusion.Post-compromise credential-phishingA technique used after initial access to steal credentials through a trusted-looking flow.Post-compromise frameworkA toolkit used after initial access to maintain control, expand capabilities, or support follow-on activity.Post-compromise malwareMalware designed to operate after an initial breach, focusing on persistence, control, and follow-on activity.Post-curingExtra light exposure used to harden a printed part after printing.Post-delivery alertA warning shown after a message reaches a user, rather than before delivery.Post-delivery protectionA control that can warn, quarantine, or remediate a message after it reaches the user.Post-exploitation toolkitA collection of tools used after initial access for follow-on actions.Post-incident reviewa structured examination of an incident to identify what happened and what should change.Post-login workflowThe steps a user follows after authentication to complete a service request.Post-market surveillancemonitoring a system after deployment to detect failures, drift, or safety issues.Post-merge defect rateThe rate at which bugs are found after code has already been merged.Post-merger integrationThe process of combining systems, data, and workflows after an acquisition.Post-mortem dataPersonal information that remains sensitive after a person's death.Post-processingAny step applied after printing to change appearance, fit, or function.Post-publication monitoringreview of listings after release to catch abuse that slipped past initial checks.Post-quantum encryptionCryptographic methods designed to resist attacks from future quantum computers.Post-quantum signaturesDigital signature schemes designed to remain secure even if large quantum computers become practical.Post-sale serviceSupport offered after purchase, including maintenance, spare parts, and repair channels.Post-training alignmentThe phase after pretraining where models are tuned with feedback and policy rules.Post-update validationThe process of checking server state and configuration after patching to confirm the system is in the intended condition.PostGISA PostgreSQL extension that adds support for geographic objects and spatial queries.Postmarket CybersecurityOngoing security management for a medical device after it has been deployed to patients.PostmortemA formal review held after an incident to document what happened and what should change.PostScriptA page-description file format that can be interpreted by server-side tools.Posture scanningChecking configuration and policy state for misconfigurations, drift, or compliance gaps.Potentiometera variable resistor commonly used to measure joystick position through mechanical movement.Power BIMicrosoft’s business intelligence platform for building reports, dashboards, and semantic models.Power conditioningEquipment and controls that stabilize and regulate electrical power for sensitive systems.Power cycleTurning a device off and on again to clear a fault or reset its state.Power delivery subsystemThe internal circuitry that supplies electricity to connected devices through PoE ports.Power designthe way a device manages electricity, batteries, and delivery to components.Power envelopeA defined upper and lower limit for how much power a system or workload should use.Power handlingThe ability of a machine to use and manage electrical energy safely.Power managementMethods used to store, regulate, or conserve energy in electronics.Power over EthernetTechnology that sends data and electrical power through the same Ethernet cable.Power over Ethernet (PoE)A method for sending electrical power and network data through one Ethernet cable.Power pathThe electrical route that delivers operating voltage to a device or component.Power Purchase Agreement (PPA)A long-term contract that sets out how a buyer will purchase electricity from a generator.Power resilienceThe ability of electrical infrastructure to keep services operating reliably.Power SkillsHuman skills such as communication, empathy, leadership, and influence.Power supplyHardware that provides electrical power to a device or circuit.Power-management profileA system setting that influences how Windows balances performance and energy use.Power-quality eventA disturbance in voltage, frequency, or waveform stability that can affect sensitive electrical equipment.PowerShell obfuscationThe use of altered or disguised script text to make malicious commands harder to detect.PowerShell RATMalware or a loader that uses PowerShell to run or stage remote-control functionality.PowerShell stagerA script or component used in the staging or delivery of later activity.PowerToysA Microsoft utility suite for advanced Windows customization and productivity.PPAPersonal Package Archive, a distribution channel used for Ubuntu software packages.PPA (power purchase agreement)A contract for buying electricity from a specified generator, often over a longer term.PPAsPower purchase agreements that define electricity sale terms and can be commercially sensitive.PQCPost-quantum cryptography, a class of algorithms designed to resist attacks from future quantum computers.Practical judgmentThe ability to make sensible decisions in realistic operational situations.Practicalityhow useful, reliable, and deployable a technology is in real-world use.Practice management platformsoftware that supports scheduling, billing, prescriptions, and admin tasks.Prassi aziendaleThe informal routine a company actually follows in daily work.PRC-Affiliated ActivityA threat attribution label used in official U.S. reporting for activity linked to the People’s Republic of China.Pre-answer call flowThe part of a calling system that runs before a user accepts or declines an incoming call.Pre-auth Attack SurfaceParts of a system reachable before any login or session validation.Pre-authentication exploitAn attack that works before a login check succeeds.Pre-authentication flawa weakness reachable before login, often providing an early foothold.Pre-boot controlAuthentication that happens before the operating system loads.Pre-bunkingProactive messaging that prepares audiences to recognize likely false narratives before they spread.Pre-commit HookA check that runs before a commit is finalized, often used to catch secrets early.Pre-commit reviewA check performed before code is saved into a shared repository, helping catch problems before they spread.Pre-deployment testingSecurity and safety checks performed before a model is released to users.Pre-fetchThe act of loading content in advance before a user explicitly requests it.Pre-fetch verificationA control that checks a dependency or domain before the system downloads, installs, or clones anything.Pre-inference gateA control that checks evidence before a model is allowed to score it.Pre-orderan advance purchase placed before a product is officially released.Pre-patch checkA review done before or alongside patching to determine whether a system was already compromised.Pre-production environmentA test or staging system that should be isolated from public production traffic.Pre-release assetsoftware or media shared before public launch.Pre-release buildAn unfinished version of software shared before launch or final release.Pre-seed fundingVery early capital used to launch a company and build its first product.Prebiotic chemistryChemical processes that may have existed before life appeared on Earth.PrebunkingProactive messaging that prepares audiences to recognize misleading narratives before they spread.Precariatounstable employment conditions that can weaken continuity and make career planning difficult.Precautionary measuresDefensive steps taken while the full scope of an incident is still unclear.Precautionary shutdowna temporary service stop meant to lower exposure during a suspected risk window.Precise locationA high-accuracy location signal that can reveal where a user or device is.Precision medicinean approach that aims to tailor care or treatment to the individual rather than using a one-size-fits-all method.Precision Time Protocol (PTP)An IEEE 1588 protocol that synchronizes clocks across a network with very high precision.Precision TouchpadA Windows touchpad class that supports standardized gestures and configurable input behavior.Precompiled functionsfunctions prepared ahead of execution so the runtime does less work later.Precontractual informationThe disclosures a borrower should receive before signing a loan agreement.Predecessor companyan earlier corporate entity whose obligations can carry into a later business structure.Predeployment evaluationTesting performed before release to judge whether a model meets safety and risk thresholds.PredicateA logical condition used to filter data, such as allowing access only when a rule evaluates to true.Predicate offenseA qualifying crime that can activate entity liability under a compliance regime.Predictable credential generationA weakness where access values can be guessed because they are not random enough.Predictive analysisUse of patterns and models to estimate likely outcomes or relationships.Predictive dataDevice data that may reflect expected or anticipated activity patterns.Predictive intelligenceSoftware logic that anticipates likely actions to improve suggestions.Predictive safetyA prevention approach that uses data and analytics to identify risk before an incident happens.Predictive systemsoftware that uses data patterns to forecast outcomes or recommend actions.Predictive textsoftware suggestions that try to complete or anticipate typed words.PrefetturaA territorial office of the Ministry of the Interior, often used for official public-administration communications.Prefrontal CortexThe brain region linked to planning, judgment, and self-control.Preinstalled malwareMalicious software present on a device before the user installs anything themselves.PremierCS2’s ranked competitive mode, built around structured match selection and visible progression.Premier SupportOracle’s current support tier that includes access to the latest patches and updates.Preorderan advance purchase made before a product is released.Prepaid TermA billing model where the customer pays in advance for a fixed service period.Prepaid Usage CreditAccount balance consumed as a service is used, common in metered cloud products.PrerenderA browser feature that loads a likely next page in advance so navigation feels faster.Prescribing procedurethe steps a clinician follows to authorize a treatment for a patient.Presence checkA control meant to confirm that a real user or document is physically present during verification.Present valueThe current value of future expected benefits, discounted back to today.Preservation biasThe tendency for some materials to survive better than others, shaping what can be studied.Preservation computingusing or maintaining old technology to keep its behavior, design, and history accessible.Preservation of evidencekeeping logs and artifacts intact for later investigation.Preserved logsSecurity records that can help confirm what happened and when.Preserved ThinkingA safeguard intended to prevent users from editing or extracting a model’s internal reasoning context through the API.Preseta preconfigured option designed to simplify a repeated task.Presidential memorandumA formal directive from the executive branch that can set policy and authorize federal action.Pressurethe force exerted by a gas or vapor, often central to mechanical operation.Pressure advanceA control feature that helps manage nozzle pressure during acceleration and deceleration.PretextA fabricated story used to make a request seem legitimate.PreventControls designed to stop future credential exposure before secrets are committed, shared, or reused.Prevention ratethe share of tested malicious activity blocked by security controls.Preview cumulative updateA pre-release Windows update used to test changes before wider deployment.Preview featureAn early release used for testing before a function becomes fully stable.Prewritten scriptsfixed attack instructions that follow a set sequence.Prezzo bloccatoA fixed-rate term that keeps selected contract prices unchanged for a set period.Prezzo fissoa price locked for a defined period to limit short-term variation.Price gougingExtreme price inflation driven by scarcity or urgent demand.Price increase capA contractual limit on how much a vendor can raise prices, often with practical limits at renewal.Price signalA market change that can influence buying decisions and operational budgets.Price volatilityThe speed and size of price changes over time.Pricing signalA market price change that can reveal demand, scarcity, or attacker interest.Pricing tierone of several price levels offered for the same product.Pricing transparencyClear presentation of total cost, term length, and renewal terms.Primary KeyAn account credential in Azure Cosmos DB that can enable full read and write access within the account.Primary mobile deviceThe main phone associated with an account, often used as the anchor for account and privacy controls.Primary phoneThe main device an account treats as the central place for use or control.Primary sign-in methodThe first authentication step a user takes to access an account or service.Primary Site ServerThe core Configuration Manager server role that directly manages devices.Primary sourceAn original technical document or advisory used to verify claims.PRINCE2A structured project management method focused on governance, roles, and controlled delivery.PrincipalThe identity a system uses to decide who can act, such as a user, app, or service account.Principle of proportionalityA legal test asking whether a measure is suitable and not excessive.Print bedthe surface where a 3D print begins and needs to stay attached.Print qualityThe visual and structural result of a printed object, including smoothness and accuracy.Print resolutionThe level of detail a printer can place in text or images.Print-debuggingA basic development method that uses printed output to trace program behavior.Print-in-placea method where moving parts are printed already assembled.Print-management platformSoftware that controls printers, queues, and related administrative workflows across a network.Printer filamentThe plastic strand used as input material for a 3D printer.PrintingThe physical process of placing ink onto a surface to create text or images.Prior authorizationFormal approval required before a sensitive technology can be used in a restricted context.Prior consultationThe step of consulting a supervisory authority when high residual risk remains after a DPIA.Prioritization modelA decision framework that ranks vulnerabilities by exploitability, asset criticality, and environmental risk instead of treating them equally.Privacy accountantA component that tracks cumulative privacy loss across training rounds and mechanisms.Privacy automationSoftware-driven workflows that help enforce privacy and compliance tasks using data inventory context.Privacy controlA tool or option that reduces data collection or unwanted exposure.Privacy leakageUnwanted exposure of identifying data, location clues, or usage patterns through technical signals.Privacy maintenanceOngoing actions taken to reduce exposure over time rather than in a single cleanup step.Privacy monitoringOngoing review of how data is collected, used, and retained.Privacy risk assessmentA pre-deployment review used to judge whether a data process needs extra safeguards.Privacy signalany data point that can help reveal user behavior, identity, or movement.Privacy surfaceThe collection of ways a system can reveal sensitive information.Privacy-preservingA design approach that limits personal data collection while still delivering a security control.Privacy-preserving verificationA design that proves a fact, such as age, without exposing unnecessary identity data.Private AI CloudA controlled enterprise environment for building and running AI systems inside managed infrastructure.Private APNA carrier-provided cellular access profile that can be used to connect devices to a designated network.Private capitalMoney from non-government investors used to fund projects or companies.Private Cellular NetworkA non-public mobile network deployed for an organization’s own devices, sites, or operations.Private channelA restricted communication space that can reduce visibility for moderators and defenders.Private Cloud Compute (PCC)Apple’s server-side infrastructure for handling more complex Apple Intelligence requests.Private companyA business whose shares are not publicly traded on a stock exchange.Private configuration filesFiles that may contain secrets, tokens, or environment variables and should not be reachable from the web.Private connectivityNetwork paths that keep service traffic off the public internet, reducing exposure but not replacing higher-level policy controls.Private endpointA private network connection that keeps service access off the public internet.Private interconnectionA direct network path to a cloud or provider that avoids the general public internet.Private investmentFunding from companies or investors rather than governments or public institutions.Private messaging scopeThe set of users or rooms allowed to see a chat conversation.Private Safety ProcessingA reported safety architecture designed to detect misuse while limiting exposure of raw prompts and responses.Privilege accesselevated account rights that should be limited because they can widen incident impact.Privilege concentrationA condition where one account can control many others, increasing the damage from a single compromise.Privilege controlRules that limit what a user or process is allowed to do.Privilege delegationThe practice of granting limited administrative actions without giving full account control.Privilege hygieneThe practice of keeping access rights tightly limited, current, and appropriate to job needs.Privilege InversionA failure where limited access unexpectedly reaches higher-value functions.Privilege monitoringA security function that tracks elevated access or suspicious permission use inside a platform.Privilege reductionLimiting unnecessary access so that a compromised account or tool can do less harm.Privilege reviewA check of high-level accounts and permissions after a suspected security event.Privilege scopinglimiting access so accounts and tools are not broader than necessary.Privilege sprawlThe gradual buildup of access beyond what an application or agent truly needs.Privileged Access WorkstationA hardened admin-only computer designed to keep sensitive credentials away from email, browsing, and other high-risk activity.Privileged accountsAdministrative accounts that require tight monitoring and protection.Privileged actionAn operation with elevated power, such as changing settings or moving assets.Privileged APIAn interface that performs sensitive actions and should be tightly restricted.Privileged appA system app granted elevated permissions that regular user-installed apps do not receive.Privileged client codeApplication logic that runs with elevated permissions and can affect system integrity.Privileged control pointA highly sensitive system that can influence important actions and therefore needs strong protection.Privileged datasensitive information protected by legal or trust obligations.Privileged database accessHigh-level database permissions that can expose large sets of records and administrative functions.Privileged execution pathA code path that runs with elevated trust or permissions.Privileged identityA high-trust account or service identity with powerful permissions and broader blast radius.Privileged Identity Management (PIM)A system for managing, approving, and auditing access to sensitive roles and resources.Privileged infrastructureSystems with elevated access or high trust that require tighter security controls.Privileged internal functionalityHigh-trust administrative features that can change system behavior or access sensitive operations.Privileged materialconfidential legal information protected from disclosure.Privileged OS userAn account with elevated operating-system rights that can make sensitive system changes.Privileged permissionAn elevated Android permission reserved for trusted system software, often unavailable to ordinary user-installed apps.Privileged systemsinfrastructure with elevated authority over sensitive operations.Privileged useran account with elevated permissions, such as administrative access.PRNGPseudorandom Number Generator, a function that can appear random but may be predictable if it is not cryptographically secure.PRNUPhoto-response non-uniformity, a sensor noise pattern used in image source attribution and tamper analysis.Pro bonoProfessional work offered without charge to support a cause or organization.Proactive CommandA SIM-initiated action that asks the device or modem to perform a specific task.Probabilistic modelA model that can produce different valid outputs from the same prompt.Probabilistic OutputAI-generated results based on statistical likelihoods rather than fixed rules, which can vary across runs and require verification.ProbabilityA numeric estimate of how likely an event is to occur.Probe and agentComponents that collect data or receive commands so a central platform can manage remote systems.Procedural admissibilityThe question of whether evidence can be accepted and relied on in a proceeding.Procedural DataLegal case records and related judicial information that require strict confidentiality and access control.Procedural deadlinea fixed legal time limit that affects the validity of an action.Procedural riskthe chance that an operational outage affects deadlines, notices, or formal steps.Process abuseExploiting business procedures instead of software flaws.Process AncestryThe chain showing which program launched another process, useful for spotting suspicious behavior.Process bypassAn attack that avoids a control by exploiting workflow weaknesses rather than technical compromise.Process concealmentMethods used to hide malicious activity from basic process listings and inspection tools.Process ContextThe identity and permissions under which a program runs on a system.Process creation search orderThe sequence Windows uses to locate an executable when only its name is provided.Process designthe way tasks, roles, and handoffs are organized inside an institution.Process deviationa departure from the expected operating conditions or tolerances.Process disciplineCareful attention to each step in a workflow so the final result remains dependable.Process ghostingA Windows execution trick that launches a process from a file state designed to evade normal inspection.Process isolationSeparating workloads so one process cannot easily interfere with another.Process masqueradingA stealth technique where malware imitates a legitimate process name.Process MonitorThe PeopleSoft screen used to review submitted process requests and their current or final status.Process optimizationimproving how a workflow uses resources and power.Process readinessThe degree to which a workflow is standardized, consistent, and ready for automation or AI.Process redesignReworking workflows so a new technology changes how work is done, not just how fast a task is repeated.Process SchedulerThe PeopleSoft subsystem that launches and tracks scheduled batch work.Process spoofingA stealth method that makes a malicious process appear benign in system tools.Process-name SpoofingA disguise technique where malware imitates a legitimate process name.Process-network mismatchtraffic that does not fit the expected behavior of a running application.Processing chainthe sequence of actors that handle data in a workflow.Procurement baselineA minimum set of security expectations used to guide purchasing decisions.Procurement cycleThe process an organization uses to plan, buy, and replace hardware.Procurement disciplinea structured approach to evaluating tools before adoption.Procurement lifecycleThe full buying process, from defining requirements to contract management and renewal.Procurement ProcessesThe purchasing and vendor-selection steps where security requirements can be enforced before systems are deployed.Procurement recordsDocuments that can reveal vendors, spending, and approval paths.Procurement securitySecurity checks applied before buying or deploying technology.Procurement signalA factor buyers use to judge whether a vendor is suitable for trust.Product Change Notice (PCN)A vendor notice that documents hardware or component changes affecting compatibility.Product cycleThe planned rhythm a company follows for preparing and releasing new products.Product governanceThe rules and controls used to design, review, and distribute financial products for a defined target market.Product identitythe visual and functional traits that make a device immediately recognizable.Product liabilityA legal framework that can hold a manufacturer or provider responsible when a product defect causes harm.Product lifecyclethe full span from design and release to maintenance and retirement.Product lineA family of related products that may share core technology, branding, or management tools.Product master dataThe authoritative set of product details used across sales, catalog, and fulfillment systems.Product maturityThe stage at which a technology becomes stable, useful, and commercially repeatable.Product presentationthe visible and practical way a product is delivered to the customer.Product roadmapThe planned sequence of features, releases, or priorities for a product or platform.Product securityThe discipline of protecting software features, architecture, and defaults before and after release.Product security incidentA security event affecting a product, component, or service rather than only a user account.Product transparencyHow easy it is to understand what a device contains and how it works.Product vulnerability reportA submission describing a flaw in software behavior or code that may qualify for review or reward.Product workOngoing operational improvement work that continues after a project ends and focuses on business outcomes.Product-discovery platformsoftware that helps shoppers find items through search, recommendations, and related tools.Production blockingPreventing harmful operations inside a live environment instead of only alerting on them.Production capacityThe amount of hardware a manufacturer can make in a given period.Production dependencyA system that a business relies on for day-to-day operations, not just testing or experimentation.Production endpointA live device in an operational environment, as opposed to a lab, sandbox, or test system.Production haltA stop in manufacturing or operations, here described as part of the incident's reported impact.Production InfrastructureThe live systems that support real users and services, as opposed to test or development environments.Production maturityA state where an AI system is stable, monitored, documented, and ready for operational use.Production MonitoringOngoing observation of a live system to detect drift, errors, and unexpected behavior.Production ownershipAn operating model where the team that builds a service also supports it in production.Production pipelineThe sequence of tools and steps used to create, process, and deliver digital content.Production restartThe operational phase where a plant resumes output after systems have been restored.Production softwareLive code and services used in real operating environments.Production suspensiona temporary halt in output while recovery or safety steps are taken.Production systemsLive infrastructure used for real services, data handling, or deployment, not a lab or sandbox.Production workflowA live business process where a system affects real decisions, outputs, or transactions.Production-Ready AIAI systems prepared for operational use, with monitoring, controls, and support processes in place.Productionizationthe move from experiment or prototype to a stable system used at scale.Productive OverrideA human challenge to an AI recommendation that improves the final decision rather than merely copying the model.Productivity baselineThe new normal after a temporary efficiency gain becomes expected performance.Productivity gapThe difference in output efficiency between economies, sectors, or firms.Productivity paradoxThe idea that major technology adoption can spread widely before it appears clearly in productivity statistics.Productivity softwareapplications used for office work such as spreadsheets and documents.Professional boundarieslimits that define acceptable time, responsibility, and availability.Professional diligenceThe level of care, competence, and verification expected from a professional in performing work responsibly.Professional displacementthe risk that automation reduces or changes the need for certain jobs or tasks.Professional exchangethe sharing of experience, guidance, and lessons among peers.Professional graphA network of people, roles, and connections that can be searched to understand relationships and hierarchy.Professional purposethe sense of meaning a person connects to their work and career.Professional responsibilitythe duty of a practitioner to remain accountable for advice and decisions.Profile enrichmentcombining multiple data points to build a more detailed record about a person.Profile importA configuration workflow that can be risky if it accepts untrusted input or weak validation.Profile initializationThe Windows process that sets up a user profile and connects it to the user's registry context at logon.Profile IsolationA security boundary that limits how apps and data can cross between Android profiles.Profile managementA browser feature that keeps bookmarks, passwords, history, and settings in separate user contexts.Profile provisioningThe process of creating and setting up a managed Android profile on a device.Profile takeoverunauthorized control of a user account or identity.Profile visibilityThe settings that control how much of a professional profile can be seen publicly or in search engines.ProfileXMLAn XML-based format used to define Windows VPN profile settings for deployment.PROFINET DCPA Layer-2 discovery and configuration protocol used to identify industrial devices and assign basic network settings.ProFTPDOpen-source FTP server software used on Unix-like systems.Program governanceThe rules, oversight, and decision structure that guide how a security program operates.Program listingPrinted source code published line by line in a magazine or book.Programmatic adsAutomated ad placements bought through bidding systems, often at high speed and with limited manual review.Programmatic advertisingAutomated ad buying and selling that can move user-level signals across many parties very quickly.Progression designThe structure used to pace rewards, milestones, and unlocks over time.Progression gatea requirement that must be met before the next part becomes available.Progressive rolloutA staged release method that exposes a feature to smaller user groups first.Prohibited AIAI uses that are not allowed under the EU framework because they fall into an unacceptable-risk category.Project File InfectionTampering with stored PLC engineering files so altered logic or configuration may later be deployed.Project NatickMicrosoft’s research program testing whether sealed underwater datacenters can be reliable and practical.Project portalA web workspace used for collaboration, documents, or workflow access.Project-scoped configurationSettings stored for a specific repository or workspace that can change how a tool behaves in that context.PromotionA temporary commercial offer that usually applies for a limited period.Promotion expiryThe date when a temporary offer ends and its terms may change.Promotional codea code used to activate a discount or bundled benefit.Promotional creditsFree or discounted usage allowances intended to support onboarding or trials.Promotional offera temporary commercial condition that can change the price or benefits of a product.Promotional terma temporary condition attached to a limited-time offer.Prompt classificationA method for sorting AI requests into categories so organizations can monitor use and spot unusual activity.Prompt custodyThe path and ownership of a user prompt as it moves through systems that may process or store it.Prompt DesignThe practice of writing and refining instructions so a model produces more accurate, relevant, and controlled outputs.Prompt diversityVariation in query wording that defenders can analyze to spot automated extraction behavior.Prompt fatigueThe tendency for repeated approval requests to make users click through without close review.Prompt filteringA defensive layer that screens inputs or outputs for suspicious or risky content.Prompt ForcingA technique that steers an AI assistant by controlling its interaction flow rather than just inserting hidden text.Prompt framingThe way a question or instruction is worded, which can change model behavior.Prompt historyStored records of user prompts and AI responses that can reveal project context.Prompt obfuscationA method of disguising harmful instructions so they are harder for filters to recognize.Prompt privacyThe protection of user-submitted AI prompts from unnecessary access, storage, or disclosure.Prompt RetuningAdjusting instructions so a different model produces reliable results.Prompt sharingReusing or distributing text instructions so multiple users can work from the same guidance.Prompt templateA reusable prompt or instruction pattern that shapes how an AI workflow behaves.Prompt workflowthe sequence of entering instructions, waiting for output, and reviewing results in an AI tool.Prompt-framingThe skill of structuring instructions to get better and more reliable AI output.PROMPTFLUXa malware name mentioned in the roundup in connection with claims of self-rewriting with Gemini.PromptingThe instruction or input used to steer a model’s response.Proofmaterial claimed to support an allegation, which still needs verification.Proof assistantA tool that guides users through formal reasoning while checking correctness automatically.Proof of damageevidence used to show that harm occurred and how it happened.Proof of inclusionEvidence that a certificate belongs inside a published Merkle tree.Proof of lifea check intended to confirm that a live person is present during verification.Proof of reservesA cryptographic transparency method used to show that user assets are being tracked against held assets.Proof-based automationA testing approach that tries to confirm findings with evidence to reduce false positives.Proof-Based ScanningA validation method that tries to confirm whether a finding is real, reducing false positives.Proof-of-ageEvidence that a user meets an age requirement, used to enforce restricted access.Proof-of-concept (PoC) codeSample code that demonstrates how a vulnerability can be triggered or tested.Proof-of-concept testA small working example used to reproduce or demonstrate a vulnerability.Proof-of-exploitabilityEvidence showing that a reported flaw can be demonstrated in practice.Proof-of-personhoodA mechanism designed to show that a real human is behind an online action without necessarily revealing full identity.Proofsclaimed evidence that still needs verification before it is treated as real.PropagandaMessaging designed to shape perception or amplify an actor's goals.PropellantA material used to generate thrust through combustion or another energetic reaction.Propertya measurable characteristic of a material, such as hardness, strength, or conductivity.Property managementA business sector that relies on sensitive records, vendor access, and ongoing communications.Proportionate measuresSecurity controls sized to the importance and impact of the risk being addressed.Proporzionalitàthe principle that a control should fit the risk and avoid unnecessary intrusion.Proprietà industrialethe legal area covering trademarks, designs, and related commercial rights.Proprietary dataInformation created or owned by an organization that can become distinctive when published publicly.Proprietary modelA model controlled by a vendor, usually accessed through a managed service or API.Proprietary platformA system controlled by a single vendor, often with hardware and software tied closely together.Proprietary softwareSoftware controlled by a vendor, with access to source code and internals typically restricted.PropTechTechnology used to digitize real estate activities such as listings, tenant onboarding, rent collection, and property management.Prosecutor (pm)In this article, the public prosecutor is reported as the authority competent to authorize real-time biometric recognition.Prospect intelligenceBusiness information used to identify and prioritize potential customers.Prosumerproducts aimed at users who want more capability than consumer gear but less complexity than industrial equipment.PROTECTEDAn Australian government data classification for sensitive information that requires stronger security and personnel controls.Protected Business Network (PBN)A secure enterprise network concept tied to NATO’s digital backbone and internal collaboration needs.Protected memoryMemory regions meant to stay inaccessible to ordinary software or users.Protected Process Light (PPL)A Windows protection model that restricts tampering with sensitive processes such as anti-malware services.Protected reasoningInternal model behavior or reasoning signals that are not meant to be freely exposed.Protected sharingA file-sharing setup that adds controls such as passwords or link expiry.Protected storeA controlled location for secrets, such as a secret manager or encrypted vault.Protected ViewA Microsoft Office mode that opens untrusted files in a restricted, read-only state.Protected worksCreative material covered by copyright or similar rights.Protection ModeA device state that limits normal operation to reduce risk after abnormal conditions are detected.Protein synthesisthe process cells use to build proteins needed for life.Protocol BridgeA component that connects different industrial protocols, improving interoperability but also enlarging the trust boundary.Protocol camouflageA technique where malicious traffic is shaped to resemble legitimate network communication.Protocol command injectionA flaw where attacker-controlled input can alter protocol behavior in a way the client did not intend.Protocol fallbackA backup behavior in some VPN configurations that tries an alternate protocol if the first one fails.Protocol masqueradingHiding malicious traffic so it resembles legitimate protocol activity.Protocol parserCode that reads and interprets network messages, often a high-value target for attackers.Protocol selectionThe logic a VPN client uses to choose which network protocol to try when establishing a tunnel.Protocol-aware filteringInspection that allows only expected communication patterns for a given industrial protocol.Protocol-level sessionsBuilt-in connection state that ties a sequence of requests to one ongoing interaction.Protocollo informaticoThe digital protocol register used to log official documents as they enter a public administration.Prototype methodA function stored on a JavaScript object prototype and shared by instances through inheritance.Prototype validationPhysical testing used to check whether a modeled design works in practice.Provenance CheckingA defensive control that verifies where content came from before treating it as trusted input.Provenance loggingRecording where data or outputs came from so authorized use can be distinguished from abuse.Provenance reviewChecks that trace where a model came from, how it was obtained, and how it is being used.Provenance SeparationKeeping untrusted content distinct from system instructions and user intent.Provenance toolingSoftware used to track the origin, history, or authenticity of digital content.Provider authorizationThe approval step that confirms a credential move is intentional and permitted by the user.Provider dependencyReliance on one cloud vendor or platform in a way that makes switching or recovery difficult.Provider-based architectureA design that separates cryptographic implementations into selectable modules.Provisional detentiontemporary custody while investigators continue collecting evidence.Provisioning profileAn iOS signing and distribution mechanism used to run apps outside normal store flow.Provisioning toolsoftware used to activate, modify, or remove customer services.Provisioning workflowThe chain of steps used to set up and configure new devices or servers.ProwlerAn open-source tool used to check AWS security posture and configuration.Proximity operationsdeliberate approaches between satellites or objects in space, often for inspection or tracking.Proxy abuseUsing infected devices to relay traffic so the real origin of activity is hidden.Proxy bypassA path that lets traffic avoid the intended relay or proxy chain and move directly.Proxy chainMultiple forwarding components, such as load balancers and reverse proxies, that can each interpret HTTP slightly differently.Proxy controlsRules or settings that force outbound traffic through a filtering or monitoring relay.Proxy DeploymentSetting up intermediary systems or services to relay traffic and conceal the origin of communications.Proxy exit nodeThe device or server where relayed traffic leaves a proxy network and appears on the internet.Proxy featureA data point that is not sensitive by itself but can indirectly reveal or reinforce a protected attribute.Proxy interviewA job interview attended by one person on behalf of another to help defeat identity checks.Proxy layerInfrastructure that forwards requests between clients and external services, often becoming a trusted network chokepoint.Proxy nodeA device that relays traffic on behalf of another system, often to hide origin.Proxy plug-inA component that forwards web requests from a front-end server to backend applications.Proxy relaya forwarding path that sends traffic through another server before reaching its destination.Proxy relayingForwarding traffic through an intermediate device to obscure origin or route activity through another host.Proxy settingsBrowser controls that determine where web traffic is routed before it reaches its destination.Proxy softwarea program that forwards network traffic through another system or address.Proxy ToolSoftware that relays traffic through an intermediate host to hide origin or support pivoting.Proxy-botnetA network of relays used to forward traffic and obscure the origin of connections.Proxyjackingabuse of compromised devices to provide proxy services for profit.PS2EXEA tool that packages PowerShell scripts into Windows executables, making script logic harder to spot at a glance.PSBTPartially Signed Bitcoin Transaction, a format used to move unsigned transactions to offline signers for approval.PSD2 SCAan EU authentication requirement that strengthens certain electronic payment flows.PseudonymousA system where an address or alias hides a user's real identity, but does not guarantee full anonymity.Pseudorandom number generatorSoftware that creates numbers meant to look random, but can be predictable if designed poorly.PSIMPhysical Security Information Management, software that centralizes multiple security systems into one operational view.psta common email archive format that can contain messages and attachments.PSTNPublic Switched Telephone Network, the traditional phone network that still carries many enterprise voice calls.PSVDAma wholesale gas reference index used to set variable commodity pricing.Psychological ownershipthe feeling that something is yours even without direct physical possession.Psychological well-beingA person's overall emotional and mental state.PTFIBM's patch delivery format for fixing defects and security issues on IBM platforms.PTS POIa certification framework for securing payment terminals and similar point-of-interaction devices.Public accessPermission for outsiders to view or use a resource without special approval.Public APIA software interface exposed for external access, often used to exchange data between systems.Public assetA resource owned or controlled by the state on behalf of citizens.Public betaAn early release stage where a product is available for broader testing before final general availability.Public BlockchainA distributed ledger replicated across many nodes and governed by network consensus.Public CAA certificate authority trusted by browsers and operating systems to issue TLS certificates.Public channelA Telegram broadcast feature built for wide audience distribution.Public communicationthe way institutions explain decisions, services, and responsibilities to citizens.Public digital sectorGovernment digital services, platforms, and administrative systems used by citizens and institutions.Public digital servicesonline systems used to deliver government or civic functions.Public ExploitCode or a method that is openly available and can be reused to attack vulnerable systems.Public file serverAn internet-reachable service that can expose files if access controls are weak or misconfigured.Public guaranteeA state-backed commitment that can reduce lender risk and lower borrowing costs.Public imaginationThe shared sense of possibility that shapes how people receive new technology.Public investmentMoney provided by governments, agencies, or other public bodies.Public key cryptographyAsymmetric cryptography used for encryption, authentication, and digital signatures.Public key infrastructureThe framework for issuing, managing, and validating digital certificates.Public legitimacythe degree to which affected communities accept a project because its rules, risks, and benefits are explained transparently.Public nuisancea legal theory used when conduct is seen as harming the public at large.Public perceptionthe way audiences collectively interpret a person, company, or trend.Public ProjectA project configured to be visible to users without an account unless visibility is restricted.Public proof-of-concept exploitCode that demonstrates a vulnerability and can lower the barrier to practical abuse.Public spherethe shared space where social and political debate becomes visible.Public Wi-FiAn open or shared wireless network that users should treat as less trusted.Public-facing deviceA system designed to be used directly by many different people.Public-facing infrastructureInternet-exposed systems users can reach directly, such as websites and login portals.Public-facing layerThe websites and services users interact with directly.Public-facing serverA system exposed to the internet and therefore more likely to be probed or abused.Public-facing sitean internet-exposed service that may become a target.Public-facing websitean internet-exposed site that can become an early point of scrutiny.Public-private investmentA financing model where governments and private actors share the cost and risk of large infrastructure projects.Public-sector exposurethe added operational and reputational pressure that can follow claims against government bodies.Public-source monitoringWatching public code and other public surfaces for exposed credentials that need response.Public-space biometric identificationUse of biometric tools in places accessible to the public, where privacy and civil-liberties risks are elevated.Publication scheduleda status marker suggesting planned release rather than confirmed release.Publication threatA warning that stolen or sensitive data may be released publicly.Publicly disclosed victimscases that appear in open victim tracking or public acknowledgment.Publicly disclosed vulnerabilityA flaw that has been revealed to the public, which can increase urgency even before active exploitation is confirmed.Publish/SubscribeA messaging model where devices send data to topics and other devices subscribe to those topics.Published pricingvendor pricing listed publicly, which lets buyers compare costs without starting a sales negotiation.PublisherThe company that funds, markets, and helps release a game.Publisher identityThe developer name shown in a store listing, useful for verification.Publisher ReputationA trust signal based on a software maker’s history, signatures, and prior downloads.Publisher signatureA cryptographic mark that helps confirm software was issued by the claimed vendor and was not altered.Publisher trustThe confidence model used to judge whether a software author or maintainer is legitimate.Publishing tokena secret used to upload or publish a package release.PUEPower Usage Effectiveness, a metric that compares total facility energy use with IT energy use.Pull request (PR)A proposed code change reviewed before merge in a development workflow.Pull request branchA branch proposed for review and merge, often used to test changes before they become part of a main codebase.Pull Request TargetA GitHub Actions workflow trigger that runs in the base repository context and can access secrets depending on how the workflow is configured.Pull-request diff scanningReviewing only changed code in a pull request to spot security issues early.Pulse durationThe length of a single laser burst.Pulse spacingThe timing gap between signal changes, which can shape perceived sound.PulseAudioA legacy Linux audio server protocol that PipeWire can emulate for compatibility.Pulsed lasera laser that emits light in brief bursts rather than continuously.Pump StationA facility that moves water or wastewater through the network using mechanical pumps.Pump trolleyAnother name for a handcar, especially in railway and heritage contexts.Pump-and-dumpa scheme that tries to inflate interest in an asset before its value drops.PUNan Italian electricity price benchmark referenced by some indexed offers.Punto di pareggiothe level at which total costs and total benefits balance out.PunycodeThe ASCII-compatible encoding used to represent Unicode domain names in DNS.Purchase invoicea supplier bill used as evidence for accounting and tax processing.Purdue Reference ModelA layered architecture for industrial networks that separates enterprise, control, process, and safety domains.Pure-playA business focused on one main category instead of a broad mix of services.PureRATA remote access trojan associated with hands-on control of infected systems and follow-on malicious activity.Purple teaminga collaborative red-blue exercise used to measure detection coverage against specific MITRE ATT&CK techniques.Purpose-built platformA product created from the start to deliver a specific security or management function.Push APIA web standard that allows sites to send messages to subscribed users even when the page is not open.Push MessagingApp-delivered notifications sent over the internet to a device, often used for urgent alerts.Push notificationsApp-delivered alerts that can be abused if a trusted channel is misused.Push OptionAn optional Git protocol parameter sent with a push to influence server-side handling.Puzzle-solvingGameplay that asks the player to infer, sequence, or manipulate elements to progress.PV solarPhotovoltaic technology that converts sunlight into electricity, usually through panels and associated power equipment.PyArmorA Python obfuscation tool used to make code harder to inspect or reverse engineer.Pyrotechnic chargea charge designed to ignite or produce a pyrotechnic effect.Python pickleA Python serialization mechanism that should only be used with trusted data.QA traffictest traffic used by quality assurance teams to exercise application behavior before release.QC1a qualification level under the MIMIT/ACN framework used to identify eligible cloud and cybersecurity providers.QIRQuantum Intermediate Representation, a common intermediate format designed to improve interoperability across quantum systems.QPUQuantum Processing Unit, the quantum part of a system that performs operations using qubits.QR code decodingThe process of reading a QR symbol and extracting its embedded data, such as a URL.QR code pairingA setup method that uses a scannable code to establish a connection between devices.QR code phishingA lure that uses a scannable code to send a victim to a malicious site or action.QTSPA Qualified Trust Service Provider under EU eIDAS rules, linked to official trusted-list status.Qualification testingTesting used to check whether a system can handle expected operating stress.Qualified electronic sealAn organizational trust service used to show the origin and integrity of a document.Qualified electronic signaturea signature type designed to carry stronger legal weight under eIDAS rules.Qualified Trust Service ProviderA provider authorized under eIDAS to deliver qualified trust services such as signatures and seals.QualityThe degree to which a product or process meets expected standards and requirements.Quality assuranceProcesses used to confirm that a product meets expected standards.Quality by DesignA planning approach that builds quality into a process from the outset.Quality gateA rule-based checkpoint that helps decide whether code is ready to move forward in a release process.Quality metricsMeasurable indicators used to judge whether work is meeting expected standards.Quality of servicePerformance characteristics such as latency, reliability, and throughput that shape user experience.Quality updatesRegular Windows servicing updates that deliver security and reliability changes through the standard update channel.Quality-of-life featureA practical improvement that makes a product easier or less frustrating to use.Quality-system recordscompliance and manufacturing documents used to track regulated production.Quantum advantageA point where a quantum system outperforms classical methods on a defined task.Quantum computerA computing system that uses quantum mechanics and could weaken some current cryptographic methods.Quantum emulationClassical simulation of quantum circuit behavior for testing and development.Quantum emulatorsoftware that imitates quantum behavior on non-quantum hardware.Quantum mechanicsthe framework that describes how matter and energy behave at very small scales.Quantum MLOpsOperational practices for managing hybrid quantum and machine learning workflows in production.Quantum-resilient identityAn identity design intended to remain secure as cryptographic standards evolve for the post-quantum era.Quantum-resistant encryptionCryptography designed to remain secure against attacks from quantum computers.Quantum-safe migrationThe process of moving systems from cryptography that could be vulnerable to future quantum attacks to stronger alternatives.Quantum-safe networka network designed to keep cryptographic protections resilient against future quantum attacks.Quarantine metadataA macOS flag that marks downloaded files and can trigger additional security checks or warnings.Quarterly revenueIncome reported for a three-month period, useful for checking whether growth is real or temporary.QuartermasterA broker-style support role that helps organize reconnaissance, proxy management, and routing.Quasar RATremote-access malware often associated with hands-on control after initial access.Quasi-identifierA data field that can help identify someone when combined with other fields.Query entropyA measure of how random a DNS name looks, often useful for spotting encoded tunnel data.Query processingThe server-side logic that interprets requests and fetches data, which can become dangerous if input handling is flawed.Query-operator injectionA flaw where attacker-controlled input is interpreted as part of a database query, changing its meaning.Questionnaire overlapA situation where multiple bodies ask for the same or similar information through separate forms.Queue stateThe waiting condition before a job begins execution, often shaped by workload or resource contention.Quick scanA fast scan mode that checks memory, active processes, and selected locations on a device.Quick ShareA wireless file-transfer feature used on Android smartphones.Quick-start infographicA concise guide designed to help readers begin applying a topic without reading a full technical manual.Quota abuseMisuse of allocated service limits or promotional capacity to extract value beyond intended use.Quota EnforcementThe process of tracking usage and stopping access when a limit is reached.Quota fissaa recurring monthly charge that does not depend on usage.Quote-only pricingA sales model where the customer must request a custom price instead of seeing public tiers.Quote-to-revenueThe business process that turns a quote into an approved sale, contract, and downstream billing activity.r-selectionAn ecological strategy that favors many offspring, rapid reproduction, and low investment in each one.R/C airshipA radio-controlled lighter-than-air craft steered remotely for hobby or experimental use.R&Dresearch and development, the work of building and improving technical products.Racka frame that holds servers, switches, and related equipment in a data center.Rack-scale AIA design approach that treats compute, power, networking, and cooling as one integrated rack-level system.Rack-scale systemA tightly integrated AI server design built around many GPUs, CPUs, memory pools, and high-speed interconnects.RackmountedBuilt for installation in a standard equipment rack used in server or network rooms.Radar antennaA component that sends and receives radio signals to detect objects or terrain.RadAsyncUploadA Telerik file upload control used in ASP.NET AJAX applications to handle upload processing.Radio clockA clock that synchronizes its time from an external broadcast signal.Radio control (R/C)Remote control system that sends pilot inputs to a vehicle or aircraft.Radio interfaceA wireless communication path such as Wi-Fi, Bluetooth, NFC, or cellular connectivity that may be exposed to attack.Radio interferenceUnwanted emissions that can mimic or distort a real transmission.Radio layerThe wireless communication layer where devices connect to nearby cellular signals.Radio segmentThe wireless portion of a network path, often more variable than wired access.Radio transmissionsending information over radio waves instead of a wired channel.Radio-frequency interferenceUnwanted disruption to wireless signals, which can affect communications and navigation.Radio-frequency signalA wireless signal in the RF spectrum used for communication or interference.Radioactive sourceA material or object that emits ionizing radiation and may require special handling.Radioactive wasteMaterial that emits ionizing radiation and requires controlled handling over long periods.Radiological safetyPractices that reduce exposure to radiation through control, distance, and proper handling.RADIUSA protocol used for authentication, authorization, and accounting in access networks.RAG (Retrieval-Augmented Generation)An AI design that retrieves outside information to support responses, which shifts security concerns into the retrieval pipeline.RAIDA storage setup that spreads data across multiple disks for performance, redundancy, or both.Rail infrastructureThe physical assets and operating systems that support train movement and freight service.Rails frameworkA web application framework used to build server-side applications in Ruby.RAKPRemote Authenticated Key-Exchange Protocol, part of IPMI authentication flows in older implementations.RALA standardized color system used to identify specific paint shades.RAM provenanceThe origin or authenticity of memory components used in a device.RAM serverA server design that relies on memory for active operation and can reduce persistent data retention.Ramp rateThe speed at which electrical load rises or falls over time.Random file namean automatically generated name that can make a file harder to identify.Randomized control groupA comparison group in an experiment that does not receive the new treatment, helping isolate cause and effect.Rangethe distance a vehicle can travel before needing a recharge.RankingThe ordering of search results based on relevance signals and other criteria.Ranking pipelineThe multi-step process that selects, scores, and orders items before they are shown to a user.Ransom claima criminal allegation used to pressure a target during an extortion campaign.Ransom paymentsmoney demanded under extortion pressure during a ransomware incident.Ransomware & ExtortionA category used for cases involving coercion, threat claims, or alleged intrusion activity.Ransomware and extortionpressure tactics that seek payment through disruption or data threats.Ransomware bulletina short security update built from limited verified facts and cautious analysis.Ransomware campaigncoordinated criminal activity that uses disruption or encryption for extortion.Ransomware chaina sequence of loaders and tools used to reach a final malicious payload.Ransomware defenseSafeguards intended to reduce the risk of file encryption or limit damage.Ransomware familymalware designed to encrypt systems and pressure victims for payment.Ransomware feeda listing that tracks claimed victims and leak activity.Ransomware gangA criminal group that uses extortion tactics, often after gaining unauthorized access.Ransomware groupA criminal operation associated with extortion-focused malware activity.Ransomware infrastructuregeneral term for the systems and accounts used to support extortion activity.Ransomware launchpadA compromised system used to prepare or expand ransomware activity.Ransomware leak pagea public listing used to name claimed victims and apply pressure.Ransomware leak posta public extortion message used to pressure victims.Ransomware naming sitea public leak page or victim list used to pressure targets.Ransomware negotiation firma company that helps manage extortion-related communications.Ransomware negotiatorA person who handles extortion communication and payment pressure.Ransomware operationA criminal campaign that encrypts systems and demands payment.Ransomware operatorA criminal actor that uses intrusion for extortion and disruption.Ransomware payloadmalicious code used to disrupt systems for extortion.Ransomware recoveryThe process of restoring systems and data after extortion-driven encryption or sabotage.Ransomware remediationservices aimed at recovering data after an encryption attack.Ransomware surveya study based on reported experiences rather than direct forensic verification.Ransomware suspecta person linked by allegation or investigation to ransomware activity, not a proven offender.Ransomware toolkitsoftware associated with extortion-driven intrusion activity, not proof of encryption by itself.Ransomware victimAn organization named in connection with an extortion or leak event.Ransomware victim claima posted allegation naming a target; not proof of a confirmed breach.Ransomware victim pagea public extortion page used to name a target and increase pressure.Ransomware victim posta public listing used to pressure a named organization.Ransomware without encryptionextortion that focuses on stolen data instead of file locking.Ransomware-and-extortioncriminal pressure that can combine data threats, service disruption threats, or public shaming.Ransomware-style attackharmful activity that mimics ransomware impact without confirming ransom demand.Ransomware-victim listinga public claim naming an organization as affected or targeted.RAPRESTful Application Programming Model, SAP's framework for building service-based applications on modern ABAP.Rare skillscapabilities that are difficult to find and can create disproportionate value when they are present.RASPruntime application self-protection, a control that monitors and can block threats while software is running.RasterFieldA Django field used to store raster geospatial data such as imagery or elevation grids.Rate handlingcontrols that manage request bursts so a service can stay responsive under load.Rate locka contractual commitment that keeps a price unchanged for a stated duration.Raw socketA low-level networking interface that can inspect packets directly and often requires elevated privileges on Windows.Raw system callsDirect requests to the kernel that bypass higher-level libraries.RayfinThe SDK and CLI foundation used to build Fabric Apps and connect them to Fabric services.RCRclone’s remote control interface for managing server-side behavior.RCURead-Copy-Update, a Linux synchronization method that helps readers access data safely while updates happen.RDAiAn abbreviation for Rapid Detection, Alert, and Isolation, used by Crytica Security for its patented technology.RDP USB redirectiona feature that lets remote sessions present client-side USB devices to the server.RDP-accessible systema host reachable through Remote Desktop and often scrutinized when exposed.RDSReliable Datagram Sockets, a Linux kernel networking subsystem for ordered datagram delivery.RDS snapshotA backup copy of an Amazon Relational Database Service database that can be restored or shared.Re-encryptionRewrapping a file or payload in new encrypted or obscured forms to change its appearance.Re-extortiona second pressure attempt aimed at ransomware victims after the initial intrusion.Re-identification RiskThe chance that supposedly de-identified data could be matched back to an individual.Re-indexingwhen removed content or records appear again in a database or search system.Re-verificationA recurring check that requires a user to prove identity again after a set period.Reachability GapThe mismatch between where an AI agent can technically act and where responsibility is formally assigned.Reachability GraphA map of what a system can access or move toward when permissions and dependencies are combined.Reachability verificationchecking whether traffic can actually move through the network under current configurations.React Server Components (RSC)A React feature that lets parts of an app render on the server before results are sent to the client.Reactive powerAC power associated with electric and magnetic fields that supports voltage behavior in the network.Read and write operationsbasic memory actions used by software and tools to inspect or change data.Read-only contract callA query that retrieves blockchain data without creating a transaction or changing chain state.Read-only deploymentA safe rollout mode where a tool can observe and analyze data without making changes.Read-only retrievalAccess that allows data to be fetched but not changed, submitted, or executed.Read-only scopeA permission setting that allows viewing or retrieval but blocks changes to data or settings.Read-write accessPermission that allows both viewing and changing files, which increases the risk of tampering as well as theft.Read/Write PrivilegesPermissions that allow a user or service account to view and modify data.ReadinessThe practical ability to execute a response plan effectively when an attack is underway.Readiness Assessment Methodology (RAM)A UNESCO tool for assessing how prepared a country is to govern AI ethically and responsibly.Readiness goalA target state in which systems are prepared to adopt or support a new security standard.Readiness taggingLabeling applications or access paths to show whether they are fit for agent use.READMEA repository document that often explains a project, its purpose, and how to install or use it.README fileA repository document that explains a project, its purpose, and how to get started.Real IP addressThe user’s original network-facing address, which can reveal location and support tracking.Real-time biometric identificationLive matching of biometric data against a reference set while an event is happening.Real-time blockingRuntime enforcement that stops or interrupts behavior when a policy or boundary is crossed.Real-time dataInformation updated as events happen, with minimal delay.Real-time device navigationInteraction with a phone interface as it changes, rather than following a fixed sequence of steps.Real-time enforcementSecurity control that acts immediately when a risky action is attempted.Real-time event auditingContinuous logging and review of activity so changes can be investigated soon after they happen.Real-time form monitoringA technique where attacker infrastructure can observe typed data during an active web session.Real-time identificationMatching performed immediately or with no significant delay, often in live operational settings.Real-time monitoringContinuous observation designed to detect issues quickly enough to support timely response and risk decisions.Real-time outputinformation delivered quickly enough to be useful immediately.Real-time processingAnalysis and matching that happen without significant delay, during the live capture of data.Real-time protectioncontinuous scanning that checks files and actions as they occur.Rear touchscreenthe display on the back of a camera used for menus and framing.Reason codesHuman-readable explanations that show why a system assigned a particular risk result.ReasoningThe internal problem-solving effort a model uses to answer a request, which can increase token use.Reasoning artifactOpaque model state, often encrypted or signed, used to preserve context across API calls.Reasoning layerA decision layer that interprets context and decides when a schedule should be changed.Reasoning levelsthe amount of deliberation a model applies before producing an answer.Reasoning tracesIntermediate model artifacts that can reveal how a system arrived at an answer.ReauthenticationA fresh verification step required after a risky action or a significant account change.Reboot issuea failure that causes a device to restart unexpectedly or repeatedly.Reboot loopA failure condition where a device repeatedly restarts and cannot return to stable operation.RebrandA change in company name or identity that can signal a new market position or product focus.Rebuild and redeployThe process of compiling updated code into a fresh artifact and releasing it into production or test environments.Receipt serviceA function that confirms a document was received, without necessarily archiving it.Receiver front endThe first stage of a receiver that handles incoming RF energy before later processing.Receiver overloadA condition where incoming signal power is high enough to push a receiver beyond its normal range.Receivershipa formal insolvency process that can complicate business continuity and incident response.ReceptacleThe fixed outlet that accepts a plug and provides electrical connection.Receptive-hypnoid stateA condition described as inwardly focused and more open to guidance.RecertificationA periodic review that confirms an AI system still has a valid owner, scope, and business need.Recipient addressThe destination field in a transfer, here described as the carrier for encoded recovery data.ReciprocityMutual exchange in a relationship; in companion AI, it can be simulated rather than real.Recirculating coolingA design that reuses cooling water in a loop, usually with cooling towers or ponds.Recommendation enginesoftware that selects or ranks content using user interactions and history.Recommendation SurfacesFeed, short-video, and discovery systems that decide what content is promoted to users.Reconfigurable hardwarehardware whose function can change without permanent rewiring or fabrication changes.Record delimiterA separator that marks where one message ends and another begins in a data stream.Record integrityThe reliability and accuracy of information stored in a medical or operational record.Record lossThe disappearance, deletion, or exposure of stored data records, with possible privacy and compliance effects.Record preservationKeeping logs or files intact so they can support investigation or review.Record typeThe DNS field that defines how a name resolution entry is stored, such as A or TXT.RecordkeepingThe practice of logging inputs, outputs, and decisions so advice can be reviewed later.Records leakunauthorized disclosure of sensitive information that can increase leverage.Records managementThe practice of organizing, preserving, and disposing of business information.Records platformA digital system used to manage or provide access to records; the exact functions of the platform in this incident are not specified.Recoverability debtThe hidden risk created when organizations delay replacement, testing, documentation, and training.Recoverythe process of restoring systems, services, and records after an incident.Recovery controlsSafeguards meant to help restore or protect cloud assets after deletion or tampering.Recovery exerciseA planned drill that tests whether restoration steps work under real-world conditions.Recovery filea note that may contain contact instructions or attacker demands.Recovery infrastructuresystems and controls used to restore data or operations after disruption.Recovery isolationkeeping backups and restore paths separate from active systems.Recovery layerBackup and restoration capabilities that help return systems to service after disruption.Recovery optiona fallback method that helps restore a device if an update or configuration fails.Recovery paththe backups, procedures, and access needed to restore operations.Recovery pointA saved state used to restore data or systems after disruption.Recovery point objectiveThe maximum amount of data loss a system can tolerate after disruption.Recovery Point Objective (RPO)The maximum acceptable amount of data loss, measured by time.Recovery pointsBackup snapshots used to restore systems after disruption.Recovery posturean organization's ability to restore systems and data after disruption.Recovery preparednessan organization’s ability to restore access and operations after an incident.Recovery processthe controlled steps used to restore services after an incident.Recovery rateThe share of value that can still be collected after a borrower defaults.Recovery readinessbackup and restoration planning that supports fast business resumption.Recovery seedA backup phrase that can restore access to a wallet and must be kept secret.Recovery settingsbackup email addresses, phone numbers, and reset options used to regain access.Recovery time objective (RTO)The target time to restore a service after disruption.RecreationThe process of rebuilding software or behavior so it can run on different or older hardware.Recruiting washingpolished hiring messaging that may not fully match the day-to-day reality of the role or workplace.Recurring accumulation planAn automated schedule that places investments at regular intervals.Recurring checka repeated review used to confirm whether data has reappeared.Recurring eventA meeting or conference that returns on a regular schedule instead of happening only once.Recurring removal requestsRepeated deletion requests used to limit the return of personal data on broker sites.Recursive self-improvement (RSI)A loop in which AI systems try to improve their own performance through iterative feedback.Recycling yieldThe amount of usable material recovered from collected waste.Red team assessmentA controlled security exercise that imitates attacker behavior to test defenses and response.Red-team engagementA controlled security exercise that simulates attacker behavior to test defenses.Red-team testingDeliberately challenging a system to find weaknesses, unsafe behavior, or misuse paths before attackers do.Redactedinformation intentionally withheld or obscured.Redacted disclosurepartial removal of identifying details while a case remains pending.Redacted domaina partially hidden identifier that limits certainty about the target.Redacted entrya listing with identifying details withheld pending further notice.Redacted identifiera partially masked label used when the full name is not shown.Redacted namea partially hidden identifier that limits public verification.Redacted targeta partially hidden victim name that limits public verification.Redacted target labela partially hidden name that reduces public clarity about the intended victim.Redacted victiman affected target whose identity is withheld pending disclosure.Redefining successchanging how achievement is measured, often toward meaning, balance, or purpose.Redemption RuleThe condition that must be met before a reward or credit can be used.RedFlickA named delivery technique associated with this campaign set, used in Microsoft’s analysis of the phishing activity.Redirect URLan intermediate web address that forwards a browser to another destination.Redirected standard inputInput that is routed into a process from another source instead of the keyboard.RedirectorAn intermediate server that forwards traffic to another destination, often to hide the real endpoint.Redis StreamsA Redis feature for event and message processing that tracks consumer groups and pending work.Reduced-Round AESAn AES variant with fewer rounds than the standard cipher, commonly used in research attacks.Reduced-round cryptanalysisTesting fewer rounds of a cipher to measure how much security margin remains.Redundancy RateThe share of requests that repeat work the system has already performed.ReentryThe phase when a spacecraft passes back through a planet’s atmosphere.Reference dataThe set of standards or values a device uses to interpret measurements.Reference imageAn image used to guide style, identity, or composition in a generated result.Reference system designA validated architecture pattern intended to guide how a product or control should be deployed.Referente CSIRTThe person or role responsible for coordinating CSIRT activities and incident management.referral trafficVisitors who arrive at a site by clicking a link from another service, such as search.Referral-Aware DeliveryChanging page content based on where a visitor came from or how the request appears.Reflected Cross-Site Scripting (XSS)A web flaw where attacker-supplied input is reflected into a page and runs in the victim’s browser.Reflected XSSA flaw where untrusted input is returned by a web page and executed in the browser.Reflection-amplificationA technique that uses third-party servers to multiply attack traffic toward a victim.Reflective loaderMalware that loads a payload directly in memory instead of relying on a standard installer path.ReflinkA copy-on-write feature that lets files share disk blocks until one is modified.Reflow solderingA heating process that melts solder paste and forms electrical joints.RefreshThe process of updating output when underlying data changes.Refrigeration ControllerA device that regulates temperature, defrost timing, and alarms in commercial cooling systems.Refund fraudA scam that uses fake refund claims to extract money or information.Refund windowA limited period during which a purchase can be canceled for reimbursement.Refurbished deviceA pre-owned product restored for resale after testing and cleaning.Refusal behaviorA model’s learned ability to decline unsafe, disallowed, or policy-violating requests.reg.exeA built-in Windows command-line tool for managing the Registry, including saving registry data to files.Regenerative pauseA deliberate break used to restore attention, review decisions, and improve response quality.Regex captureA substring extracted by a regular expression and reused later in configuration or processing.Regex-based mapAn NGINX configuration feature that uses regular expressions to choose or transform values during request handling.Regime forfettarioa simplified tax regime with specific invoicing rules.Regional plana mobile data package designed for use across a defined group of countries.Regional validationtesting a product change in specific markets before wider rollout.Regional Vice PresidentAn executive role that usually oversees business execution, partnerships, and customer growth in a specific geography.RegisterA controlled log used to track items such as risks, incidents, or compliance evidence.register_argc_argvA PHP setting that affects how command-line style arguments are handled in some environments.RegistrabilityThe legal threshold a sign must meet to qualify for trademark protection.Registrable domainThe main domain a user should verify, such as example.com rather than a lookalike subdomain.Registration windowThe fixed period when an organization must complete a required filing or enrollment step.Registry APIThe programmatic interface used to publish, manage, and remove packages.Registry authenticationThe login and token controls that restrict who can list, pull, or publish container images.Registry hijackunauthorized control of registry-managed domain settings or records.Registry mirrorA self-hosted copy of an upstream registry that reduces dependence on live external fetches.Registry PermissionsThe actions a token or user is allowed to perform, such as pulling, pushing, or deleting images.Registry redirectionA traffic diversion technique that sends users from a legitimate distribution host to attacker-controlled infrastructure.Registry Run keyA Windows startup location used to launch programs automatically at logon.Registry scanningAutomated inspection of packages for malicious content before or after publication.Registry-native scanningScanning that happens where images are stored and promoted, before deployment.RegLoadKeyA Windows API for mounting a registry hive under a registry root key when the caller has the required privileges.Regolamentoformal rules that can define how an authority applies procedure.Regolarizzare l’operazioneCorrecting a transaction after the original documentation step was missed.Regression CheckA test that confirms a new change does not break existing features or behavior.Regression testA repeatable test used to confirm that a fixed bug does not return after later changes.Regular ExpressionA pattern language used to match text, often for validation or rule matching.Regular expression compilerA component that interprets regex patterns so software can use them safely and consistently.Regular expressionsPattern syntax used to search, match, and manipulate text.Regular geometryA shape with balanced, repeating dimensions and symmetry.Regulated adviceFinancial guidance that is subject to legal oversight and suitability requirements.Regulated Asset Base (RAB)A financing model that lets some project costs be recovered through regulation before a project is fully operational.Regulated dataData subject to legal, contractual, or industry controls such as payment or personal records.Regulated marketa market governed by formal legal rules and oversight.Regulation 2026/2083The legal instrument referenced for the timing and security obligations in this framework.Regulation S-PA U.S. SEC rule that imposes privacy, safeguard, and incident-response obligations on covered institutions handling customer information.Regulatory approvalformal permission needed to operate under specific rules.Regulatory arbitrageChoosing a jurisdiction with lighter rules to reduce compliance costs, sometimes at the expense of later complexity.Regulatory coordinationAlignment between different layers of law or policy so they do not conflict.Regulatory divergenceDifferences in legal or compliance rules across jurisdictions that complicate digital operations.Regulatory frameworkThe set of laws and rules that governs how an activity can proceed.Regulatory HarmonizationThe process of aligning rules and reporting expectations across agencies to reduce duplication and confusion.Regulatory notificationRequired reporting of a data breach to privacy or security authorities.Regulatory overlapwhen more than one rule covers the same security disclosure or reporting duty.Regulatory readinessthe ability to meet legal and compliance requirements for operation.ReimagingReinstalling or rebuilding a device's operating system, often used as a cleanup step after compromise.Reimbursementthe process through which a healthcare payer approves and funds a therapy or service.Reinforced measuresProposed or updated security controls under consultation that may revise or expand the baseline regime.Reinforcement Learning from Human Feedback (RLHF)A tuning method that uses human ratings to push a model toward preferred responses.ReinstallPutting an app back on a device after it has been deleted; this can fail if distribution is restricted.RejectDirectSendAn Exchange Online setting intended to block anonymous messages that appear to come from the tenant’s own domain.Relabelingchanging labels, documentation, or packaging to disguise the true identity of hardware.Relation extractionA natural language processing task that identifies links between entities in text.Relational costsThe pressure, fatigue, and tension that can accumulate when influence is handled poorly.Relational Database Management SystemSoftware that stores and organizes data in structured tables and relationships.Relational SafetyDesign and policy measures that reduce unhealthy attachment, over-trust, or dependency.Relationship graphA map of links between files, infrastructure, and related threat indicators.Relationship patternRepeated connections between accounts, services, or messages that can reveal coordinated activity.Relationship-based authorizationAn authorization model that derives access from links between users, resources, and roles.Relationship-buildingthe practice of creating understandable, two-way communication with an audience.Relative path traversalA weakness where unsafe file-path handling lets input escape an intended directory.Relay architectureA routing setup that forwards traffic through intermediary nodes to obscure origin.Relay computerA computer that uses electromechanical relays to perform logic operations.Relay domainThe internet domain used by a privacy relay service to carry messages without revealing the destination address.Relay FraudA technique that forwards a live contactless transaction so a card appears present when it is not.Relay networkAn intermediary communications path that forwards data between two endpoints.Relay pathA communication route that forwards data through an intermediate node or layer instead of sending it directly.Relay platformAn intermediary service that forwards requests to other services instead of answering directly.Relay serviceAn intermediary that forwards requests between a customer and an upstream API provider.RelayerAn off-chain service that helps transmit messages or transactions between systems.Relazione diretta con il pubblicoa direct communication link that does not depend on third-party feeds.Releasea published version of software stored in a package registry.Release artifactA packaged software file, such as an installer or archive, distributed to users or mirrors.Release candidateA pre-release build used to find bugs and regressions before a final version ships.Release channelA software distribution path that controls how quickly updates move from testing to broad rollout.Release gateA decision point that can block or allow deployment based on safety, security, or quality checks.Release governancethe controls used to manage software changes before deployment.Release imageThe container image set used to define an OpenShift release and support cluster upgrades.Release immutabilityThe idea that a published software release should not be altered after publication.Release integrityconfidence that shipped code and updates are the intended, unaltered versions.Release provenanceEvidence showing where a software release came from, how it was built, and who controlled it.Release schedulea planned timeline that lists when products are expected to launch.Release signingthe process of signing software builds so users can check they are genuine.Release thresholdA decision point that determines whether a model is ready for broader deployment.Release trackA distribution channel that separates testing builds from public production releases.Reliability layerA protocol component that helps deliver control messages by acknowledging and retransmitting packets.Reliability StandardA formal rule used to support the dependable operation of the power grid.Reliability testingChecking whether equipment performs correctly under real-world conditions before it is relied on.RELRORelocation Read-Only, an ELF hardening feature that makes relocation-related sections harder to tamper with.Relying partyThe service or website that verifies a WebAuthn login assertion.REM-readyprepared to support requirements linked to regulated electronic messaging, depending on implementation.RemediateThe follow-up action after detection, such as revoking, rotating, or reassigning a credential.Remediated versionThe fixed build of a product that corrects a known vulnerability.Remediation authorityThe ability to approve and carry out the work needed to fix a security issue.Remediation automationworkflows that help teams fix dependency issues with less manual effort.Remediation cyclethe process of identifying, testing, and applying a security fix.Remediation debtAccumulated security work that has been identified but not yet fixed.Remediation ownershipThe assignment of clear responsibility for fixing security findings after they are discovered.Remediation patchA code change proposed to correct a vulnerability or reduce its exploitability.Remediation qualityHow effectively a platform helps teams decide what to fix first.Remediation roadmapA tracked plan for fixing security or compliance gaps with owners, deadlines, and evidence.RemediesDefensive measures intended to reduce risk or improve protection.Remedya process that lets a person challenge or correct a decision or data use.Remote access agentSoftware component that establishes a remote session between a device and an operator console.Remote Access ClientSoftware that connects a device to a private network or security appliance from afar.Remote access controlsprotections that limit who can connect to internal systems.Remote access hygieneThe practice of securing VPNs, admin portals, and other off-network entry points.Remote access malwareMalware that gives an operator interactive control over an infected system.Remote access pathsentry points such as VPNs or support portals that defenders should review for misuse.Remote access platformSoftware that lets administrators connect to and manage devices from a distance.Remote Access SegmentationSeparating vendor connections from core networks to reduce the blast radius of a compromise.Remote access software abuseThe misuse of legitimate remote-control tools to interact with a victim system as if it were normal administration.Remote Access SSL VPNA VPN service that lets off-site users connect securely through an encrypted session.Remote access systemA service that lets users connect to internal resources from outside the organization.Remote access tool (RAT)Software that can let an operator control an infected device from afar.Remote administration frameworkSoftware designed for legitimate remote management, but sometimes repurposed for unauthorized control.Remote aimingAdjusting a camera’s direction from a distance instead of by hand.Remote arbitrary code executionA flaw that lets an attacker run chosen code on a target system from afar.Remote Arbitrary-Code ExecutionA flaw that can let an attacker run commands or programs on a target system from a remote location.Remote AttestationA verification step used to confirm that a secure enclave or workload is genuine before secrets are released.Remote Browser Isolation (RBI)A security model that runs web sessions remotely and returns only rendered content to the user.Remote command accessThe ability to send instructions to a compromised system without physically touching it.Remote command executionA condition where an attacker can run commands on a target device from afar.Remote command surfaceThe set of instructions a malware operator can send to control an infected device.Remote commandsInstructions sent to malware from a control system to change behavior or perform actions on an infected device.Remote compromiseUnauthorized access to a system from outside its trusted boundary.Remote content filteringA mail control that blocks external objects such as images or stylesheets from loading automatically.Remote data processing solutionA backend service that processes data away from the device and may matter if it is function-essential.Remote DesktopA Microsoft remote access method that lets a user control another Windows device after authentication and permission checks.Remote Desktop ControlInteractive access that lets an operator use a victim machine as if sitting in front of it.Remote Desktop Services (RDS)Microsoft’s Windows Server platform for delivering remote desktops and published applications.Remote desktop softwareTools that provide interactive access to a system over a network, often abused for attacker control.Remote desktop-style accessInteractive control that can resemble a normal support session.Remote device controlmalware capability that lets an attacker operate a device from afar.Remote DoSA remote denial-of-service condition that disrupts a service or process without requiring local access.Remote executionRunning a workload on another machine, often through a hosted service or network-connected system.Remote exploitAn attack that can succeed over a network or wireless path without physical access to the device.Remote exploitationAttack activity carried out over a network connection, often without physical access to the target.Remote forwardingA tunnel that makes a local service reachable from the remote side.Remote identificationIdentity checking carried out without a physical branch visit.Remote identity proofingA process for verifying someone’s identity without an in-person meeting.Remote MaintenanceOff-site technical support that allows authorized parties to service equipment without being physically present.Remote monitoringThe collection of patient information from a distance for clinical review.Remote Monitoring and ControlThe ability to observe or adjust equipment settings from another location through a networked interface.Remote onboardinghiring and provisioning a worker without in-person verification.Remote operationsManaging hardware or software from a distance rather than on site.Remote Patient Management SystemSoftware used by clinicians to review device data and monitor patients from a distance.Remote processingData or functions handled on external systems rather than entirely on the local device.Remote readabilityThe ability to collect meter data without physical access to each device.Remote shellA capability that lets an operator run commands on a compromised machine from a distance.Remote Support ApplianceA device or service that brokers remote administrative sessions.Remote support gatewaySoftware that brokers approved access for maintenance, diagnostics, and vendor assistance.Remote support sessionA live connection that lets a technician assist a user on a device.Remote terminalA command-line session reached over a network instead of local access.Remote toolEquipment used from a distance to reduce direct human exposure.Remote unauthenticated attackerAn intruder who can reach a system over the network without first logging in.Remote wallet protocolA communication layer that lets an app request actions from a wallet over a network connection.REMOTE_USERA server-side variable used to pass authenticated identity from the web tier to an application.Remote-access applianceA device that brokers secure entry from external users into internal systems.Remote-access capabilityA function that can let an operator interact with an infected device from afar.Remote-access malwareMalware designed to give an operator interactive control over an infected machine.Remote-access mappingssettings that define how authorized users reach internal resources.Remote-access toolsSoftware that lets staff connect to systems from elsewhere, often requiring strict controls after an incident.Remote-support gatewayA platform that brokers helpdesk or vendor access to managed systems from a distance.Remote, unauthenticated attackerA person who can attack a system from afar without logging in first.RemoteIPTypeA field that classifies the remote IP address type in telemetry.Remotely exploitableA flaw that can be attacked over a network connection.Remotely exploitable without authenticationA flaw that may be attacked over the network without logging in.Remotely hosted codeCode fetched from an external location instead of being bundled and reviewed locally.RemotingThe communication layer Jenkins uses to move work between the controller and build agents.Removable media propagationA technique that uses USB or similar media to move malware into isolated networks.RemovalA climate mechanism that takes CO2 out of the atmosphere and stores it for a period of time.Remunerated current accountA bank account that pays interest on the balance held in it.Rendered contentThe final visual form of a message after the email client processes HTML and displays it to the user.Renderer sandboxA restricted browser environment meant to limit what web content can do if a page is compromised.Rendering hardwarethe chip or graphics path that turns scene data into pixels.Rendering sinkA code path where input is inserted into a page, making it a critical point for output encoding or sanitization.Rendita catastaleThe administrative value assigned to an property for fiscal purposes, not the same as a live market price.Renewable electricity mixThe share of power sourced from renewables, which affects the emissions profile of a facility.Renewable energyElectricity generated from sources such as wind, solar, or hydro.Renewable generationPower produced from sources such as wind or solar that can vary with weather and time.Renewable supplyelectricity provision linked to energy generated from renewable sources.Renewable VariabilityThe changing output of sources such as solar and wind over time.RenewalThe point at which a plan continues under its standard terms after a promotional period ends.Renewal leverageThe bargaining power a buyer has when a contract comes up for extension.Renewal logicthe rules that determine what happens when a promotion ends.Renewal PriceThe standard subscription cost charged after an introductory discount ends.Renewal termsthe rules that govern what happens when the initial contract period ends.Renewal workflowThe process used to replace an expiring certificate before service disruption.Rented serverExternal infrastructure used to stage activity away from the target network.RepackagingModifying a legitimate app and redistributing it as a tampered version.Repayment capacityThe extent to which a monthly payment fits a borrower’s income and expenses.Repayment in installmentsa payment method that spreads the balance over multiple due dates.Repeat issuesProblems that recur after they were already identified, suggesting weak remediation.RepêchageA labor-law safeguard that asks whether a worker could have been reassigned before dismissal.RepellentA substance designed to discourage insects from approaching.Repetition ratehow often laser pulses are emitted each second.Replaceable batteryA power source designed to be swapped out instead of permanently sealed inside the device.ReplayReuse of a captured token or assertion to gain unauthorized access without re-authenticating.Replay bufferStored examples or representations that can be revisited during later training.Replay resistanceControls that prevent a previously valid request or approval from being reused later.Replicaan imitation made to resemble another object, often closely.Replication abuseMisusing directory synchronization behavior to obtain sensitive identity information.Replication pipelineThe workflow that turns one source item into many copies, whether on paper or in digital systems.REPLICATION privilegeA highly privileged PostgreSQL role attribute used for replication tasks and related connections.Replication ReceiverA backup-related component that handles replication traffic and management functions.Replication RightsPermissions that let a principal request or synchronize directory data across domain controllers.Replication roleA database account with privileges to connect for replication and manage replication-related objects.Replication softwareTools that copy data or virtual machine state to another system for backup or recovery purposes.Reply-gated phishingA social-engineering pattern in which the malicious content is sent only after the target responds to an initial message.Report viewA formatted presentation layer that organizes data for easier reading.Reporting crosswalkAn internal mapping that translates one incident into the different thresholds and fields required by multiple rules.Reporting lineThe formal chain of authority that determines which executive a leader answers to.Reporting obligationA requirement to notify relevant authorities or stakeholders within a defined timeframe.Reporting obligationsLegal duties to notify relevant parties when a security event or condition meets a required threshold.Reporting thresholdThe condition that determines when an event must be disclosed under a rule or law.Reporting workflowThe internal process for triage, escalation, and submission of vulnerability or incident reports.Repository access controlRules that decide who can read, write, or administer stored software assets.Repository boundaryThe intended file-scope limit for what a tool should read inside a project.Repository cloningCopying a code repository, including its files and history, to another location.Repository Commits APIThe GitLab endpoint used to handle commit-related repository requests.Repository enumerationListing accessible storage locations to find valuable data or targets.Repository firewallA control that blocks or quarantines risky packages before they are served to builders.Repository managerSoftware that stores, proxies, and organizes application artifacts and dependencies.Repository protectionControls that help prevent unauthorized changes, review bypass, and sensitive data exposure.Repository provenanceEvidence that shows where code came from and whether it can be trusted.Repository secretsSensitive credentials stored for code, automation, or deployment tasks, often useful as pivot points if stolen.Repository security advisoryA coordinated disclosure mechanism for reporting and fixing vulnerabilities in code hosts like GitHub.Repository write accessPermission to modify or push changes to a repository.Repository-based updateThe Linux method of keeping Chrome current through package repositories.Repository-centric platformA system organized around versioned storage for models, datasets, or code, similar to Git.Repository-connected toolingSoftware that can interact with source code repositories and therefore needs tight access controls.Repository-content downloadsRequests that retrieve files or other material stored in a code repository.Repository-local configSettings stored inside a project that can influence Git behavior for that workspace.Representational stateA mode centered on symbols, self-reflection, and organized meaning.ReprocessingThe treatment of spent fuel to recover usable material and manage remaining waste.Reproducible environmentAn isolated test setup used to reliably recreate a security issue.Reproducible evidenceDetails that let reviewers confirm a flaw and observe the same behavior again.Reproducible findingsSecurity results that can be independently repeated and verified with evidence.Reproducible proofEvidence that a vulnerability can be triggered reliably, such as a crash, test case, or working patch.Reproduction hardwarenewly made replacement hardware designed to stand in for an original part.Republished CVEA vulnerability entry that appears in Microsoft's release notes for a non-Microsoft product.Reputation driftA gradual mismatch between how an organization wants to be seen and how it is represented across digital systems.Reputation monitoringContinuous tracking of mentions, reviews, and search visibility tied to a person or brand.Reputation riskthe chance that public exposure undermines trust.Reputation-based protectionA security control that judges files or sites using trust signals and known risk data.Reputational coercionusing public pressure or embarrassment to force a response.Reputational crisisA sharp loss of trust or credibility caused by public exposure and rapid spread of negative content.Request classifierA safety component that labels prompts by risk before the model responds.Request IDA unique identifier attached to a request that helps operators trace and diagnose failures.Request InspectionThe process of analyzing incoming traffic for malicious content, suspicious patterns, or policy violations.Request logA record of API activity that can help detect suspicious calls, unusual locations, or abuse patterns.Request pipelineThe sequence of steps a web server uses to handle incoming requests and generate responses.Request routingA policy mechanism that sends certain prompts or tasks to a different model, system, or workflow path.Requirements engineeringThe practice of defining, validating and managing what a system should do.Requirements reviewA formal reassessment of rules before they are enforced, changed, or resumed.Requirements traceabilityThe practice of tracking a requirement from its origin through design, testing, and delivery.Reseller channela third-party sales path that can introduce custody and authenticity risk.Reserve fundmoney set aside to absorb losses after an incident or operational shock.Reset-credentials flowThe process a system uses to let a user change a password after verifying identity.Residential proxy botnetA network of compromised devices used to relay traffic through ordinary consumer internet connections.Residual dataLeftover information that remains on storage after a workload ends or data is deleted.Residual trustSecurity exposure that remains after a policy change because old relationships or pathways still exist.Residual vulnerabilityA weakness that remains after a control or fix has been applied.Resignationthe formal decision to leave a job.Resilience EngineeringDesigning systems to keep operating, recover quickly, and limit damage after disruption.Resilience exerciseA structured practice session used to test how teams respond to disruption, uncertainty, or attack conditions.Resilience to attacksThe ability of a system to resist manipulation or hostile inputs without losing control.ResinA light-sensitive liquid material that becomes solid when exposed to the right wavelength.Resistor sensingUsing electrical resistance in a circuit to infer physical change such as movement or contact.Resolution capA limit that restricts the maximum video quality a platform will allow.resolvRuby’s thread-aware DNS resolver library, shipped in the language’s default gem ecosystem.resolv-replaceA helper that routes socket name resolution through Ruby’s resolver library.ResonatorA structure designed to amplify vibrations at specific frequencies.Resource budgetingThe practice of planning code and hardware use within strict limits.Resource group scopeA permission boundary in Azure that can limit or widen what an identity can manage.Resource limitsRestrictions on memory, disk, size, and runtime that help contain risky file processing.Resource lockAn Azure control that can block deletion or modification of protected resources.Resource reallocationMoving staff or capacity to the place where pressure is highest.Resourcing gapA mismatch between the work security teams are assigned and the staff, budget, or skills they have to do it.ResponseThe actions taken after detection to investigate, contain, or manage a security issue.Response authorityThe level of action a provider is permitted to take during an alert or incident.Response capabilityThe ability to react effectively to technical change, incidents, or operational pressure.Response InspectionThe analysis of outbound traffic to detect leakage, injection, or other unsafe content before it leaves the server.Response queue poisoningA desynchronization issue where responses can be matched to the wrong request or client.Response schemaThe defined structure of fields an API is allowed to return, useful for preventing accidental data exposure.Response surfacethe systems and logs defenders review to confirm and contain an incident.Response validationchecking claims against evidence before acting.Responsibility allocationThe contractual split of duties, risks, and liabilities between the parties.Responsibility gapThe problem of unclear accountability when many actors contribute to an automated outcome.Responsible scalingIn Anthropic’s policy framework, the idea that safety measures should expand as model capabilities increase.ResponsivenessHow quickly an interface reacts to user input.REST authorizationPermission rules that decide which API calls a user or session can make.REST batch requestAn API call that bundles multiple subrequests into one transaction-like exchange.REST pluginAn optional Struts component for REST-style request handling that can add its own security boundaries.Restoration plana tested process for recovering systems and data after disruption.RESTOREA Redis command that recreates a key from a serialized value.Restore pathThe process and tooling used to recover files from a backup copy when data is lost or damaged.Restore pointa saved recovery snapshot used to roll data back after loss or corruption.Restore testa check that confirms backed-up files can actually be recovered.Restricted API keyA limited-permission credential designed to reduce the damage if a key is exposed.Restricted keyA credential limited to specific resources or actions to reduce damage if it is exposed.Restricted ModeA safer state that disables or limits risky editor features in untrusted workspaces.Restriction bypassA control failure that lets a user sidestep intended security policy.RestrictionsRules or boundaries that narrow what users, systems, or processes are allowed to do.ResuscitationEmergency medical action aimed at restoring breathing or circulation.Retail investorAn individual who buys financial products for personal investing rather than professional portfolio management.Retail pricingthe listed price a consumer pays for a product in market sale.Retention bonusextra pay used to help keep specialized personnel in critical roles.Retention curveA chart that shows how many users remain active across successive time periods.Retention rulesPolicies that define how long records must be kept and how they are archived or disposed of.Retention scheduleA policy that defines how long data is kept before deletion or archiving.Retention settingsRules that determine how long sensitive data is kept before deletion or expiry.RetestA follow-up verification step used to confirm that a fix really closed the finding.RetirementThe controlled shutdown or replacement of a system that is no longer needed.retpolineA software technique that reduces risky speculative indirect branching.Retransmission timerA timeout mechanism that resends data when a previous message was not acknowledged.RetrialA new court proceeding after an earlier case is revisited or set aside.Retrieval LayerThe part of an AI system that fetches external content before generating an answer.Retrieval PracticeRecalling information from memory to strengthen long-term retention.Retro gamingPlaying or studying games from earlier eras, often for their simpler mechanics and style.Retro-computingThe practice of studying, restoring, or recreating older computer systems and software.Retro-reflectionA reflection pattern where light returns toward its source, often used as a clue for spotting camera lenses.Retrocomputing ChallengeA competition or showcase focused on recreating or working with historical computing systems.RetrofitAn upgrade to an existing building meant to improve performance, efficiency, or compliance.RetroreflectorAn optical element that sends incoming light back toward its source.Retrya repeated attempt after an unsatisfactory output.Retry storma burst of repeated requests after a slowdown or error.Return on tokens (ROT)A proposed metric for comparing business value created against AI token consumption.Return-fee systemA deposit-style incentive that encourages people to bring bottles back for recycling.Reusable secretscredentials, keys, or tokens that could be used again if exposed.Reuse rightsThe conditions that define who may use data again and for what purpose.Reused credentialsthe same login used across services, which can increase account risk.RevalidationA follow-up check that confirms a vulnerability is still fixed after a patch or change is applied.Revenue cycle managementbilling and payment handling for healthcare services and claims.Revenue growthan increase in income over a set period, often used to measure business demand.Revenue-cycle softwareSystems that manage healthcare billing, claims, coding, and payment workflows.Reverse Polish notationA math input method where operands come before the operation.Reverse proxyingRouting traffic through an intermediary host to obscure the real source of the connection.Reverse SSHAn SSH setup where a host initiates an outbound tunnel that can be used to reach back into an internal environment.Reverse tunnelAn outbound connection that can relay traffic back to an operator-controlled system.ReversibilityThe ability to undo an automated change if it produces an unwanted result.Review burdenThe amount of human checking needed to validate AI output.Review debtThe backlog created when automated changes outpace human ability to validate, test, and secure them.Review IntegrityThe reliability of user reviews, ratings, and endorsements on public platforms.Review manipulationAttempts to distort ratings or comments through fabricated or coordinated submissions.Revocable licenseA license that the provider may revoke under the platform's terms and applicable law.Revocation checkingA control that verifies whether a certificate has been withdrawn before its normal expiry date.Revocation hygieneThe practice of regularly removing app access and tokens that are no longer needed.Revocation pathThe process for removing access or disabling an account, token, or integration.Revocation StatusA signal that indicates whether a credential is still valid or has been withdrawn.Reward eligibilityThe rules that determine whether a purchase qualifies for cashback or a bonus.Reward for JusticeA U.S. government program that offers payments for information on designated security targets.Reward loopA design pattern that encourages repeated engagement through feedback or wins.Reward tierA payout level based on the value or severity of a finding.Reward trackThe sequence or path of items a player follows through a progression system.Rewards for JusticeA U.S. government reward program that seeks information on foreign-linked security threats, including cyber activity.Rewards for Justice (RFJ)A U.S. government program that offers rewards for information tied to foreign threats and certain cyber cases.Rewards lureA social-engineering trick that uses points, benefits, or expiring offers to push clicks.Reworkextra labor and processing needed to correct units that did not meet the target.RewriteA routing rule that maps one URL path to another backend destination while preserving the visible request path.rewrite directiveAn NGINX feature that changes request URIs during processing, which can alter how later logic is reached.RF (Radio Frequency)The part of the electromagnetic spectrum used for wireless communications, including many aviation communication and navigation systems.RF analysisThe study of radio-frequency signals to identify, characterize, or localize wireless emitters.RF and microwave systemsspecialized engineering work involving radio-frequency and microwave technologies.RF interferenceUnwanted radio disruption that can weaken or block wireless communication.RF marginThe extra signal strength available before a link becomes unstable or fails.RF-based sensingDetecting activity from changes in wireless signals rather than from a camera or motion sensor.RFBThe Remote Framebuffer protocol, the wire protocol used by VNC for remote GUI access.RFC 5011The standard that defines automated updates for DNSSEC trust anchors in resolvers.RFC 5424The syslog standard that defines structured log message formatting for many logging deployments.RFC 9794An IETF document that defines terminology for post-quantum traditional hybrid schemes.RFC1918 spacePrivate IP address ranges used inside local networks and not meant to be directly reachable from the public internet.RFIDRadio-Frequency Identification, a wireless method for recognizing tagged items or credentials.RGB driverssoftware components used to control lighting features on compatible devices and peripherals.RGB LED matrixA grid of red, green, and blue light points that can display images or animations.RGB-related peripheralsHardware or companion software that controls colored lighting features in PCs and accessories.Rheoscopic fluidA fluid with particles that make flow patterns visible.Riabilitazione specialisticarehabilitation care focused on targeted evaluation and recovery pathways.RIBbank account identity details used in French financial paperwork.Ribosomethe cellular machine that assembles proteins from genetic instructions.Ricettazionea legal term used for handling proceeds believed to come from a crime.Rigenerazione urbanaRedevelopment of already-built areas instead of expanding onto untouched land.Right to be forgottena privacy principle that can support requests to limit search visibility of personal data.Right to erasureA GDPR right that lets individuals ask for personal data to be deleted in defined circumstances.Right to repairA policy approach that makes fixing products easier, cheaper, and more accessible.Right-designDesigning to actual needs rather than defaulting to excess capacity or oversizing.Rights reservationA signal or notice that tells automated systems a work should not be reused under certain conditions.Rights windowThe period during which a platform is licensed to show a particular event or competition.Ring 0The highest privilege level in the Windows kernel, with direct control over core system resources.Rip-and-replaceA wholesale replacement strategy that can compress change into one cutover and increase disruption if teams are already overloaded.RISRadiology Information System, a platform that manages imaging orders, scheduling, and reporting.Risk acceptancea deliberate decision to keep using a system while acknowledging and managing its remaining exposure.Risk acceptance recorddocumented approval of a known risk, usually with an expiry date and compensating controls.Risk allocationThe way uncertainty is distributed between two parties in a contract.Risk and Resilience AssessmentA structured review used to identify weaknesses, prioritize safeguards, and plan for disruptive events.Risk and Resilience Assessment (RRA)A formal review used to identify vulnerabilities and strengthen preparedness against physical and cyber threats.Risk classificationThe process of placing an AI use case into a legal category that determines its obligations.Risk cohortA group of vulnerabilities that share similar exposure or deployment questions for prioritization.Risk dashboardA visual summary used to monitor priorities, actions, and ownership.Risk designationAn official label that can influence scrutiny, decisions, and perception.Risk detectionAutomated screening that looks for warning signs before harm occurs.Risk distinctionThe practice of separating different threat types so they can be managed correctly.Risk graphA map of relationships between assets, findings, and dependencies.Risk hotspota place where exposure, weak control, or high value makes compromise more likely.Risk judgmentThe ability to rank threats by likelihood, impact, and urgency.Risk mapA structured view of assets, exposures, and impacts used to prioritize cyber defense.Risk monitoringThe ongoing process of watching for signals that a project may go off track.Risk ResponseThe decision to mitigate, transfer, or accept a risk after it has been assessed.Risk retention groupan insurance structure used by members to pool certain liability risks.Risk scenarioA plausible sequence of events that could disrupt a service or affect security.Risk scoreA numeric way to rank security concern for faster prioritization.Risk signalan indicator that merits review, even when compromise is unverified.Risk signalsEvents or telemetry that suggest identity conditions may have changed.Risk surfaceThe parts of a system where design, operation, or misuse can create harm.Risk thresholdA pre-set level of concern used to decide whether a model can be released, restricted, or further tested.Risk tieringClassifying AI use cases by impact or sensitivity so controls match the level of risk.Risk treatmentthe actions taken to reduce, transfer, accept, or avoid a risk.Risk uncertaintythe lack of clear visibility that makes it harder to judge exposure, response, and impact.Risk visibilityThe ability to understand where exposure is concentrated and what matters most.Risk-and-Resilience AssessmentA structured review of threats, vulnerabilities, and safeguards used in critical-infrastructure planning.Risk-based approachA method of choosing safeguards according to likelihood and impact.Risk-based authenticationA control that scores a login or transaction and applies a matching security response.Risk-based controlsSecurity measures chosen according to the sensitivity, impact, and likelihood of harm.Risk-based disclosureA disclosure approach that prioritizes vulnerabilities according to their expected impact and urgency.Risk-based oversightA control approach that matches the level of human review to the impact and sensitivity of the use case.Risk-based vulnerability managementA patching approach that prioritizes remediation based on exposure and exploitability.Risk-commensurate mitigationControls sized to the seriousness and likelihood of the harm the system could cause.RMM (Remote Monitoring and Management)Software used to oversee, maintain, and control endpoints from a central console.RMM platformRemote monitoring and management software used to administer and automate fleets of devices.Roaming clientEndpoint software that keeps DNS policy active when a device leaves the office network.Robot locomotionThe way a robot moves from place to place.Robot taxA proposed tax on automated systems or machines, often used as a shorthand in policy debates.Robotica tangibilephysical robots used as hands-on learning tools.Robots Exclusion Protocola standard that lets site owners communicate crawl preferences to automated agents via robots.txt; it does not by itself prove identity.robots meta tagA page-level instruction that can limit snippets, previews, or indexing behavior.Rocket engine testingcontrolled evaluation of propulsion systems to verify performance, reliability, and safety before operational use.Rocket performanceHow effectively a rocket launches and flies under its design constraints.Rocket recoverythe process of returning a rocket or spacecraft safely after flight.Rogue access pointAn unauthorized or compromised wireless access point that can interfere with network traffic.Rogue adminAn unauthorized administrator account created to preserve privileged access.Rogue agentAn agent whose behavior drifts outside its intended scope, policy, or authorization boundaries.Rogue alertan unauthorized message pushed through a trusted customer channel.Rogue base stationA fake cell site used to attract nearby phones and influence their network behavior.ROI exchange rateA pre-agreed internal formula that converts KPI movement into financial value.Role alignmentThe process of matching training content to the skills needed in specific jobs.Role driftA shift in legal or operational responsibility after an AI system is modified or repurposed.Role fitThe match between a person's strengths and the actual demands of a job.Role modelA visible example that helps students imagine themselves in similar technical roles.Role-based administrationA permissions model that limits actions based on assigned administrative roles.Role-based approvalA control that limits sensitive authorization to specific job functions.Role-based complianceA control model where duties depend on what part of the AI content chain an actor occupies.Role-based permissionsAccess controls that limit what a user or system can do based on assigned roles.Role-based planningOrganizing work by responsibilities and skill profiles so staffing can match operational needs more clearly.Role-membership listingAn administrative function that returns the users assigned to a specific role.Role-specific work samplea practical task used to check whether a candidate can do the actual work.Rollback abuseAn attack pattern where older, vulnerable software versions are restored or reused.Rollback capabilityThe ability to reverse harmful automated actions quickly after they occur.Rollback optionA way to revert a published change if a listing needs correction.Rollback protectionA safeguard that blocks installation of older software versions that could reintroduce known weaknesses.Rollout pauseStopping distribution of an update to limit further impact.Rollout scopeThe set of users, devices, or regions that receive a new feature.ROMRead-only memory that stores code available when a machine starts.ROMULUSReported delivery infrastructure associated with multiple payloads and exposed panels.Root access keyA credential tied to the AWS account root user, which has complete account access.Root cause analysisA structured method for finding the underlying reason a failure or recurring issue keeps happening.Root certificate authorityA trusted certificate used to sign or validate other certificates on a device.Root command executionThe ability to run commands with the highest privilege level on a system.Root compromiseFull administrative control over a system, typically including unrestricted command execution.Root credentialsHigh-privilege secrets or accounts that can unlock broad system or cloud control.Root loginDirect sign-in to the highest-privilege account on a system, which can sharply increase risk if abused.Root ownershipFile ownership assigned to the superuser account, which can increase the impact of a malicious write.Root RCERemote code execution that gives an attacker the highest local privilege on a system.Root shellA command-line session with the highest privileges on a system.Root SSHSSH access with full administrative privileges on a device.Root-cause analysisThe process of identifying how the intrusion began so the same path cannot be reused.Root-cause attributionThe process of identifying the actual origin of a bug, failure, or incident.Root-level code executionThe ability to run commands with the highest system privileges.Root-level privilegesThe highest system permission level on macOS and other Unix-like systems.Rope driver moduleA module associated with the Apollo Guidance Computer.RORO equipmentroll-on/roll-off cargo hardware and related systems used in marine logistics.RoRo shippingroll-on/roll-off cargo transport where vehicles move on and off a vessel.Rotating domainsA tactic where attackers switch hostnames frequently to make blocking and attribution harder.Rotating habitata station concept that spins to create an artificial sense of gravity.Rotating hostsA tactic that swaps servers or domains to reduce the effect of takedowns and blocking.Rotating payload domainsFrequently changing delivery domains used to make blocking and takedown less effective.Rotating wheel designa circular station layout that uses spin to support long-term habitation concepts.Rote recallMemorized knowledge repeated without showing deeper understanding.RotorThe rotating part of a centrifuge that holds the sample containers.RoundingA simplified number presentation that can differ from the exact amount.RouteAn exposure mechanism that can make a service reachable through external traffic in Kubernetes-style deployments.Route 53 Resolver query logsDNS query logs for specified VPCs and related endpoints in AWS.Route integrityThe assurance that network traffic follows the intended routing path without unauthorized interference.Route origin validationA check that helps confirm whether a network is authorized to announce a given IP prefix.Router admin panelThe web interface used to configure a home router.Router firmwareEmbedded software that manages routing, wireless functions, and administrative controls.RouterOSMikroTik's operating system for routers and virtualized router instances, including management and firewall functions.Routine activity theoryA criminological model linking victimization risk to exposure, routine behavior, and opportunity.Routine-activities theoryA framework that links crime risk to opportunity, targets, and lack of guardianship.RoutingThe process of sending a task to the right model based on cost, context, and complexity.Routing pathThe sequence of networks traffic follows as it moves between sender and destination.Routing policyThe rules that determine which approved model should handle a request and under what conditions.Routing resilienceThe ability of a network to keep traffic moving when one path is removed.ROVRemotely operated vehicle, an underwater machine controlled in real time from a surface platform.Row and Column SecurityControls that restrict which records or fields a user can see.RowhammerA memory attack that tries to flip bits by repeatedly accessing nearby rows in DRAM.Royal CommissionA formal statutory inquiry with powers to examine evidence, summon witnesses, and make recommendations.Royalty adjustmentA payment correction that removes or withholds earnings linked to suspicious activity.RP2350A modern microcontroller used in projects that need flexible control over signal generation.RPC EndpointA network interface used by applications to query or interact with blockchain nodes.RPM packageA Linux software package format used to distribute and install applications.RPN calculatorA calculator that uses reverse Polish notation for expression entry.RSA private keyA secret cryptographic key used in RSA-based operations; if exposed or reused insecurely, it can weaken confidentiality.RSFNThe financial communications network used to carry authorized traffic in Brazil's financial system.RST_STREAMAn HTTP/2 frame that immediately ends a stream and signals a reset condition.RsyncAn open-source utility for moving and synchronizing files efficiently between systems.RTIraggruppamento temporaneo di imprese, a temporary grouping of companies/enterprises used in procurement.RTL-SDRLow-cost SDR hardware based on repurposed digital TV receiver chips.RTLSreal-time locating systems used to track assets or equipment indoors.RTOSA real-time operating system designed for devices that must respond predictably and quickly.RTPReal-time Transport Protocol, the stream that carries live audio and is highly sensitive to delay and packet loss.RTSPReal-Time Streaming Protocol, commonly used to deliver and control live video streams.RTURemote Terminal Unit, an industrial device used for telemetry, monitoring, and control at remote sites.Rubidium frequency standardA highly accurate time or frequency reference.RubyA red variety of corundum, colored by trace chromium impurities.Ruby on RailsA web application framework for building server-side apps in Ruby.RubyDocA documentation service for Ruby libraries that can serve generated project documentation online.RubyDoc.infoA Ruby documentation service that generates docs from packages and repositories.RubyGemsThe package registry and distribution system for Ruby libraries, known as gems.Rugged devicespurpose-built hardware designed for harsh or industrial environments.Rule 11A federal civil procedure rule that requires reasonable inquiry before filing papers with a court.Rule baseThe full set of firewall or access rules used in a network environment.Rule bloatthe buildup of redundant, stale, or overly broad rules that make policy harder to manage.Rule hit countA tally of how often a firewall rule matches live traffic.Rule migrationThe process of moving firewall rules and related metadata from one platform to another.Rule of 40A SaaS heuristic that combines growth and profitability to gauge business health.RulebookThe formal set of requirements that defines how a payment scheme operates and who can participate.Rulinga court decision that can influence how later legal procedures are applied.RumorAn unverified claim that may circulate before evidence is available.Run controlThe configuration record that defines how a PeopleSoft process should execute.Run dialoga Windows box used to launch commands and programs quickly.Run keyA Windows registry location often abused to launch programs at startup.Run-rate savingsProjected recurring cost reductions once integration or restructuring work is fully in place.Runner hardeningSecuring the execution environment where pipeline jobs run, often by reducing privileges and isolating workloads.Runner isolationA security measure that separates task execution from the main application to reduce blast radius.Running configurationThe live settings currently active on a device.Runtime assemblyBuilding malicious logic during execution instead of delivering one obvious file up front.Runtime authorizationControls that decide, during operation, whether an AI action is allowed.Runtime behavioral defenseMonitoring live traffic for unusual actions or suspicious automation.Runtime C# compilationCompiling C# code during execution rather than beforehand, which can reduce visible artifacts.Runtime codeProgram logic that executes when software is used, not just when it is installed.Runtime code downloadA technique where an app fetches additional code after it is already running.Runtime code patchingAltering code while a program is running to change behavior or hide activity.Runtime control planeThe layer that governs actions, policies, and visibility while a system is running.Runtime copyThe version of a script or page held in memory while a server is processing a request.Runtime data classificationAnalysis of data at the moment it is accessed or moved, so policies can be applied before it is reused.Runtime decodingThe parsing of structured data inside an application or virtual machine.Runtime detectionMonitoring of active workloads for suspicious behavior after they start running.Runtime EnvironmentThe live execution context where software processes data, tools, and permissions.Runtime executionCode that runs when an application loads or uses a dependency, not during installation.Runtime guardrailsTechnical checks applied during execution to block unsafe or unauthorized AI behavior.Runtime hardeningDefensive measures that protect an app while it is running, not just when it is installed or updated.Runtime HashingAn obfuscation method that stores function names as hashes and resolves them during execution.Runtime identity controlsEnforcement that verifies identity during use, not only at the moment of login.Runtime instrumentationSoftware agents or hooks added to observe application behavior while it runs.Runtime JavaScript executionCode that runs inside an app while it is already executing, rather than only at build time.Runtime Kill SwitchA control that can terminate an AI agent session on demand or by policy.Runtime observationWatching a program while it executes to capture behavior that static analysis cannot show.Runtime overheadextra processing a program environment must spend to manage execution.Runtime-aware scanningInspection tied to workloads that are actually executing in a live environment.Runtime-generated contentWeb content assembled when the browser runs it, rather than loaded from a fixed public page.Runtime.execa Java call that can launch operating-system commands from code.Rust and GolangProgramming languages often seen in modern malware and security tooling for portable binaries.Rust crateA distributable Rust package used to share reusable code through the language’s package ecosystem.Rust preventionmethods used to slow oxidation that can damage metal surfaces.S7A Siemens PLC family commonly deployed in industrial control environments.S7commSiemens communication used for engineering and read/write interactions with S7 controllers.SA 5GStandalone 5G, which runs on a dedicated 5G core without depending on 4G control functions.SaaS exfiltrationUnauthorized copying or downloading of data from software-as-a-service platforms.SaaS portfolioThe collection of cloud-based applications and subscriptions an organization uses to run business functions.SaaS sprawlThe growth of many SaaS services across an organization, including sanctioned tools and overlooked shadow apps.SabotageIntentional interference meant to disrupt, damage, or undermine a system.SafariApple’s web browser and a common entry point for malicious web content.Safe BrowsingGoogle’s reputation and warning system for phishing, malware, and other unsafe web activity.Safe defaultsConfiguration choices that reduce risk unless a user intentionally changes them.Safe designbuilding protections into a system so they do not depend only on user action.Safe DLL Search ModeA Windows setting that changes DLL lookup order to reduce search-path abuse.Safe fallback pathA predefined alternative process that keeps care moving in a controlled way if an AI-supported workflow becomes unreliable.Safe harboura legal protection that can limit liability for online intermediaries under specific conditions.Safe KidsA parental-control toolset for managing device use, content access, and family safety settings.Safe Mode with Networkinga Windows startup mode that loads limited services while keeping network access.Safe shutdownA mode in which a system stops in a controlled way that reduces the chance of physical harm or data loss.Safeguard validationChecking whether protective controls actually reduce unsafe model behavior in practice.SafeguardingProtective steps used to reduce the risk of harm to vulnerable people online.SafeModeA Fastjson hardening option that disables AutoType and reduces risky parser behavior.Safer designA change intended to reduce user risk or make use more controlled.SafetyProtection against accidental harm, injury, or operational failure.Safety blockA guardrail that can refuse or interrupt an AI output when policy or risk thresholds are triggered.Safety by designBuilding protective features into a service during development, not after launch.Safety casedocumented evidence used to show a system is safe enough for deployment.Safety ClaimsStatements a vendor makes about how reliable, secure, or controlled an AI system is in practice.Safety constraintsRules that limit model behavior when outputs could create unacceptable risk.Safety disclosurePublic documentation that explains a model’s risks, safeguards, and known limitations.Safety frameworkA formal process used to evaluate risks and set conditions before training or releasing a model.Safety functionA control mechanism designed to prevent or reduce hazardous conditions.Safety guardrailsProduct rules and technical limits designed to reduce harmful responses.Safety instrumentationTools used to detect hazards, support alerts, or improve situational awareness in dangerous environments.Safety interlockA mechanism that prevents operation when a protective condition is not met.Safety slowdownA policy approach that favors slowing development until controls and oversight improve.Safety warningA caution meant to prevent unsafe use or misuse of a tool or process.Safety-by-designA product approach that builds protective controls into the core system architecture.Safety-critical componenta part whose failure or misuse could affect safe operation.Safety-critical environmentA setting where mistakes can affect physical safety, service continuity, or public infrastructure.Safety-critical systemA system whose failure could affect operational safety.Salary negotiationThe process of discussing pay and related conditions to better match value, responsibility, and market reality.Sale statusa label that may indicate an alleged attempt to pressure or monetize claims.Sales channelthe path used to offer or sell a service, such as web, call center, or retail.Sales vouchersfinance records that can expose transactions, approvals, or accounting detail.Salesforce orgA tenant-specific CRM environment that can store sensitive business records.Salesforce organizationA Salesforce tenant or org used to store and manage business data and workflows.Salesforce recordsbusiness records stored in Salesforce, often tied to customer operations.Salim Benbouziyanethe maker associated with the TN Deck project.Salted hashingA password storage method that adds random data before hashing to slow cracking.Salty waterWater containing dissolved salts, which often increases conductivity.SalvageReusing working components from damaged equipment instead of restoring the full device.SAMThe Windows Security Account Manager, which stores local user-account and security information.SAM databaseThe Windows store for local security account material, including password hashes for local accounts.sameAsA structured data property used to point to official profiles or pages that refer to the same entity.SameSiteA cookie setting that helps control when a browser sends the cookie in cross-site requests.SAML 2.0A protocol for exchanging authentication and identity assertions between identity providers and service providers.SAML ActionA configuration element used in federated identity and single sign-on workflows.SAML assertionA signed statement that tells a service provider who the user is and what access they should receive.SAML Service ProviderThe system that relies on an external identity provider to authenticate a user.Sample leaka partial data preview that may suggest disclosure without proving full theft.SamplesStored audio clips or sounds used by the device.Sampling biasDistortion that occurs when the collected data overrepresents some behaviors and underrepresents others.Samsung Smart SwitchSamsung’s transfer tool for moving data from one Galaxy device to another.Sanction discretionThe room an authority has to decide whether and how severely to penalize a violation.Sanction procedurethe separate process used to impose a penalty after review.Sanctioned hostinghosting infrastructure targeted by restrictive legal or administrative measures.Sanctions complianceControls used to avoid transactions or relationships that may violate international restrictions.Sanctions exposurethe risk that poor controls or failures lead to regulatory penalties or formal enforcement.Sanctions list versioningKeeping the exact sanctions dataset snapshot used at a specific decision time.Sanctions procedurethe formal process used when noncompliance may trigger penalties.Sanctions screeningA compliance check used to detect payments involving restricted parties, regions, or entities.Sandbox checkA test a sample uses to detect virtualized or monitored analysis environments.Sandbox editA test change made in a non-public or practice area before live editing.Sandbox ProtectionIsolation meant to limit what code can do if it is triggered or compromised.Sandbox-CRAA proposed regulatory sandbox mentioned for businesses in connection with CRA implementation.SANnavA SAN management application used to monitor and administer Brocade fabrics.SAP KernelCore runtime software that supports SAP execution and can be shared across many deployments.SAP Security NoteAn official fix advisory that identifies a vulnerability and the remediation path.SAP Security NotesVendor-issued advisories that describe vulnerabilities and provide the associated correction path.SAP Web DispatcherA front-end component that forwards HTTP(S) requests and can sit close to the network edge.SapphireA gem-quality variety of corundum in colors other than red.Sarbanes-Oxley (SOX)A U.S. law focused on internal controls and financial reporting governance.SARIFA standard format for sharing static analysis results across security tools and developer workflows.Satellite communications networkThe infrastructure that routes communications through satellites, ground stations, and connected user terminals.Satellite fallbackBackup communications that can help maintain service when primary terrestrial or cable links are degraded.SatoriAn upstream renderer that converts HTML and CSS into SVG for dynamic image generation.SaturationA condition in which a transformer no longer reproduces current accurately because its magnetic core is pushed beyond normal limits.SavebackA rewards feature that returns a percentage of eligible purchases to the customer.Saved objectA stored Kibana item such as a dashboard or visualization, protected by access rules.Saved objectsKibana-managed items such as dashboards, visualizations, and related application data.SBOM generationThe process of scanning an artifact, image, or filesystem to produce an SBOM document.SBOM managementThe storage, versioning, access control, and lifecycle handling of SBOM records after they are created.ScadenzaThe end date after which an offer or condition is no longer available.Scadenza di pagamentothe date by which a payment is due.Scalable infrastructureInfrastructure that can grow with workload demand without breaking performance or reliability.Scale industrialethe stage where a project moves from prototype or pilot to larger production.Scale-up capitalGrowth financing that helps a technology move from prototype to market deployment.ScaleupA company that has moved beyond startup mode and is focused on rapid growth.Scam call centera fraud operation that uses coordinated phone outreach to impersonate trusted institutions or support desks.Scam centerAn operation site used to run fraud campaigns, often with coordinated roles and communications.ScannerA compromised host used to probe other systems for weaknesses or open services.Scanner-agnosticAble to ingest results from different security tools without depending on one vendor.Scarcity pressureA tactic that uses limited availability to push faster, less careful decisions.Scenario simulationtesting possible outcomes before making a real-world decision.Scenario-based testingAn evaluation method that checks how a system behaves across realistic, chained actions.SceneKitApple’s framework for creating and rendering 3D scenes and related assets.Scheduled JobAn automated task set to run at a specific time or interval without user interaction.Scheduled payload executionMalware set to run at set times or intervals without constant operator action.Scheduled tasksA Windows automation feature that can be abused to relaunch malware or keep it running.Scheduled-task abuseA technique where malware uses legitimate task features for execution, persistence, or privilege escalation.Schema EnforcementChecks that prevent records from entering a pipeline unless they match the expected structure.Schema FrictionThe operational strain that appears when similar data must be reformatted for multiple incompatible reporting structures.Schema objecta named database item such as a table, procedure, or stored code unit.SchematicA diagram showing how circuit components are electrically connected.Scheming AIA working term for a model that appears aligned while pursuing a different objective.School-based programA learning initiative delivered through schools, often lowering access barriers.Scientific calculatorA calculator built for advanced functions beyond basic arithmetic.Scientific validationthe process of checking whether a result is accurate and reliable.SCIFa Sensitive Compartmented Information Facility used to handle sensitive compartmented information.ScommesseWagers placed on an uncertain outcome, often subject to separate regulation.Sconto commercialea price reduction tied to the commercial terms of a sale.SCOPa French worker cooperative structure with shared ownership and governance.Scope boundaryThe line that defines what a test, tool, or system is allowed to interact with.Scope driftWhen an agent goes beyond its intended task or permissions and starts acting outside its boundaries.Scope EnforcementControls that keep testing inside approved targets, rules, and authorization limits.Scope indicatora measure such as file counts or storage size that hints at scale, not proof.Scope of authorityThe exact boundaries of what an examiner is permitted to collect and inspect.Scope of compromisethe verified extent of harm, including systems, data, and users affected.Scope of impactthe confirmed extent of any intrusion, disruption, or data exposure.Scope uncertaintyearly victim posts rarely prove the full impact of an incident.Scoring boxa device used to register hits and keep score in fencing.Scoring rigthe broader equipment setup that supports fencing scoring.ScoutSuiteAn open-source cloud auditing tool used to inspect configuration and produce a point-in-time review.Scrapingautomated collection of data from web pages or portals at scale.Scraping clusterA coordinated set of automated clients used to collect data at scale.Screen hijackingmalware behavior that interferes with what a user sees to mislead them.Screen overlayAn Android capability that lets one app draw above another app’s interface.Screen readersoftware that reads digital content aloud or in braille for blind and low-vision users.Screen recordingA captured video or image sequence of a computer display that can reveal sensitive interface content.Screen Recording permissionA macOS privacy control that must be approved before an app can capture the screen.Screen SharingmacOS remote desktop feature that lets another user view or control a Mac.Screen streaminga behavior where malware sends live or near-live views of a victim’s desktop to an operator.Screen-sharingA live session where another party can view what is displayed on a device, which can expose sensitive information.Screenshot CaptureA technique that repeatedly records what appears on a victim’s screen.Script executionThe ability to run attacker-controlled commands or code on a target system.Script executorA tool that runs scripts, often marketed in gaming cheat ecosystems.Script payloadExecutable code delivered as part of an attack, often used to start further compromise.Script SandboxA restricted execution environment designed to limit what untrusted code can do.Script Security PluginA Jenkins plugin that helps control and approve user-supplied scripts before they run.Script utilitya small program that performs a practical task beyond a one-off command.Script-based frameworkMalware architecture built around scripts or flexible code components that can be reused in different operations.Script-block loggingA PowerShell logging feature that records processed script content for review and forensics.SCTPStream Control Transmission Protocol, a Linux kernel transport used for reliable, message-oriented communication.SD cardA removable flash storage format used in cameras, embedded systems, and portable devices.Seafloor disposalThe placement of materials on the ocean bottom, often creating long-term monitoring challenges.Sealed complainta court filing kept partly out of public view.Sealed court documentsCourt records restricted from public access because they contain sensitive or legally protected information.Search CensorshipInterference with search results so that certain queries, sources, or topics are hidden or downgraded.Search head clusterA group of Splunk nodes that share configuration, apps, and scheduling state.Search head clusteringA Splunk deployment model where multiple nodes coordinate search, scheduling, and shared state.Search IndexingThe process by which search engines crawl and surface web content, including pages that may no longer be linked publicly.Search results pageA search engine page that can be used as an intermediate hop in a chain.Search trustThe tendency to trust results that appear near the top of a search engine page.Search-result poisoningManipulating search visibility so malicious pages rank for popular queries.Seat tierA licensing level that defines a user's access rights, usage allowance, and price.Seat-based planA subscription model that assigns access to individual users within an organization.SEC materialityThe threshold used to decide whether a public company must disclose a cyber incident.SECIA knowledge management model with four phases - Socialization, Externalization, Combination, and Internalization.Second brainA structured system for storing and retrieving organizational knowledge.Second brandA separate brand used by a parent company to target a different customer segment.Second factorThe extra proof required after a password, such as a code or hardware token.Second-Hand SoftwareA secondary market for previously licensed software, where resale questions often turn on licence form and jurisdiction.Second-order SQL injectionAn attack where malicious input is stored first and later reused unsafely in a database query.Secondary marketA resale space where goods are sold after the original retail purchase.Secondary Use of Health DataReusing clinical data for research, innovation, or policy rather than direct patient care.Secret API keyA private credential that authorizes access to a service and should be treated as sensitive if exposed.Secret attributionThe process of linking an exposed credential to its owner, service, and likely usage context.Secret ChatTelegram’s device-specific chat mode that uses end-to-end encryption.Secret detectionAutomated scanning for exposed credentials in code, pipelines, and related text.Secret exfiltrationThe covert theft of credentials, keys, or other sensitive data from a system.Secret exposureaccidental disclosure of sensitive credentials in a place they should not appear.Secret keyA confidential credential used to authenticate server-side API requests.Secret leakageThe unintended reproduction or exposure of sensitive information by a system.Secret scopeThe boundary that controls whether a secret is available at repository, organization, or environment level.Secret scopingLimiting which jobs, runners, or environments can access sensitive credentials.Secretless authenticationAn access model that avoids storing long-lived passwords or API keys inside workloads.Secrets detectionScanning for hardcoded credentials, API keys, tokens, or other sensitive data in code and configs.Secrets exposureAccidental disclosure of credentials, tokens, keys, or other sensitive data.Secrets hygieneThe practice of storing, rotating, and protecting passwords, tokens, and keys safely.Secrets rotationreplacing exposed credentials, keys, or tokens with new ones.Secrets-management systemA platform for storing and controlling access to sensitive credentials and tokens.Section 5The FTC Act authority used to challenge unfair or deceptive acts or practices in commerce.SectopRATA remote-access trojan associated with theft and remote control activity.Sector authoritiesPublic bodies that help validate sector scope and align NIS implementation with operational realities.Sector-Focused AdviserA specialist who concentrates on the risks, rules, and operating realities of one infrastructure sector.SecureA cookie flag that limits transmission to HTTPS connections.Secure aggregationA cryptographic method that lets a server combine updates without directly seeing each participant’s individual contribution.Secure channelThe trusted connection between a Windows device and its domain that helps validate domain sign-in.Secure Code ReviewA structured inspection of code to find vulnerabilities, logic flaws, and unsafe design choices before release.Secure codingWriting software with security considerations built into the development process.Secure configurationHardening systems through safer defaults and controlled settings.Secure content platformSoftware used to exchange sensitive files and data under policy controls.Secure DecommissioningThe controlled retirement of IT assets, including data wiping, verification and compliant disposal or reuse.Secure development frameworkA set of practices that helps teams build, test, and maintain software with fewer security flaws.Secure environmentA controlled setup that limits exposure, access, and side effects during testing or deployment.Secure infrastructureTechnical systems designed to limit unauthorized access, copying, and misuse of sensitive data.Secure Internal Communication (SIC)Check Point’s certificate-based trust mechanism for communication between management components.Secure LockA legacy SCADAPack access feature retained for backward compatibility with older deployments.Secure multi-party computationA protocol that lets multiple parties compute together while keeping each party’s inputs private.Secure NFCAn Android setting that can restrict card emulation when the screen is off or the device is locked, depending on device and version.Secure Payment ConfirmationA web payment standard that binds user consent to transaction details such as merchant and amount.Secure ProfileAn Adobe ColdFusion hardening mode that restricts risky defaults and reduces exposure.Secure Remote AccessControlled access methods that let approved users connect to sensitive systems from afar.Secure Remote Access (SRA)Controlled remote access to systems that typically includes authentication, logging, and session restrictions.Secure runtimeAn execution environment designed to restrict how software can behave while it is running.Secure SandboxA restricted execution space designed to limit what an application, model, or agent can do.Secure Service Edge (SSE)A cloud-delivered security framework that can bundle access and web controls.Secure software developmentBuilding security checks and controls into the development lifecycle instead of adding them only after release.Secure Software Development Lifecycle (SDLC)A development model that builds security controls into each stage of software creation.Secure transactiona transfer that is carefully verified before it is signed and broadcast.Secure update mechanismA method for delivering authenticated and integrity-checked software or firmware updates to devices.Secure VMAn isolated virtual machine used to contain workloads and reduce exposure to other systems.Secure Web Gateway (SWG)A control that inspects and filters web traffic before it reaches websites or downloads.Secure wipingRemoving stored data so it cannot be easily recovered from a device.SecurityThe protections and controls that reduce the risk of unauthorized access, disruption, or misuse.Security advisoryAn official notice describing a vulnerability, its impact, and the fix path.Security associationThe agreed security parameters that allow two systems to communicate over a protected tunnel.Security assuranceEvidence that a system has been designed and tested to meet defined safety and protection goals.Security awareness campaignA structured effort to improve user behavior through repeated education and practical guidance.Security awareness programA structured effort to teach users how to recognize threats and report suspicious activity.Security awareness trainingEducation designed to help people recognize threats and respond safely in realistic work situations.Security bottleneckA point where security review capacity slows delivery more than the development work itself.Security BulletinAn official notice describing a vulnerability and the recommended response.Security buyerA person or team responsible for evaluating and purchasing defensive technology.Security capacityThe people, time, and tools available to carry out cybersecurity work effectively.Security checksValidation steps used by apps or platforms to detect tampering, risky devices, or abnormal behavior.Security Command CenterGoogle Cloud’s native security management service for finding misconfigurations, vulnerabilities, and threats.Security configurationThe policy settings that determine how a system allows, blocks, logs, or routes activity.Security constraintsAccess rules that control which users or requests may reach a protected endpoint.Security ControlA safeguard used to reduce risk, such as access rules, approvals, logging, or monitoring.Security control testingChecking whether defenses like firewalls, EDR, or WAFs really detect or block relevant attack activity.Security criteriaThe requirements used to assess whether a service is safe, manageable, and fit for purpose.Security data lakea storage layer for large volumes of security telemetry kept separate from analysis tools.Security data pipelinethe chain that moves, prepares, and delivers security data for analysis.Security data platformA system that collects and organizes security telemetry for investigation and response.Security descriptorA Windows access-control structure that defines who can access a device object and with what rights.Security ecosystemA coordinated set of tools, processes, and people that work together.Security exposureInformation or conditions that can increase risk if they are discovered or abused by an attacker.Security fixa patch that corrects a vulnerability or reduces exposure to attack.Security FunctionalityBuilt-in protections such as authentication checks, permissions, and safety controls.Security gapA missing control, boundary, or review point that can weaken protection.Security GatewayA network enforcement device that applies firewall and protection rules to traffic.Security graphA relationship model that maps data, identities, and assets to help prioritize exposure and attack paths.Security hardeningThe practice of reducing unnecessary exposure by tightening settings, permissions, and services.Security Hardening UpdateA vendor release that bundles fixes and reduces exposure in affected software.Security Impact RatingCisco's severity label for vulnerabilities, used to help customers prioritize remediation.Security information serviceA channel used to publish security notices, advisories, or updates.Security IntelligenceThe definition layer used by Microsoft Defender Antivirus to recognize threats and update protection.Security Intelligence UpdatesFrequent Defender updates that refresh detection content for new and emerging threats.Security LakehouseA data architecture that combines storage and analytics for security telemetry.Security leadershipThe work of setting direction, priorities, and accountability for an organization's defenses.Security leadership pipelineThe range of career paths that can lead into senior security roles.Security LevelsIEC 62443 concept describing graduated protection targets for industrial systems and components.Security maintenance releaseA vendor-issued update that fixes vulnerabilities and extends the usable security life of a device.Security ManagementThe control layer used to configure and administer Check Point security environments.Security Management ServerA Check Point management system that handles policy and administrative control.Security mechanism bypassA flaw that lets an attacker evade a protection step that should block or limit abuse.Security MisconfigurationAn unsafe setup, such as overly permissive settings or exposed administrative features.Security NotificationA vendor bulletin that identifies affected products, versions, and remediation guidance.Security of supplyThe assurance that essential components and services can continue to be delivered reliably.Security operationsthe processes and tools used to monitor, investigate, and respond to threats.Security Patch Level (SPL)The Android build marker that shows which security fixes are installed on a device.Security perimeterThe boundary of systems and services that must be protected as part of a product’s security posture.Security pipelineThe flow of talent, training, and advancement into cyber roles.Security postureThe overall state of an organization’s defenses, readiness, and risk management.Security Poverty LineThe point below which an organization cannot be effectively secured with its available resources.Security prioritythe operational decision to treat protection work as a continuous requirement, not a side task.Security readinessThe ability of an organization to prevent, detect, and recover from cyber threats.Security resourcesPeople, tools, and processes dedicated to protecting a platform or service.Security restrictionA control intended to limit what users, processes, or systems can access.Security restriction bypassA bug that allows someone to evade an intended access control or safety check.Security roadmapA planned sequence for upgrades, standardization, and control alignment.Security RulesFirebase policies that control which users can read or write data.Security scriptA small program built to perform a focused security task.Security Service Edge (SSE)A cloud-delivered security model that combines multiple access and protection functions.Security servicesoutsourced or managed offerings that help organizations detect, prevent, or respond to threats.Security signalA data point or event that may indicate a meaningful change in exposure, behavior, or control health.Security softwareA broad category of tools designed to help protect devices, accounts, or data.Security sprawlThe growth of disconnected tools and controls that complicates visibility and policy enforcement.Security sweepA search for unauthorized devices or signs of tampering in sensitive areas.Security testingTechnical assessment used to find weaknesses and verify whether security controls work as intended.Security tokenA Windows data structure that represents a user’s identity and permissions during logon and session creation.Security Tool SprawlThe use of many separate security products that can create blind spots and slow coordinated response.Security tool tamperingattacker activity aimed at weakening alerts, logging, or endpoint defenses before the main payload runs.Security training pipelineThe path through which new practitioners build skills and move into the field.Security Update (SU)A targeted update intended to fix specific security issues without a broader feature rollout.Security updatespatches designed to fix vulnerabilities and reduce exposure to known threats.Security ZoneA network control that separates trusted and untrusted access paths for a service.Security-Control BypassA weakness that may let an attacker circumvent protections such as authentication, authorization, or filtering.Security-Feature BypassA weakness that lets attackers sidestep a protective control that should have blocked the action.Security-focused configuration managementThe practice of defining, monitoring, and enforcing secure system baselines.Security-intelligence updateFrequent Defender content updates that refresh detection logic.Seed funding extensionAdditional investment raised after an initial seed round.Seed-based discoveryA method that starts with known public assets and expands outward to related infrastructure.Segmentation driftThe gradual weakening of network boundaries as devices, routes, or exceptions are added over time.SegmentazioneNetwork separation that limits lateral movement and contains incidents within smaller zones.SeImpersonatePrivilegeA Windows user right that allows a process to impersonate another identity after authentication.Seizure bannerA notice placed on a seized domain to show that access has been redirected by authorities.Seizure imagingThe use of imaging tools to observe how seizure activity begins, spreads, and changes over time.Selection criteriaThe practical factors used to choose between payment options, such as cost, timing, and protections.Selective deliveryA technique where a site serves different content depending on who is visiting, often to evade analysis.Selective forgettingDeliberately reducing the influence of information a model no longer needs.Selective patchingA risk-based update approach that applies fixes only after testing and scheduling in an OT-safe window.Selective sharingReleasing sensitive material only to people who genuinely need it.Selective standardizationChoosing one platform only in the areas where its advantage is durable, while keeping flexibility elsewhere.Selective VisibilityA control method that limits who can find or see content without fully deleting it.Self-assembly kitA product made up of parts that the user must put together before use.Self-assessmentAn internal review used to document whether required controls are in place.Self-attentionA mechanism that lets a model weigh relationships between tokens in the same sequence.Self-compassionA therapeutic stance that encourages nonjudgmental care toward oneself.Self-consciousnessAwareness of oneself as a distinct self, not just the ability to refer to "I".Self-consumptionusing electricity where it is generated instead of sending all of it to the grid.Self-custodial walletA crypto wallet where the user holds the secret keys or recovery phrase directly.Self-DefenseAn anti-tamper mechanism that blocks unauthorized changes to security software files, processes, or settings.Self-deleting backdoorMalicious code designed to remove itself after execution, reducing the evidence left on the host.Self-diagnosisThe act of assessing a health condition without clinical confirmation.Self-disclosureThe act of revealing personal or sensitive information during an interaction.Self-extracting archive (SFX)An executable archive that unpacks its contents when run.Self-hosted collaborationA document-sharing setup operated by the business itself rather than a public SaaS provider.Self-hosted gatewayA privately managed service that brokers access to other systems or APIs within an organization.Self-hosted packageSoftware deployed by the customer on their own systems instead of run by a central provider.Self-hosted softwareA service an organization runs on its own infrastructure instead of relying on a managed provider.Self-managed installationA deployment that the customer operates and patches directly, rather than a vendor-hosted service.Self-managed serverA system operated by an organization rather than by a hosted service provider.Self-organizationThe tendency of a system to form order from interacting parts without external planning.Self-perceptionThe way a person understands and evaluates themselves.Self-propagating payloadContent designed to cause an agent to copy or pass it onward to another agent or session.Self-protectionSecurity features in endpoint software designed to resist tampering, disabling, or removal.Self-registrationAccount creation without manual approval, which can expand risk if privilege checks are weak.Self-Regulated LearningA learning process where students plan, monitor, and correct their own progress.Self-replicating malwareMalicious code designed to copy itself or spread to other systems, often with little or no human involvement.Self-Serve ReturnsA return workflow that lets customers request or manage returns through an online portal.Self-service password resetAn account recovery feature that can become an identity takeover target.SelfieA self-taken image that often functions as both expression and social signal.Selfie video verificationA remote check that uses a short video of a user as part of identity validation.Seller reputationSignals that help buyers judge whether a seller is trustworthy.Selling cutoverA migration method where new transactions begin in the new system before legacy records are fully retired.SeLoadDriverPrivilegeA Windows user right that allows a process to load or unload device drivers.Semantic cachingReusing earlier AI responses when a new request is similar enough to avoid repeating expensive inference.Semantic clusteringA method for grouping related samples by similarity in meaning or structure.Semantic consistencyKeeping the meaning of data stable across systems, users, and workflows.Semantic diversityThe degree to which outputs differ in meaning, not just in phrasing.Semantic groundingThe process of making sure different systems attach the same meaning to the same terms or signals.Semantic HTMLcode that gives page elements clear meaning, helping assistive tools understand structure.Semantic security violationA flaw where software acts incorrectly in a meaningful way even if it keeps running.Semantic tagsMetadata associated with some visits that may add topical context.SemgrepA static analysis tool that uses pattern matching to scan source code.Semi-automated processA workflow that combines software assistance with human judgment.Semiconductor fabrication plantA specialized factory where chips are manufactured on silicon wafers.Semiconductor filmA thin layer used in electronic devices to shape electrical behavior.Semiconductor manufacturing equipmentThe specialized tools used to build chips, including lithography, deposition, and etching systems.Sender impersonationA tactic that makes a message look like it came from a real person, brand, or domain.Sender reputationA trust score built from the sending domain, address history, and prior abuse signals.Sender spoofingForging an email address so a message appears to come from someone else.Sender-constrainingA control that binds a token to proof of possession, making theft less useful.sendmsg()A socket system call used to submit data or messages for processing.Seniority bandA job level category such as entry-level, midlevel, or senior.SENSEA relational theory that treats the self as emerging through interaction, recognition, and experience over time.Sensitive data concentrationThe risk created when many high-value records are stored in one environment.Sensitive InformationData that could be exposed if an attacker reaches the right process, account, or file path.Sensitive Information ExposureA condition where protected data can be read by someone who should not have access to it.Sensitive intakeA contact flow that may collect highly personal information from a user.Sensitive recordsinformation that can create privacy, legal, or fraud risk if exposed.Sensitive-Information DisclosureThe accidental or unauthorized exposure of secrets, private data, or internal content.Sensitivity labelsmetadata applied to content to signal handling rules, restrictions, or protections.Sensor accessPermission to use hardware such as a camera or microphone.Sensor dataMeasurements collected by instruments for later analysis and interpretation.Sensor driftGradual change in sensor output over time that can reduce measurement accuracy.Sensor IntegrityConfidence that sensor data is accurate, untampered, and suitable for operational decisions.Sensor moduleA packaged sensor with supporting circuitry for quick integration.Sensor nodea device that gathers data from its surroundings and processes or forwards it.Sensor reliabilityThe ability of a sensor to keep working consistently over time.Sensor signalData collected by a device that measures a physical phenomenon.Sensor validationThe process of checking whether a sensor produces reliable data under expected conditions.Sensor-rich deviceA device with multiple inputs such as camera, microphone, and location-aware functions that can increase exposure.Sentencingthe court-imposed punishment given after a criminal conviction or plea.SEOSearch Engine Optimization, the practice of improving a page’s discoverability in traditional search engines.SEO AbuseManipulating search visibility to drive traffic toward malicious or deceptive pages.SEO fraudAbuse of search systems to manipulate rankings or visibility for financial gain.SEO-optimized contentText crafted to rank higher in search engines, which attackers can exploit to attract victims.SEPAThe European payment framework for standardizing euro transfers across participating countries.SEPA payroll XMLpayment files used to process salary transfers and carry sensitive employee banking data.Separation methoda technique for isolating one material from another mixed material.Separation of Duties (SoD)A control that prevents one person or account from holding risky combinations of privileges.SequencerA component that triggers notes or events in a set order over time.Sequestered testbedAn isolated environment designed to keep experiments from affecting live systems.SerendipityThe role of unexpected discovery in science, often arising from observation, chance, and human interpretation.Serial interfaceA method of sending data one bit at a time over a connection.Serial numberA device identifier used for tracking, support, or inventory.Serial spoofingPresenting a copied identifier so a system mistakes one device for another.SerialisationThe ability to build and operate systems in repeatable batches.Serialized object communicationA method of packaging data for transfer between systems, which can become risky when trust checks are weak.Series AAn early venture funding round used to scale a company after initial product validation.Series A fundingan early venture round used to grow product development and market adoption.Series BA later venture funding round used to scale a company after early product and market traction.Series C fundingA later-stage venture round used to scale product, sales, or operations.Series FA late-stage venture funding round for a mature private company.Series GA later-stage funding round for a private company, usually used to support further growth.Serious cyber incidentA significant security event that requires escalation because of its potential impact.Serious incidentA harmful event tied to AI behavior that can involve injury, major disruption, rights impacts, or other regulated damage.ServeThe shot that starts play in badminton.Server cullingA design approach that withholds unneeded game state from clients.Server EDRdetection and response tools designed for server workloads.Server hardeningTightening configuration to reduce attack opportunities.Server logsautomated website records that can help investigators review access patterns and anomalies.Server migrationmoving workloads, data, and services from one environment to another.Server modeA deployment style where pgAdmin runs as a web-accessed service rather than only as a local desktop application.Server Process PrivilegesThe operating system permissions held by the service account running an application.Server stateData managed on the remote side of an application, often fetched, cached, and refreshed by libraries like TanStack Query.Server-assisted decryption chainA staging method where payload recovery depends on interaction with a remote server.Server-controlled decryptionA method where malware needs a live server exchange before its payload can be unpacked.Server-side compromiseattacker control over a web server or its execution path.Server-side ControlDecision-making that happens on the provider’s systems rather than on the user’s device.Server-side correlationMatching browser-side signals with backend data to connect actions across different requests or contexts.Server-side credentialsSecrets stored or processed on the server, such as passwords or API keys.Server-side decryption chainA payload-recovery process that depends on remote infrastructure rather than only local files.Server-side enforcementSecurity checks applied on the backend, not just in the interface.Server-side file writeA flaw where attacker-influenced input can cause a server to write files in an unintended location.Server-side fingerprintingA web technique that profiles visitors on the server before deciding what content to show.Server-side persistenceTechniques used to stay on a compromised server after the initial intrusion.Server-side polymorphismA technique where the server generates changing page content on demand, making each visit look different.Server-side pushA repository write performed by the server itself, often after it processes an API action or automation step.Server-side renderingThe process of turning input data into a displayable form on the server before it reaches the browser.Server-side rendering (SSR)Rendering web content on the server before sending it to the browser.Server-side request abuseA flaw that lets a server be induced to make unintended requests.Server-Side Request ForgeryAn issue where a server is tricked into making requests to unintended internal or external locations.Server-side scriptCode executed on the backend of an application rather than in the user’s browser.Server-side theftunauthorized copying of information from internal systems rather than from individual devices.ServerlessA cloud model where functions run on demand without traditional server management by the user.Serverless functionCloud-hosted code that runs on demand without managing a server directly.Serverless functionsShort-lived code execution units run on demand without managing servers directly.Service accessA maintenance path used to inspect, reset, or repair a device.Service binaryan executable registered to run as a Windows service.Service changesunusual modifications that can help reveal unauthorized activity.Service coordinationThe process of linking appointments, monitoring, and specialist input across different settings.Service credentialsTokens, keys, or other secrets that let software prove identity and access resources.Service degradationA partial loss of normal performance or reliability, even when a platform is still partly usable.Service dependency chainlinked business services that can amplify disruption if one provider is hit.Service designThe structure of a digital service, including language, navigation, accessibility, and completion flow.Service health monitoringChecks used to track availability and detect degradation.Service infrastructureThe web, hosting, and domain systems that cybercriminals use to deliver and maintain an operation.Service integritythe reliable and consistent functioning of a digital public service.Service outageA disruption that makes a digital system unavailable or unreliable for users.Service planeThe operational layer that keeps a product available and functioning.Service PortalServiceNow’s public or semi-public web portal layer for self-service content and workflows.Service portal search endpointa built-in search function that may reveal data if exposed or misused.Service Provider (SP)The application that relies on an external identity system to log users in.Service provider recordslogs or account data held by a platform or cloud service that may support an investigation.Service qualitythe level of performance users experience, including reliability and consistency.Service recoverythe process of restoring functions after disruption.Service reliabilityThe ability of a platform or workflow to perform consistently over time.Service sunsetthe planned retirement of an online product, feature, or platform.Service tokenA credential used by automated systems or agents to authenticate without exposing a permanent secret.Service-account credentialsMachine identities used by tools and applications to authenticate with cloud services.Service-hosted contentData or media stored and delivered by a provider rather than saved as a local file by the user.Service-security configurationThe access-control rules that determine which users can reach a service or operation, including anonymous access.ServiceAccountThe workload identity a Pod or controller uses when talking to the Kubernetes API.Services economya market where criminal capabilities are packaged for repeated use.ServiceWorkerA browser script that can intercept network requests and manage background tasks for a web app within origin and scope limits.Servicing channelThe update path that determines when and how Office patches are delivered.Servicing lifecycleThe period during which a software version receives security fixes, updates, and support.Servicing pathThe official update route a device follows to receive supported builds and fixes.Servicing regressionAn unintended behavior introduced by an update or maintenance change.Servicing ringA staged deployment group that receives updates before the rest of the fleet.Servicing timelineThe fixed support period a Windows release receives before it reaches retirement.Servicing updateA monthly or scheduled patch package that can include security fixes and operational changes.Session archiveA saved capture of network activity, often used for debugging and troubleshooting.Session boundaryThe security line that should keep one authenticated user’s context separate from another’s.Session compromiseUnauthorized control of an active user session, which can let an attacker inherit the session’s trust.Session continuitythe process that keeps a user authenticated while moving between devices or apps.Session correlationLinking requests across time or identifiers to spot distributed automation or coordinated misuse.Session enrichmentadding extra context to a login or connection to improve risk decisions.Session expirythe moment when a token or link stops working.Session ForgeryThe creation or manipulation of a session token to impersonate a legitimate user or administrator.Session hijackTaking over a valid login session to act as another user without knowing their password.Session lengthThe amount of time a user stays active in an app or website.Session logA recorded trace of actions taken during a tool or terminal interaction.Session loggingRecording remote-user activity so administrators can review actions and investigate misuse.Session ManagerAn AWS Systems Manager feature used for controlled remote administration and port forwarding.Session privilegeThe level of control granted during a remote connection, which can determine what an operator can do.Session reconstructionThe process of rebuilding a communication session from captured packets or traffic copies.Session RecordingCapture of user activity or video during an authenticated session for auditing or review.Session resumptionA TLS feature that reuses prior session state to avoid a full handshake.Session SecretA value that keeps a logged-in session active after authentication succeeds.Session takeoverUnauthorized control of an active, authenticated session such as a logged-in banking app.Session trustConfidence that a live interaction belongs to the intended user and device.Session visibilityThe ability to monitor what an authenticated browser session is doing in real time.Session-bound dataInformation available only while a user remains logged in, often stored or rendered in the browser context.Session-level controlSettings that can limit, pause, or end an active live session.Session-level defenseSecurity controls that evaluate activity while a login session is underway.Session-level impactHarm limited to an authenticated user’s active session, rather than full control of the server.Session-level policyRules that evaluate each access request separately, often using identity and device checks.SetpointA configured value that tells an industrial system how to behave, such as when to start a pump.Settlement layerThe base blockchain that finalizes transactions and anchors trust for higher layers.Settlement recordsinternal finance files that may expose payment status and timing.Setup wizardThe initial configuration flow used to create or reconfigure a server’s administrative settings.Severe incidentA security event that can negatively affect availability, authenticity, integrity, or confidentiality and may require mandatory reporting.SeverityA rating used to prioritize how urgently a software flaw should be addressed.Severity modelA framework used to rank how dangerous a vulnerability is and how urgently it should be fixed.Severity rubricA scoring or grading guide used to judge how serious an incident is and how fast it should be handled.Sezione Addestramentoa training section responsible for instruction and preparation.SFERA modelA five-part performance framework built around Sincronia, punti di Forza, Energia, Ritmo, and Attivazione.SGI workstationA high-end Silicon Graphics computer used for graphics, visualization, and technical production work.SGP.32A standard for remote provisioning of connectivity in IoT devices.SGSIthe information security management system used to organize policies, controls, and oversight.SHA PinningLocking a dependency to a specific commit hash so the exact reviewed code is used.Shader compilationThe process of preparing graphics code for a GPU to execute.Shadow agentsAI agents operating in company systems without clear oversight or approval.Shadow AI stackAI tools or workflows that spread outside formal oversight, often before central governance can review them.Shadow APIAn API endpoint that exists in production but is not properly documented or tracked.Shadow automationUnofficial or poorly governed automation that operates without sufficient oversight or documentation.Shadow dataData stored or copied outside normal visibility or governance.Shadow EconomyHidden activity that escapes official measurement and governance.Shadow softwareUntracked internal tools or scripts created outside normal IT oversight.Shadow-based outputA visual method that forms images by blocking or shaping light.Shadowed policya rule that is hidden or overridden by another rule, making enforcement harder to reason about.ShallA legal term that signals an obligation rather than a preference.Shall vs willA distinction in legal language where “shall” usually marks duty and “will” often marks intent or future action.SHAPA post-hoc explanation method that estimates how each feature influenced a prediction.Shape sensingEstimating an object's form by detecting deformation or movement across a surface.Share-price responseThe way a stock price moves after new information signals higher or lower expected profits.Shareable linkA URL that grants access to content without requiring a direct invite.Shared accountA login used by more than one person, often making accountability harder.Shared Backend InfrastructureReused server-side services that can widen the impact of one authorization mistake across multiple surfaces.Shared codebaseone underlying code set reused across multiple products or extensions.Shared content governanceControls and review processes for monitoring how files, folders, or sites are shared.Shared conversation linkA public link to a saved chat or thread that can be reused in a lure.Shared correctionsReusable fixes or guidance captured so the same AI error is not relearned repeatedly.Shared credentialsvalid logins that can be reused if they are stolen or reused.Shared datainformation used by multiple teams or organizations to support common decisions.Shared keyThe same secret credential reused across multiple devices, increasing blast radius if exposed.Shared Key authorizationA storage access method that relies on account keys instead of identity-based access.Shared meaningA common understanding that helps audiences interpret information in similar ways.Shared memoryAny external location that multiple agents can read and write, creating an unplanned coordination channel.Shared pathA folder structure used to describe where files are located on a system.Shared platformA common digital service or codebase used by more than one organization.Shared portalA web access point used by multiple users, often a high-value target.Shared project contextTeam data such as issues, docs, and linked records that AI tools may use to perform work.Shared public gooda resource or protection that benefits many people at once and is hard to limit to one payer.Shared rulesCommon planning and operating standards that help multiple actors coordinate safely.Shared ServicesCentralized functions that provide common capabilities to many business units from one service layer.Shared storageA file area that apps may use to exchange content on Android devices.Shared systemscentralized tools used across many locations or business units.Shared Tab GroupsA browser feature that lets tab groups be shared and synchronized across users or devices.Shared workspace creditsPooled usage units that can be added when included limits are reached.Shared workstationA device used by more than one person, where visibility and access controls matter more.SharedWorkerA worker that can be used by multiple same-origin tabs or frames to share a single background process.SharePoint FarmA grouped SharePoint deployment where multiple servers and services work together as one environment.SharePoint flawsvulnerabilities in SharePoint, as reported here; the exact flaw is not specified.SharePoint librariesdocument repositories that may contain sensitive internal files and permissions.SharePoint on-premisesA locally hosted Microsoft collaboration platform that can be affected by chained web and authentication flaws.SharePoint ServerMicrosoft’s on-premises collaboration platform for documents, sites, and internal workflows.SharePoint vulnerabilitiesweaknesses in a collaboration platform that may be targeted for unauthorized access.SharePoint vulnerabilitya flaw in Microsoft SharePoint that can be abused to gain unauthorized access or run malicious actions.SharePoint worker processThe server-side process that handles SharePoint requests and can be a high-value target if code execution occurs.Sharing mobilityTransport services that let users access vehicles on demand instead of owning them.SharpA Node.js image-processing module that can handle formats including SVG.Sheara difference in speed or direction between neighboring layers of a material.Sheet metalThin metal stock that can be cut, bent, and formed into parts.Sheet of papera flat paper base that can be transformed into different shapes.Shell accessCommand-line control over a system, often the point where deeper compromise begins.Shell and core structureA design where one material surrounds another to form a layered part.Shell companya business entity with limited visible operations, often used to obscure ownership or transactions.Shell extensionA component that adds functions to the Windows shell.Shell historyStored record of past command-line activity that can expose operator actions.Shell startup filesConfiguration files that run when a terminal session begins and can change the user’s command-line environment.Shellcode injectiona technique that places code into another process for execution.Shellcode loaderA malware component that prepares and launches additional payload code, often as an early-stage execution bridge.ShieldFontA project name for a defense concept aimed at reducing the usefulness of AI scraping.ShieldingMaterial or structure used to reduce exposure by blocking or absorbing radiation.Shift-leftA security approach that moves checks earlier in development, before software is deployed.Shift-left testingMoving tests earlier in development so problems are found before release.Shipping operationsThe systems and steps used to prepare and move goods to recipients.Shipping workflowThe operational path that moves goods from fulfillment to delivery.Shop floorThe production area where manufacturing work is carried out.Short squeezea rapid price rise that forces bearish traders to cover positions.Short-form videoBrief video content designed for fast consumption and easy sharing on social platforms.Short-lived tokenA temporary credential that expires quickly and can reduce the value of theft.Shortcuta faster input method that replaces a longer on-screen or keyboard sequence.Shortcut abuseA technique that uses Windows shortcut behavior to hide commands or redirect users into a malicious execution chain.Shortcut masqueradingA trick that makes one file type appear to be another, often to induce a click.Shorted capacitorA failed capacitor that behaves like a near-direct connection and can disrupt circuit operation.ShutterGapA reported visibility gap where short-lived AWS resource exposure may occur between security scans.ShuttlecockThe lightweight object struck in badminton.SIC (Secure Internal Communication)A trust mechanism used to establish secure communication between management and gateways.SID chipa classic sound chip used in vintage home computers.Side effectAn external action caused by a system, such as submitting a form, sending data, or changing a service state.Side-channelAn unintended path that leaks data through timing, power, sound, or emissions.SidechainA blockchain linked to another chain so assets can be represented and moved under a separate rule set.Sideloaded APKan Android app package installed outside an official app store.SideScanningAn agentless inspection approach used to assess cloud workloads and storage from outside the workload itself.SIEM/SOARSecurity platforms that collect alerts and help automate response workflows.SIEM/SOCSecurity platforms and operations teams that collect, correlate, and respond to security events.SIG(0)A DNS request authentication mechanism based on cryptographic signatures.Sigma rulesHuman-readable detection rules that can be translated across security tools.Sign-in flowthe sequence of steps a user follows to authenticate with a service.Signal authenticityThe ability to verify that a network signal is genuinely from a trusted source.Signal flowThe route a signal takes through a device or circuit.Signal fusionCombining multiple data inputs, such as identity and contact details, into one risk decision.Signal interpretationThe act of assigning meaning to data or biological activity, which can be incomplete if context is missing.Signal layerA source of evidence that contributes to a security decision without determining it alone.Signal leakageUnwanted information escaping from a device through physical emissions.Signal noiseunwanted variation that can make a sensor reading less clear or less reliable.Signal PINA user-set secret involved in Signal recovery and registration-related protections, separate from chat backup decryption.Signal processingmathematical manipulation of audio or other data streams to produce an effect or output.Signal reconstructionThe process of turning captured emissions or traces back into readable or audible information.Signal separationTechniques that keep similar inputs distinguishable in crowded conditions.Signal triggerA limited input that causes a predefined action when a condition is met.Signature CandidateA proposed digital signature scheme under evaluation before possible standardization.Signature validationThe process of checking that a digital signature is authentic and that the protected data has not been altered.Signature-based antivirusOlder detection method that identifies threats by matching known patterns.Signed applicationSoftware carrying a valid digital signature, which can still be misused if its behavior is malicious.Signed authentication materialData signed by an authenticator to prove possession of the private key during login.Signed bootA startup process that checks cryptographic signatures before allowing firmware to run.Signed cookieA cookie protected with a cryptographic signature to detect tampering.Signed driverA driver carrying a valid digital signature, which can increase trust and make abuse harder to spot.Signed firmwareFirmware that includes a cryptographic signature so the device can verify it was issued by the trusted vendor.Signed installerAn executable marked with a digital signature that helps confirm origin, but not intent.Signed manifestA cryptographically protected record that carries provenance-related metadata about content.Signed softwareAn application with a digital signature used to help verify publisher identity.Signed tokenA cryptographically signed authentication artifact that confirms a successful sign-in session.Signed updateAn update package that includes cryptographic proof it came from an authorized vendor or system.Signed vendor softwareCode marked with a digital signature that helps Windows trust its publisher.Signed vulnerable driverA trusted driver with known flaws that attackers can abuse to weaken defenses.Signerthe device or system that authorizes transactions with private keys.Signing authorityThe cryptographic permission needed to authorize a blockchain transfer.Signing certificateThe cryptographic identity Android uses to determine whether an app update is genuine.Signing oracleA system that produces signatures for inputs it receives, which can become a target for abuse.Signing subkeyA secondary key used for specific signing tasks and often rotated independently.Signing-keyA secret used to validate pre-signed URLs and prevent forged access requests.SigV4Amazon-style request signing used to authenticate some S3-compatible requests.SIISLA digital platform used in labor-related procedures and vacancy publication workflows.Silent audioAudio processing that can occur in a browser without producing sound the user hears.Silent failureA failure mode that does not produce an obvious error, warning, or alert for the user.Silent installationsoftware that lands on a system with little or no visible user interaction.Silent participationactivity such as scrolling, viewing, or pausing that happens without public posting.Silent patchA security fix released with limited public advisory detail.Silicon photonicsA technology that uses silicon-based components to guide or convert data with light rather than only electrical signals.Silicon Valleythe U.S. tech hub often used as a symbol for innovation and power.Silicone molda flexible negative form used to reproduce an object’s shape.SILTRA recordsSocial Security filing data that can expose workforce and contribution information.SIM activationThe process that starts service on a mobile card and makes the line usable.SIM cardThe removable chip that identifies a subscriber on a mobile network.SIM provisioningthe step that activates a subscription and links it to a SIM or eSIM.SIM Toolkit (SAT)A standardized feature set that lets a SIM interact with the device it is inserted into.Sim-to-real transferthe challenge of making a system work reliably outside simulation.Sim-to-real validationThe process of checking a model in simulation before deploying it to real equipment.Siman componentsInternal Arena-related executables involved in processing and model handling.Similarity testingMethods used to check whether generated output is too close to a protected work.Simulated environmentA controlled workspace that mimics real software tasks for training or testing.Simulated Penetration TestingSecurity testing performed in a replica or model of an environment to reduce the risk of disrupting live systems.Simulated phishingA controlled training exercise that sends fake phishing messages to measure and improve user response.Simulation and evaluationPre-deployment testing used to check whether an agent reaches the right outcome and follows policy.Simulation environmenta controlled space for testing systems, processes, or defenses without affecting live operations.Simulation fidelityhow closely a model matches the system it is trying to represent.Simulation modea configuration that changes how a system models execution or behavior.Simulation pipelineThe chain of tools and data used to test behavior in a virtual environment before real-world deployment.Simulation testingThe use of virtual scenarios to expose edge cases and unsafe behavior before real-world deployment.Simultaneous playbackThe number of streams that can run at the same time on one account.Simultaneous streamsthe number of devices allowed to watch at the same time.Simultaneous viewsa product feature that lets more than one device stream at the same time under one subscription.Sinclair SpectrumAn 8-bit home computer widely associated with the early personal-computing era.Single Packet Authorization (SPA)A method that keeps services hidden until a valid request is received.Single point of knowledgea situation where critical understanding is concentrated in too few people.Single Reporting PlatformENISA’s centralized channel for mandatory CRA reporting.Single Reporting Platform (SRP)The EU reporting channel used for certain CRA vulnerability and incident notifications.Single Source of TruthAn authoritative data source used to keep reporting and decisions consistent.Single-cloud stackAn environment built mainly around one cloud provider, where native security services can be simpler to operate.Single-instance appSoftware designed to run one active copy and pass later launches to the existing process.SingularityA speculative idea that AI may reach a point where technological change accelerates beyond familiar human control.SinkholeA defensive server that diverts malicious traffic away from its intended destination.SIP ALGSession Initiation Protocol Application Layer Gateway, a feature that helps handle VoIP traffic in some network setups.SIRIA European standard for exchanging real-time public transport information.Sistema di Interscambio (SdI)The official channel that receives and routes electronic invoices in the Italian PA workflow.Site blockerA tool that restricts access to selected websites during chosen time periods.Site Reliability Engineering (SRE)A production-operations discipline that uses reliability targets, monitoring, and automation to keep services stable.Site service accountA limited service account used by an application or appliance.Site takeoverA situation where an attacker can control site settings, content, or administrator-level functions.SIVESpain’s coastal surveillance network used to detect, track, and support response to maritime activity.SkeletonA simplified string form used to compare visually similar domain names.SkiaChrome’s 2D graphics library for rendering text, shapes, images, and other page content.Skill decayThe gradual weakening of a capability when it is not exercised regularly.Skill mappingThe process of translating a person’s abilities into structured categories that software can compare.Skill registryA repository that lists extensions or add-ons an AI agent can install or use.Skill taxonomyA structured way to classify tasks and capabilities so they can be shared and reused consistently.SkillsA platform layer that packages knowledge or business functions for AI-assisted retrieval and use.Skills debtThe buildup of capability gaps when employee knowledge does not keep pace with platform change.Skills frameworkA model that maps cybersecurity work to defined roles and competencies.Skills-first approachA workforce model that prioritizes verified competencies over fixed role categories.Skin tradingThe exchange of in-game cosmetic items through external markets or platforms.Skip-auth routeA configured path that is exempted from authentication handling.SKUStock keeping unit, a billing line item used to separate cloud services or usage categories.Sleeper buildA project that keeps an ordinary outward appearance while hiding upgraded internal functionality.Slipstreamthe trailing airflow behind a moving body.SLOA service level objective, or a target for how well a service should perform from the user’s point of view.Sloshingthe back-and-forth movement of a liquid inside a container.SLSA provenanceA build attestation that records where, when, and how software was produced.SLTTState, local, tribal, and territorial governments, a common public-sector cybersecurity category in the United States.Small businessa company with limited staff, budget, or operational capacity.Small displaya compact screen with limited space for text, icons, and layout elements.Small language modelA compact model tuned for narrower tasks, often with tighter accuracy and cost targets.Smart App ControlA Windows 11 feature that helps block untrusted or suspicious applications using Microsoft app intelligence and code integrity capabilities.Smart buildingnetworked systems that manage facilities, access, or automation.Smart Contract AuditA security review of blockchain code to look for logic errors, vulnerabilities, and unsafe design patterns.Smart controllerAn advanced OT device that can combine processing, communications, and control functions.Smart deviceAn electronic device that automates functions or connects to other systems.Smart displayA screen-based device that can combine visual output with networked services and, in some designs, voice or app integration.Smart homeA living space that uses connected devices for lighting, climate, security, or other automation.Smart inverterA connected device that converts solar output into grid-compatible power and may also coordinate system behavior.Smart LinkA URL handling feature that can turn links into richer content or previews inside work tools.Smart MeterA digital meter that records consumption and can support communication with utility systems.Smart meter 2Ga next-generation electricity meter that supports digital communication with the supplier.SmartConsoleCheck Point’s graphical administration tool for managing security policy and objects.SmartLoaderA Windows malware loader that can upload screenshots and system information and download or install other malware.Smartphone softwareThe operating environment and app controls that shape what a phone can do.Smartphonesgeneral-purpose mobile devices that can influence how other devices are set up and used.SmartPOSa payment terminal that combines card acceptance with software-driven business functions.SMB authentication coercionA tactic that forces a system to initiate SMB authentication, sometimes creating credential-abuse risk.SMB named pipesWindows communication endpoints carried over SMB that can be used for local or remote inter-process messaging.SMB/SMB2Windows file-sharing protocols that also carry DFS referral traffic across the network.SMBssmall and midsize businesses, organizations that often need strong security with limited staff.Smcstandard cubic meter, a unit used to measure natural gas consumption.SMC-DA Linux shared-memory transport used for specialized intra-node communication.SMEsSmall and medium-sized enterprises, which often have fewer compliance and training resources than larger firms.SMFThe Session Management Function in 5G, responsible for session control and coordination with the UPF.SMPTE ST 2110A standard for carrying separate audio, video, and metadata streams over IP in real-time production.SMS blasterRadio equipment used to broadcast unwanted text messages to nearby phones.SMS first-factor sign-inA legacy sign-in method that uses a text-message code as the primary authentication step.SMS phishingFraud delivered by text message to prompt a harmful action.SMS-based recoveryPassword reset or verification codes sent by text message, which can be vulnerable if a number is taken over.SMTP credentialslogin details for email delivery systems that can be abused if exposed.SMTP smugglingA framing flaw where servers disagree about message boundaries, which can let traffic be interpreted in an unintended way.snap-confineA privileged helper used to launch snap applications inside a restricted environment.Snap-fitA design that uses flexible tabs or clips to lock parts together.snap7.dllA dual-use library that can automate access to Siemens S7 PLCs for legitimate testing or malicious scripting.snapdThe service that manages snap packages, including installation, updates, and execution behavior.Snapdragon 850Qualcomm processor used in some Windows PCs.Snapshot fuzzingA fuzzing method that restores a target to a saved state after each test case, making fragile services easier to test.Snapshot pageA saved view of content at a specific moment, often used for shared chats.Snapshot replicationCopying point-in-time data snapshots to another system or location for restore or disaster recovery.Snippet eligibilityWhether a page can be shown as a short excerpt in search surfaces.Snippet-level scanningA method that examines code fragments directly rather than relying only on declared dependencies.SNMP NotificationsAlert messages in the SNMP framework that can become a risk if handled unsafely.SNMP trapA monitoring message used to report events or alerts from a system to an administrator.SnortA widely used open-source network intrusion detection engine.Snowflake environmentA cloud data platform context referenced in the unverified claim.SNOWLIGHTA staging component that helps pass execution to the next payload in the chain.SOAPACTIONAn HTTP header used in SOAP-based requests; in this case it is identified in the CVE record as part of the attack path.SOC analystA defender who reviews alerts, validates threats, and escalates incidents when needed.SOC as a serviceA subscription model for outsourced security operations center functions.SOC workflowsThe steps analysts follow to triage alerts, investigate activity, and respond to incidents.SOC-as-a-ServiceA managed service model that delivers SOC capabilities from an external provider.Social engineering lureA deceptive prompt or page designed to make a user take an action that benefits the attacker.Social license to operateInformal public acceptance of an infrastructure project based on whether local burdens seem justified by broader benefits.Social media profilingthe process of building a target picture from public online activity and personal details.Social objectsomething that gains meaning through shared human relationships and context.Social presenceThe feeling that another mind is present in an interaction, even when it is machine-generated.Social security contributionsMandatory payroll-linked payments used to finance public social insurance systems.Social Security number (SSN)A U.S. government identifier used in employment, taxes, and benefits, often targeted for identity misuse.Social Security numberspersonal identifiers that can be abused in identity theft and fraud.Social valueThe broader public or organizational benefit a system creates, beyond simple efficiency gains.Social videoshort video content designed for fast sharing and quick audience engagement.Social withdrawala reduced pattern of participation in school, work, or social life.Società in-housePublicly controlled entities used by municipalities to manage shared services and infrastructure.Socio-technical riskRisk shaped by both technology and the people, institutions, and incentives around it.Socket HijackingSteering connection setup so a request uses an unintended or malicious socket path.Socket.IOA real-time communication library sometimes used by malware for command-and-control traffic.SOCMINTSocial Media Intelligence, the use of social platforms and their signals for analysis, monitoring, or investigation.Sodiuma highly reactive chemical element that must be handled with care in many environments.Soft bindingA recovery method that helps reconnect provenance data when embedded metadata has been removed.Soft skillA human capability such as communication or empathy that supports effective teamwork and decision-making.Soft skillsCommunication, collaboration, judgment, and other human-centered abilities used in leadership.Soft-brickA state where a device is still functional at the hardware level but is difficult to use normally.SoftPOSSoftware that lets a smartphone or tablet accept contactless payments without a separate card reader.Software bill of materialsAn inventory of software components used in a product or service, useful for patch verification.Software cash registerA checkout solution delivered through software rather than only dedicated hardware.Software compatibilitythe degree to which a program can operate correctly in a given environment.Software discoveryThe enumeration of installed applications or tools to support attacker decision-making.Software distribution control planethe administrative layer used to publish, update, or manage software at scale.Software engineering channelThe pathway through which AI may affect firm performance by changing the productivity of software engineers.Software environmentThe collection of code, tools, settings, and systems used to develop or run software.Software literacythe practical ability to understand and work with software beyond basic clicks or commands.Software maintenanceOngoing work to fix bugs, improve stability, and keep code usable over time.Software marketplacean online store where users download apps or extensions.Software supply chain riskRisk that a third-party component, update, or integration has been tampered with or compromised.Software supply-chain attackAn intrusion method that targets trusted software distribution or build processes instead of attacking endpoints directly.Software support windowthe time period during which a product receives fixes and security updates.Software-Defined Perimeter (SDP)an access model that reveals applications only after authentication.Software-defined radioA radio system that uses software for tasks normally handled by dedicated hardware.Sogliaa usage limit that determines when a pricing condition applies.Soil remediationthe process of reducing or removing contaminants from soil.Solar chargingconverting sunlight into electrical energy for later use.Solar eclipseAn event where the Moon passes between Earth and the Sun, partially or fully blocking sunlight.Solar photovoltaicsTechnology that converts sunlight directly into electricity.Solder pasteA mixture of solder particles and flux used before heating and reflow.Solder stencilA thin template that controls where solder paste is deposited on PCB pads.Solderingjoining metal parts with melted filler metal to form an electrical and mechanical connection.Solely automated decision-makingA decision made based only on automated processing, without meaningful human involvement.SolenoidAn electromechanical device that moves when energized by electric current.SolidWorksCAD software used to create and manage 3D engineering designs.Sonic boomthe sharp sound made when movement exceeds the speed of sound.Sound barrierthe point at which an object moves as fast as pressure waves in air.Source code historyretained commit records that can preserve deleted secrets.Source code inspectionReviewing code to identify flaws, risky patterns, or security weaknesses.Source code leakTheft or publication of application code that can expose logic, secrets, and internal architecture.Source code managementTools and processes used to store, version, review, and control access to code.Source code scanningAutomated analysis of program source files to identify security weaknesses before software is shipped.Source code thefttheft of application code that may reveal logic, secrets, or infrastructure details.Source confidentialityThe duty to protect the identities and communications of people who share information privately.Source disciplineThe habit of separating confirmed information from speculation.Source Distribution (sdist)A Python packaging format that can execute build or install-time code in some cases, especially when source builds are allowed.Source evaluationchecking where information comes from and how reliable it is.Source mapA debugging file that maps minified code back to original code and can reveal sensitive implementation details.Source mapsDevelopment files that map minified JavaScript back to original code, which can expose internal logic if publicly accessible.Source of truththe authoritative record used to keep reported facts consistent.Source rankingThe process a search system uses to decide which sources appear first or most prominently.Source validationThe process of checking whether a person, claim, or channel is trustworthy and authentic.Source VerificationChecking whether information is accurate, current, and supported by reliable evidence.Source visibilityThe degree to which original publishers remain discoverable and recognizable in digital interfaces.Source-address critical optionAn SSH restriction that limits authentication to approved client IP addresses or CIDR ranges.Source-address validationNetwork filtering that helps block packets forged to appear as if they came from somewhere else.Source-code vendorA seller who distributes malware code that others can copy or modify.Source-grounded AIAn AI system that answers using user-provided materials and often ties claims back to those inputs.SourcetreeA desktop Git client used to manage repository workflows on local machines.South Workinga flexible work model that lets professionals work from Southern Italy while staying connected to digital employment.Sovereign cybersecuritySecurity products and services positioned around regional control, trust, and reduced dependency on foreign suppliers.Sovereign industrial capacityThe ability to retain strategic control over critical technologies and supply chains.Sovereign instanceA service deployment designed to operate within a defined jurisdiction.SovereigntyThe ability of a state to retain control over critical capabilities, decisions, and dependencies.SP0256A classic speech-synthesis chip associated with allophone-based voice generation.SPASingle-page application; a web app that updates content without full page reloads.Space controlActions designed to contest and maintain freedom of operation in space.Space cybersecurity policyRules and guidance aimed at protecting satellites, ground systems, and related services from cyber risk.Space domain awarenessThe ability to detect, track, characterize, and attribute activity in space.Space raceThe period of intense competition to reach the Moon.Space stationa structure designed for people to live and work in orbit.SpacesKibana’s logical separation for grouping content and limiting what different users can see.SpambotAutomated software that sends messages at scale without manual intervention.Spanning Tree Protocol (STP)A layer 2 protocol that helps prevent switching loops by managing redundant paths.Spare parts inventoryExtra components kept available so repairs can happen faster.Sparse attentionAn approach that limits which tokens can interact broadly, reducing compute.Spatial lookupA database query that filters records using geographic relationships or coordinates.Spatial omicsMethods that measure molecules in tissue while preserving where they appear in the sample.Spazi adattivilearning environments that can change to fit user needs.SPDSerial Presence Detect, memory-module metadata used by systems to identify and configure RAM.SPDXAn open standard for representing software and related metadata such as AI assets, datasets, provenance, licensing, and vulnerabilities.SpearfphishingA targeted form of phishing tailored to a specific audience or workflow to increase the chance of interaction.Special buildA vendor-provided cumulative software build that bundles security fixes and other corrections.Special categories of datahighly sensitive data that need extra protection under GDPR.Special education recordssensitive files that may contain protected educational and health-adjacent information.Specialized agentAn AI workflow designed for a narrow task rather than broad, open-ended decision-making.Specialized assistantA tool built for a narrow task area, usually with tighter rules and more predictable output.Specification gamingFinding loopholes in a task definition and optimizing the loophole rather than the goal.SpecificityThe degree to which a biological agent acts on one target rather than many.SpectreA class of CPU attacks that exploit speculative execution to infer protected data through side channels.Spectre-v2A speculative execution attack class that manipulates indirect-branch prediction.Spectrum analyzerA visualization that shows the shape of an audio signal across frequencies.Spectrum compliancemeeting the operating rules that govern how radio devices can legally transmit.Spectrum licenseLegal authorization to use specific radio frequencies for mobile communications.Spectrum monitoringThe process of watching radio-frequency activity for interference, anomalies, or threats that may affect service reliability.Speech recognitionSoftware that turns spoken audio into text or commands.Speech synthesiserHardware or software that converts text or symbols into spoken output.Speech-to-textSoftware that converts spoken audio into written text for search and analysis.Spend capA preset limit that stops or flags usage once a budget threshold is reached.Spend limitAn administrative cap used to control how much a workspace can bill during a period.Spend telemetryMetadata about how money is spent on software or cloud services, used to detect usage patterns.Spesa correnteRegular operating expenditure used to run services day to day, including support and upkeep.SPF and DMARCEmail authentication controls that help verify sender identity and reduce spoofing.SPIA serial bus used to move data between a controller and peripheral devices such as flash memory.SpiderMonkeyMozilla’s JavaScript and WebAssembly engine used by Firefox.Spin FV-1a digital signal processor associated with audio effects and guitar pedal hardware.SPIREA system used to issue and manage SPIFFE identities.SPKI pinningA defense-in-depth technique that ties a client to a known public key for a server.Split ViewA side-by-side tab layout that lets two web pages stay visible in one browser window.SplunkA platform used to search, monitor, and analyze machine-generated data.Splunk Cloud PlatformThe hosted version of Splunk used for search, analytics, and administration in a cloud service model.SPNService Principal Name, the identifier Kerberos uses to map a service to an account.Spogliatoichanging rooms, a setting where people usually expect a strong degree of privacy.Sponsored resultA paid search listing that can appear above ordinary results and be abused for deception.Sponsored search resultsPaid search placements that can be abused to give deceptive pages visibility and credibility.Spontaneous collapsea family of theories proposing that quantum states can collapse without measurement.SpoofableCapable of being falsified so that data or signals appear genuine when they are not.Spoofed domainA deceptive web or email domain made to resemble a legitimate organization.Spoofed WebsiteA fake site built to resemble a legitimate one closely enough to mislead users.Sportello telematicoan online submission window or portal used for filing formal requests.Sports automationThe use of machines or software to support training or play.Spot demanddirect buying of an asset rather than exposure through derivatives.Spot ETFan exchange-traded fund that holds the underlying asset directly.Spotlight feedSnapchat’s public short-form video surface for broader content discovery.Spreadsheet exposureA file-sharing or publishing mistake in which tabular data becomes publicly reachable or visible beyond the intended audience.Spring Boot fat-jarA packaged Java application that includes its dependencies inside one executable archive.Spring ToolsDevelopment tooling that supports building and working with Spring-based Java applications.SPVSpecial Purpose Vehicle, a separate entity used to isolate assets, finance projects, or share risk.SQL connectionA link between an application and a database server used to read or write data.SQL datastructured database content that can include sensitive records.SQL Injection (SQLi)A flaw where unsafely handled input can alter a database query.SQL InterfaceMongoDB's newer SQL-oriented connectivity option for BI workflows.SQL Server backupa backup copy of SQL Server data that may contain operational information if improperly accessed.SQL Server backupsSaved database copies that may contain live data, depending on retention and encryption controls.SQL Server Database EngineThe core service that processes database queries and runs under a specific service identity.SQL Server sysadminA high-privilege database role with broad administrative control.SQL ViewA GeoServer feature that publishes database query results as map layers.SQL ViewsGeoServer features that can generate custom SQL queries for data access, making request handling security-critical.SquidOpen-source software used as a caching proxy for web traffic.SR 26-2Federal Reserve, OCC, and FDIC model risk management guidance updated in 2026, emphasizing tailored oversight of models, including AI and analytics.SSDSolid-state storage that uses flash memory instead of spinning disks.SSESecure Service Edge combines security controls for users, devices, and cloud access in a service model.SSH BastionA controlled jump host used to reach private systems through a narrower access path.SSH brute forcingAutomated guessing of SSH passwords until a login succeeds or attempts are blocked.SSH daemonA background service that provides remote shell access and administrative command handling over SSH.SSH exposureThe condition where Secure Shell management is reachable from untrusted or public networks.SSH handshakeThe early exchange where client and server negotiate keys, algorithms, and session setup.SSH materialAuthentication data such as passphrases or keys used to access remote systems securely.SSH private keyA sensitive authentication file used to prove identity to remote systems over SSH.SSH probingAutomated attempts to identify or guess access on SSH services exposed to the network.SSH rekeyingA process that refreshes encryption keys during an SSH session.SSH tunnelAn encrypted path that carries network traffic inside an SSH session.SSIDThe network name broadcast by a Wi-Fi access point so nearby devices can identify it.SSL_accept()The server-side OpenSSL entry point that begins and processes a TLS handshake.ssl_prereadA stream feature that reads TLS ClientHello data before full connection handling.SSL/TLS certificatea digital certificate used to secure encrypted connections between a user and a website.SSM AgentThe AWS Systems Manager component installed on managed nodes to process Systems Manager operations.SSM documentAn AWS Systems Manager document that defines automation, configuration, or operational commands.SSN exposuredisclosure of Social Security numbers, a high-risk identity event.SSNsSocial Security Numbers, highly sensitive identity data often cited in extortion claims.StabilityThe ability to remain controlled under changing conditions.Stability anchora factor that helps people stay oriented when external conditions become uncertain.Stability issuea problem that affects reliability, crashes, or normal operation.Stable kernel branchesMaintained Linux release lines that receive backported fixes for production systems.Stable milestoneA Chrome release marker used to track scheduled updates, not a severity rating.Stable-channel updateThe public browser release track that delivers security fixes to most users.StackA last-in, first-out structure used to store intermediate values during computation.Stack effectairflow created by temperature-driven density differences, usually pushing warm air upward.Stack OverflowA crash condition caused by excessive recursion or call depth exhausting stack memory.Stackable credentialA certification or course that can be combined with others to build job-relevant skills over time.Staff dataEmployee personal or work-related information that can be sensitive if exposed.Staged datafiles prepared before possible publication or sale.Staged deploymentA rollout method that applies updates to small pilot groups before broader release.Staged filesData gathered or prepared during an extortion workflow.Staged leakpartial publication used to intensify coercion before a full release.Staged loadingA multi-step process where one component unpacks or retrieves the next payload before final execution.Staged releasetimed publication of material in steps rather than all at once.StakeholderA person or group affected by, or able to affect, a company’s activities.Stakeholder alignmentShared agreement among the people who fund, build, use, and govern a project.Stakeholder ManagementThe practice of understanding and aligning the needs, interests, and influence of people involved in a project.Stakinglocking cryptocurrency to support network operations and earn rewards.Stale cache valuescached data that no longer matches the current state of the system.Standalone microphoneA microphone that operates as its own device rather than as a simple accessory.Standardan agreed technical specification used across different systems.Standard Contractual ClausesPre-approved contractual terms used to legitimize transfers of personal data outside the EU.Standard editionthe baseline version sold at the regular entry price.Standard workA lean method for defining repeatable tasks that can be improved over time.Standardization processThe formal review path used to evaluate and select algorithms for wider adoption.Standardsagreed technical or governance rules that help systems interoperate, comply, or gain wider acceptance.Standards bodyAn organization that develops shared rules or technical baselines for interoperability, safety, or compliance.Standards candidatea proposed algorithm being evaluated before formal adoption.Standards EcosystemThe network of vendors, owners, integrators, and bodies that shape security practices around a standard.Standby modeA low-power state where a device appears inactive but may still process data.Standing credentialsLong-lived or already-available access credentials that an agent can use without fresh authorization for each action.Standing local-admin rightspersistent administrator-level access on a device.StarlinkSpaceX's satellite internet network for civilian and commercial connectivity.StarshieldA SpaceX satellite communications service aimed at national-security and government use.STARTTLSA mail protocol extension that upgrades an email connection to TLS for encrypted delivery in transit.Startup entrya setting that makes software run when Windows boots.Startup executionPrograms configured to launch automatically when a user logs in.Startup memory loaderThe component that loads saved instructions or memory when a session begins.State ChangeAny update that alters a system of record, such as modifying account details or submitting a claim.State CIOA state government technology leader responsible for digital strategy, operations, and cyber coordination.State confusionA failure where data is accepted in the wrong request or conversation context.State consistencythe condition where an app and its background settings remain aligned after a transfer.State driftA mismatch between intended configuration and what is actually running.State Environmental Quality Review Act (SEQR)New York’s environmental review process for state agency actions and certain projects.State integrityThe reliability of stored data so it cannot be altered or counted incorrectly.State lineageThe chain showing how one system state leads to the next across actions or workflows.State managementThe process of tracking machine conditions so each action happens in the right order.State tableA live record of active flows that helps a NAT device match returning packets to the right session.State transitionA change from one device mode to another, such as sleep, wake, open, or close.State-changing requestAn action sent to a system that alters settings, starts or stops processes, or changes data.State-directed operationa cyber mission carried out under government authority or supervision.State-linked cyber actorA hacker or group believed to align with a government’s strategic goals.State-trackingA system that records changing values such as damage, fuel, or progress.Stateful firewallA firewall that tracks connection state so it can make decisions in context.Stateful settinga preference that persists across sessions, reboots, or updates.Stateless architectureA design where each request carries the context needed to be handled independently.Statement of reasonsa written explanation for why a platform took an enforcement action.Static Application Security Testinganalyzing application code for security issues before software is released.Static benchmarkA fixed evaluation set that does not change over time, which can lose value as models improve.Static binaryA self-contained executable that runs without separate installation dependencies.Static credentialsFixed login details that do not change dynamically and can become a persistent access risk.Static detectionSecurity scanning based on file signatures, hashes, or fixed indicators rather than live behavior.Static HTMLA web page file that can be displayed by a browser without server-side logic.Static inspectionAnalysis of a file without executing it, often used for signature matching.Static IPa fixed public address that can simplify remote access and service publishing.Static libraryAn archive of object files, typically packaged as a .a file and linked into software at build time.Static websiteA normal, persistent web page that can often be blocked, scanned, or taken down more easily.Station-keepingSmall corrective maneuvers that preserve a spacecraft’s intended orbit or position.Statistical thinkingusing numbers and probability to judge evidence and patterns.Status CommunicationTimely, accurate updates that explain service impact, recovery progress, and known unknowns during an outage.Status cuesvisible or behavioral signals that suggest rank, confidence, or social position.Status pageA public page used to communicate service health, incidents, and recovery progress.Status-reporting layerThe part of a system that turns internal health data into user-visible messages.Statutory DefinitionThe legal wording in a law that fixes how a term is officially understood.Stealer loga record of credentials or browser data collected by infostealer malware.Stealth listingA listing that does not clearly disclose the model provider’s identity.Stealth modea private operating phase before a company makes a public launch.Steam GuardSteam’s account protection layer that adds an extra verification step for logins and device authorization.Steam wandA tube or nozzle that releases steam for heating or frothing.Steel stencilA professionally made stencil material used for more precise paste application.Stencil duplicatorA machine that reproduces text or images by forcing ink through a prepared stencil onto paper.Stereo visionA technique that uses two viewpoints to estimate depth from image differences.Stewart platformA parallel mechanism used for precise multi-axis movement; the source describes it as a common 6-DOF actuated plate used with a fixed base.STLA common 3D mesh file format used to describe printable geometry.STM32F207An STM32 microcontroller model used as the core of the oscilloscope project.Stockpile leakageloss of equipment from stored reserves through theft, corruption, or poor controls.Stolen datainformation an actor claims to have taken from a target.Stolen-data storagespace used to hold exfiltrated files or credentials.Stop conditionThe rule or signal that tells a system to pause, hand off, or terminate an action.Stop ConditionsPredefined limits that tell testers or operators when to halt an evaluation or deployment.Stop ruleA predefined condition that pauses use of a system when uncertainty, risk, or malfunction becomes too high.Storage mediathe physical material or device used to save digital information.Storage mediumThe material or system used to hold information for later use.Storage offloadA migration method that shifts copying work to the storage layer instead of the host.Storage remanenceLeftover data that can remain on reused storage media after a previous workload is gone.Storage zeroingOverwriting reused storage blocks so previous contents cannot be recovered by the next tenant.Store listingThe app’s public description, screenshots, and metadata shown in the marketplace.Store-and-forwardA delivery method where a node holds a message until it can pass it along.Stored account creditPreloaded balance held inside an account and usable for purchases or redemptions.Stored Cross-Site ScriptingA bug where malicious script is saved by a system and later delivered to other users, often through an admin interface.Stored injectionAn attack pattern where malicious input is saved first and executed later by another process.Stored mailEmail content kept on a server or appliance rather than only on a user device.Stored SQL injectionA variant where malicious input is saved first and triggered later in a different part of the application.Stored-program computerA machine designed to keep instructions in memory rather than hardwiring them.Storefronta digital sales or download portal used to distribute software or content.Storefront attack surfaceThe public-facing parts of an e-commerce site that attackers can reach remotely.Storefront impersonationA fake page or listing designed to resemble an official seller or download source.Storefront metadataThe product fields attached to a listing, such as platform, region, and price.Story missiona designed objective that advances the main narrative.StoryboardA scene-by-scene visual plan that maps how a story or video will unfold.STRBrazil's real-time gross settlement system for irrevocable interbank transfers.STRASpace Threat Response Architecture, an EU framework for coordinating responses to space-related threats.Strategic centera site that concentrates skills, decision-making, or high-value industrial activity.Strategic dependencyReliance on external suppliers or infrastructure that can create security and resilience risk.Streaming fraudManipulation of play counts or listening behavior to distort rankings or payments.Streaming rightsthe legal permission to distribute live or on-demand video over the internet.Streaming stickA compact media device that plugs into a television to run apps and stream content.Stress scenarioa severe but plausible condition used to test whether systems and finances can withstand shocks.Strike predictionThe challenge of forecasting when and where a lightning event will occur.String lightsFlexible strands of bulbs or LEDs often used for casual decorative lighting.Stripped BinaryA binary file with symbols and debug data removed, making analysis harder.Strong authenticationA layered identity check that uses more than one factor or control.Strong magnetic fieldsPowerful magnetic forces that can affect nearby material and systems.strongSwanAn open-source IPsec and IKE software suite used to build VPN connections.Structural auditA review of a model’s internal behavior, features, or causal pathways rather than only its outputs.Structural pressureOngoing organizational or market forces that shape a role over time.Structured cablingan organized wiring system used to keep network infrastructure orderly and maintainable.Structured contentInformation organized into fields that software can process more reliably.Structured dialoguea formal exchange intended to clarify issues and narrow disputes early.Structured experimentationa controlled way to test new tools or workflows with guardrails before wider rollout.Structured exportA built-in way for a device to send readings in a machine-readable form.Structured interviewa consistent interview format that uses the same job-relevant questions for each candidate.Structured loggingLogging in a predictable machine-readable format, often used for search, monitoring, and alerting.Structured modela welfare setup built around clear rules, repeatable processes, and defined services.Structured OutputMachine-readable results formatted in a predictable way, such as typed fields or labeled values.Student modelThe smaller model that is trained to copy useful behavior from a larger teacher model.Studio continuityThe degree to which a project keeps the same team, process, or creative direction.Study guideA learning resource designed to prepare readers for an exam.STUN protocolA standard used to discover NAT mappings and support real-time network connections.Sub-applicationA reusable app or workflow component that can be chained into a larger AI-driven process.Sub-millisecond power rampA very fast change in electrical load measured in less than one thousandth of a second.Sub-tier supplierA supplier that supports your direct vendor rather than serving you directly.SubassemblyA smaller functional unit inside a larger device, such as a board, button set, or housing.Subcontracting chainThe layered set of downstream providers supporting a primary ICT service.SubdomainA domain name under a larger parent domain that can be created in large numbers.Subdomain takeoverAn attack in which someone claims a dangling subdomain and controls what it serves.Subgroup evaluationTesting model behavior separately across demographic or contextual groups.SubjectThe speaking self, understood here as more than a biological person.Subject Alternative Name (SAN)A certificate field that lists the hostnames or IP addresses the certificate covers.Subject fidelityHow well a model preserves the identity or defining features of the original subject.SubkeyA secondary key linked to a main GPG identity, often used for a specific task such as signing releases.Submarine cablesUndersea fiber-optic links that carry data between countries and continents.Submarine interconnectorAn undersea cable system that links electricity networks across borders or regions.Submersible droneA robot designed to operate in water or other submerged conditions.Submission workflowthe process used to send billing or administrative records into another system.Subscriber countThe number of people following a channel, often used as a rough audience metric.SubscriptionA recurring payment model for access to a service over time.Subscription dependencyA workflow that relies on access to a paid service or plan feature.Subscription layerrecurring paid services tied to a product or platform, creating extra account risk.Subscription plana pricing model that grants access for a monthly or yearly period.Subscription renewalThe date a paid plan extends, which can trigger policy changes or new limits.Subscription validationA check that confirms an active paid plan before access is granted.Subsea data centerA computing facility deployed underwater, often to use the surrounding environment as part of its cooling and siting design.Subsidized accessReduced-cost or supported access to a tool, service, or program for selected users.SubsidyPublic financial support designed to reduce costs or support a target group.Substantial modificationA significant change to a product that may affect compliance analysis.SubstantiationEvidence used to support a product claim, especially in advertising and procurement review.Substantive complianceMeeting a rule in practice, not just in policy documents.SubstationA grid facility where switching, protection, and control equipment help move and regulate electric power.SubstitutionA situation where the system replaces human input instead of merely assisting it.Subtractive securitya design approach that reduces risk by removing unnecessary access and pathways.Success criteriaPredefined thresholds that determine whether a rollout is healthy enough to continue.Suction gripperA mechanism that uses vacuum to hold or manipulate objects.sudoersThe configuration file that defines sudo authorization rules.SuitabilityThe requirement that financial advice matches a client’s goals, risk appetite, and circumstances.SunspotA dark region on the Sun’s surface linked to concentrated magnetic activity.Super adminA highly privileged account that can change core settings and access broad Workspace administration functions.Super peerA more central node in a peer-to-peer malware network that helps relay information across the overlay.Super_adminA high-privilege role that can alter other administrator accounts and system settings.Super-appA mobile app that combines several services, such as chat, payments, and social features, in one platform.Superannuationa retirement savings system that depends on secure identity, payments, and account administration.SupercomputingHigh-performance computing used for data-heavy workloads such as advanced AI training and simulation.Supercomputing stackThe combined hardware, software, and operational layers that keep a supercomputer service running.Superconducting transistora transistor concept that uses superconducting materials to move signals with very low electrical resistance.SuperconductivityA state in which a material carries electric current with zero resistance below a critical temperature.Superseding indictmentAn updated criminal charging document that can add counts, defendants, or new allegations to an existing case.Superset SQL LabA built-in interface for writing and running SQL queries inside Apache Superset.SupersonicFaster than the speed of sound in a given medium, usually air.SuperuserA high-privilege account with broad administrative control over a device or system.Superuser accountA highly privileged account that can change system settings and manage other users.SupervisionThe oversight function used to monitor banks and financial institutions for safety and compliance.SupervisorThe Home Assistant management layer that can control apps and system-level operations on Home Assistant OS.Supervisor tokenA high-privilege bearer credential used for internal Home Assistant control-plane access.SUPERVISOR_TOKENThe documented credential used by apps and Home Assistant to authenticate to Supervisor APIs.Supervisory Control PlatformSoftware that monitors and controls connected industrial devices and processes.Supervisory controllerA system that monitors and manages operational equipment such as refrigeration or HVAC assets.Supervisory reporta formal notice sent to an oversight authority about a regulated event.Supervisory SystemA platform that monitors and manages field devices, often collecting status data and sending configuration changes.Supplier assuranceOversight meant to reduce risk from external vendors, integrators, and service providers.Supplier DependencyA relationship in which an internal service relies on an external provider, platform, or managed service to function.Supplier dossierInternal records used to assess vendors, ingredients, or manufacturing partners.Supplier financeA payment structure where a buyer's obligations are managed through a financier, often extending settlement timing.Supplier governanceThe discipline of overseeing vendors, setting expectations, and monitoring dependency risk across outsourced services.Supplier switchThe process of moving a customer from one energy provider to another.Supplier switchingThe process of moving an account from one energy provider to another.Supply capA maximum amount of an asset that the protocol is designed to allow.Supply chain assuranceSecurity checks and governance practices used to reduce risk from vendors, software, and hardware providers.Supply chain bottleneckA constraint that slows the flow of components from factories to buyers.Supply chain concentrationThe clustering of critical production steps in a small number of regions or suppliers.Supply chain databusiness information tied to suppliers, logistics, and production workflows.Supply chain exposurerisk that disruption at one business affects partners, customers, or logistics.Supply chain hygienePractices that keep software builds predictable, reviewable, and easier to trust.Supply Chain MalwareMalicious code delivered through trusted software distribution paths, such as packages, updates, or build dependencies.Supply Chain Risk Management (SCRM)A structured way to identify and reduce risks in suppliers, products, and services across their lifecycle.Supply chain transparencyVisibility into the vendors, components, and dependencies behind a service.Supply chain trustThe confidence that code, packages, and build metadata have not been altered between creation and deployment.Supply-chain abuseMisuse of manufacturing, packaging, or preinstallation paths to place unwanted software on a device.Supply-chain disruptioninterruption of external suppliers, services, or dependencies that support operations.Supply-chain governanceThe practice of mapping, assessing, and managing security risk introduced by vendors, components, and upstream providers.Supply-chain integritySecurity measures that help ensure software, updates, and dependencies have not been tampered with.Supply-chain malwareMalicious code that targets software distribution channels to reach downstream users.Supply-Chain Risk Management (SCRM)The practice of identifying and reducing risk introduced by hardware, software, services, and vendors.Supply-chain tamperingUnauthorized modification of a product before it reaches the end user.Supply-chain trustConfidence in the origin, update path, and control of a third-party component.Supply-chain-style attackAbuse of a trusted distribution point to reach downstream victims.Support bathA surrounding medium used during some printing or fabrication methods to help hold a shape in place.Support channelan attacker-controlled contact path used for pressure or negotiation.Support deadlineThe date after which normal vendor maintenance is no longer provided.Support materialtemporary structure used to hold difficult shapes during printing.Support sessionA live remote connection between a technician and a user for troubleshooting or assistance.Support structuresTemporary material that holds overhangs and delicate parts during printing.Support toolingCustomer service systems that may store tickets, notes, and account details.Support windowThe time span a vendor commits to servicing a device or platform.Supported releaseA software version that still receives security updates and vendor maintenance.Supporting infrastructureThe digital services that help criminal networks communicate, host content, or coordinate activity.Suppression listA list used to exclude people from further contact.Suppression logicRules that block messages to people who have objected or otherwise must not be contacted.Surface areaThe amount of exposed material available for heat exchange and evaporation.Surface chemistrythe chemical behavior that occurs where a material meets its environment.Surface finishthe texture and visual quality of a part’s outer layer.Surface texturethe fine structure of a material that affects grip and motion.Surface transportationTransportation infrastructure such as rail, transit, and related ground-based systems that can carry operational cyber risk.Surface-mount componentsElectronic parts mounted directly onto the surface of a PCB.SuricataAn open-source IDS/IPS engine built for high-speed packet inspection.Surrogate modelA stand-in system trained to approximate the behavior of a target model.Surrogate therapistA tool used as a stand-in for professional mental-health care.SurveillanceThe collection of information about people, devices, or activity for observation or analysis.Surveillance authoritiesRegulators that assess whether compliance methods are adequate under the AI Act.Surveillance cameraa device that records scenes or activity for monitoring and review.Surveillance dataInformation collected to observe movement, behavior, or activity.Surveillance integrationthe linking of monitoring tools with other security or building systems.Surveillance malwareMalicious code designed to quietly monitor a device and collect information rather than destroy files.Surveillance toolssystems used to collect, process, or manage monitoring data.SuspectA person under investigation, not a person proven guilty.Sustainable controlsSafeguards that can keep working over time instead of depending on ad hoc effort.SVGAn XML-based vector image format that can be misused as a malware container.SVG attachmentA scalable vector graphic file that can carry active content such as embedded scripts.SVG SmugglingA technique that hides active or deceptive content inside SVG files to make malicious delivery look harmless.SVIDA SPIFFE Verifiable Identity Document, usually a short-lived workload credential.Sviluppo dei territorilocal growth driven by knowledge, institutions, and the practical use of expertise.SwaggerThe older branding and tooling ecosystem associated with OpenAPI.Swap meetAn informal marketplace where attendees trade or give away items.SwappingMoving data between RAM and disk when physical memory is under pressure.swatchdogA Zimbra service involved in monitoring-related functions and part of the vulnerable path.Swift-based payloadMalware implemented in Apple’s Swift language, which can help it fit a macOS environment.Switchthe process of moving from one supplier contract to another.Switched capacitora circuit technique that uses timed switching to simulate analog behavior.SwitchingThe process of changing electrical paths or states.Switching costsExpenses and friction involved in moving from one provider to another.Switching logicThe rules a device uses to choose between multiple inputs.SY0-701The exam code named in the guide.Symlink raceA timing flaw where a symbolic link is changed between checks, causing a program to follow the wrong path.Sync timeouta failure to complete a synchronization attempt within the expected time.Sync timingThe timing pattern that tells a display when to start lines and frames.Syncable authenticatorA passkey-style credential that can move across devices, but whose security depends on recovery, sync, and policy controls.Synced passkeysPasskeys that can be shared across approved devices through a secure sync mechanism.Syndicatea coordinated criminal network with specialized roles.SyndicationA co-investment setup where multiple investors pool capital and share risk in the same funding round.SynkLoaderA malware family described as a loader that can stage additional tools.SyntaxThe set of rules that defines how a command must be written.SynthesisThe process of converting hardware description code into logic for a chip.SynthesiserAn electronic device or program that creates sound by generating audio signals.Synthetic AudioSound created or substantially altered by an AI system rather than recorded directly from a human performance.Synthetic content markingTechnical labeling that identifies AI-generated or manipulated text, audio, image, or video.Synthetic identity fraudThe use of mixed real and fake identity details to open accounts or contracts.Synthetic monitoringAutomated testing that checks services before real users are affected.Synthetic nucleic acid sequence screeningChecks used to flag or block risky DNA or RNA orders before synthesis.Synthetic polymersMan-made materials built from long chains of repeating chemical units.Synthetic sexualized imagesAI-made or AI-altered images that depict a person in explicit or sexualized form.Synthetic testimonialA review or endorsement created by AI or automation rather than a real person’s experience.Synthetic video callA fabricated video interaction that can imitate a real speaker or executive.SyslogA logging mechanism used to collect and forward system and application events.Syslog serverA service that collects and stores log messages from systems and applications.SYSTEM / LocalSystemA highly privileged Windows account used by core services and system components.SYSTEM accessThe highest local Windows privilege level, above standard administrative rights.System characterizationMeasuring how a system behaves under different conditions so its limits are better understood.System classificationthe act of assigning a system to a regulatory or oversight category.System componentA core Android software area that helps define how the platform handles trusted operations.System compromiseunauthorized access to or control of a device, account, or service.System failurea breakdown that prevents normal digital operations from continuing.SYSTEM hiveA Windows registry hive that can hold keys needed to decrypt protected directory data offline.System imageThe packaged operating system and preinstalled software that ships on a device; if it is altered, the compromise can survive ordinary app removal.System Information DiscoveryAttacker activity that gathers host details to guide follow-on actions.System integrityconfidence that a device and its software are operating as intended.System interdependencethe way separate services rely on one another to function as intended.System isolationSeparating affected machines or services to limit further spread of compromise.System language checkA malware behavior that inspects the host language and may stop or alter execution in some campaigns.System Management Mode (SMM)A highly privileged CPU mode used for low-level firmware tasks and isolated from normal operating-system control.System of actionA workflow layer that can trigger business operations instead of only displaying information.System outagea period when services or internal tools are unavailable.System partitiona protected storage area that holds core operating system files and privileged applications.System Prompt LeakageThe unintended exposure of hidden instructions that shape how an AI behaves.System reconnaissanceEarly-stage collection of host details used to tailor later attack steps.System resilienceThe ability of a service to keep operating and recover quickly after an incident or failure.System restarta forced reboot that interrupts normal use after a serious fault or crash.System Security PlanA document that describes how security controls are implemented and managed in a specific environment.System shutdowna containment response that can limit damage while reducing availability.System terminationA condition where software forces the operating system or a service to stop running.SYSTEM-level privilegesThe highest practical privilege level on Windows, giving a process broad control of the host.System-level securityA cybersecurity approach that covers the full deployment environment, not just the model or app itself.System-of-modelsAn architecture that combines multiple AI models instead of relying on one model for every task.System-of-SystemsA mission architecture where spacecraft, ground stations, communications, and support services function as one linked whole.System-on-chipA processor that combines multiple computing functions into one package.System.UserA special Mendix platform entity for user management with built-in access behavior.SYSTEM/LocalSystemA highly privileged Windows security context with broad local access to operating-system resources.systemd-journaldA Linux logging service that collects and stores system logs in journal files.Systemic effectsharms or consequences that arise from the behavior of an entire system.Systemic levela broad view that looks for patterns across many decisions rather than one isolated case.Systemic-risk GPAIGeneral-purpose AI that may create broader risks because of its scale, capability, or deployment context.Systems integrationThe process of making separate components work together as one functioning setup.Systems of National SignificanceA higher-criticality subset of infrastructure that can face enhanced security obligations.Systems of systemsA design made of multiple interacting systems whose combined behavior creates the overall mission capability.Systems resiliencethe ability of a design to keep functioning under stress or partial failure.SYSVOLDomain share used to distribute files and scripts across Windows domain controllers.Tab captureA browser capability that can record or stream the visible contents of an active tab.TabStripThe browser UI component that manages tabs and tab-related interactions inside the Chrome window.TACOpenAI's Trusted Access for Cyber program.TACACS+A centralized protocol for device administration that separates authentication, authorization, and accounting functions.Tagged VPN SessionsVPN sessions marked with identifiers that can be treated differently by security appliances or policy logic.Tagging artifactA metadata clue that may help infer activity patterns.Tags blockA special Unicode range, U+E0000 to U+E007F, that can represent ASCII-like strings and is often relevant in obfuscation analysis.Tail latencyThe slowest response times in a system, usually measured at high percentiles such as p95 or p99.Tail riskThe danger linked to rare but extreme outcomes in a distribution.Taint trackingtracing how untrusted input moves through an application toward sensitive operations.Takdown workflowThe process a platform uses to receive complaints, review content, and remove material quickly.Take-private transactionA deal that moves a publicly traded company into private ownership.Takedown pressureEfforts by providers, investigators, or platforms to remove abusive services.Takeover claiman allegation that one actor gained control of another actor’s online property.Takeover flawA vulnerability that may let an attacker gain unauthorized control of a device, account, or service.Takeover requestA prompt telling a human operator to resume control immediately.Talent densitya management idea focused on how much value each employee can produce, especially when paired with AI tools.Tamagotchi-style deviceA digital pet concept that depends on user care or interaction.Tamper alarmA sensor or alert system that signals unauthorized physical access to equipment.Tamper controlA security feature that detects or responds to unauthorized opening or handling of a device.Tamper evidencesigns or seals intended to reveal whether a device was opened or altered.Tamper-evidenceA property that makes unauthorized changes visible or detectable.Tamper-evident logginglogs designed to reveal unauthorized changes after the fact.Tamper-resistant meterA meter designed to make interference, bypass, or manipulation harder to carry out unnoticed.Tangible benefitsmeasurable security improvements that can be linked to a control or program.TanStack QueryA data-fetching library that helps applications manage server state with reusable hooks.TapjackingA trick that misleads users into tapping hidden or deceptive interface elements.Tar archiveA file format that bundles multiple files and metadata into a single container.TarballA packaged archive file, often ending in .tar or .tar.gz, used to distribute software.tarfileA Python standard-library module used to read and write tar archives.Target domainThe website address linked to the alleged victim.Target identificationThe stage of research that selects biological targets a potential drug may act on.Target resolutionThe process of mapping a label, name, or identifier to a specific host, account, domain, or service.Target selectionChoosing which users or organizations to attack based on perceived value or likelihood of success.Target stringthe domain or label named in the claim, not proof of compromise.Target surfacethe exposed system or website named in a threat claim.Targeted activityAdversary attention directed at a system or organization, which may include scanning, probing, or attempted access.Targeted attackAn intrusion attempt aimed at a specific person, device, or organization instead of random victims.Targeted phishingA message crafted for a specific victim or organization to increase the chance of compromise.Targeted surveillanceMalware activity focused on specific people or groups rather than broad, indiscriminate infection.Targeted threatsattacks aimed at a specific person or group rather than random victims.Targetingdirecting an intervention at a specific molecule or sequence.Targeting signalA data point used to select a device or audience for delivery of content or payloads.TARIIn Italy, the municipal tax linked to waste collection and disposal financing.Tariff calculationthe method used to turn consumption and pricing rules into a bill.Tariff documentationcommercial records that can reveal pricing and trade relationships.Tariff locka fixed-price period that limits price changes for a set time.Tariff structurethe full set of pricing rules, fees, and duration terms that determine what a customer pays.Tariffa a fascepricing changes by time band, often separating peak and off-peak use.Tariffa monorariaa single-rate electricity tariff with one pricing structure.Task AllocationThe division of work between humans and machines, which determines what AI automates, assists, or leaves unchanged.Task appSoftware used to organize reminders, to-dos, and daily planning.Task augmentationWhen technology helps a person work faster or better without fully replacing them.Task decompositionBreaking a job into smaller steps so teams can decide which parts may be automated and which should stay human-led.Task delegationAssigning a specific job or thinking step to a tool instead of a person.Task dependencyA relationship where one project task must happen before another can begin or finish.Task listA written list of items to do, often ordered by priority or deadline.Task mappingIdentifying how specific activities inside a job change when new technology is introduced.Task MiningCollection of desktop activity traces to understand how people perform tasks in practice.Task planningThe process of turning a goal into a sequence of executable steps, often used in robotics.Task recompositionThe reshaping of a job into new mixes of human and machine work.Task SchedulerThe Windows subsystem used to create, manage, and run scheduled jobs on local or remote systems.Task substitutionWhen technology replaces specific activities once performed by people.TaskflowA repeatable security workflow that breaks research into structured steps.TaskingThe assignment of missions or priorities to teams, units, or operators.Tax baseThe pool of economic activity or assets a government can tax.Tax incidenceThe economic burden of a tax, which may fall differently from who formally pays it.Tax instrumentA fiscal measure used to influence business behavior through deductions, credits, or relief.Tax ManagerA budgeting aid that helps estimate tax obligations and plan reserves.Tax wedgeThe gap between what an employer pays for labor and what a worker takes home after tax and contributions.TBOMTrusted Bill of Materials, a proposed evidence-bearing record that aims to show both composition and verification.TCCApple’s Transparency, Consent, and Control framework, which governs access to sensitive macOS resources.TCPA connection-oriented transport protocol that depends on stable session state for reliable communication.TCP 19009A documented Check Point management port used by SmartConsole and related administration traffic.TCP 2375The non-TLS port commonly associated with Docker remote API access.TCP 6379The default network port used by Redis for client connections.TCP port 102The network port commonly used for S7 communication and a key exposure point to monitor or restrict.TCP port 23The network port assigned to Telnet services and a common indicator for Telnet-targeted probing.TCP session hijackingTaking over an established TCP conversation by interfering with its state or packets.TCP/102A network port commonly associated with Siemens S7 communication paths in industrial settings.TCP/4307A network port associated with the TrueConf Server service path and relevant to exposure review.TD04The electronic invoicing code commonly used for a credit note.TDMText and data mining, the automated analysis of large volumes of digital content.Teacher agencyThe educator’s ability to guide, override, and interpret the learning process.Teacher competenciesthe skills educators need to use tools effectively in practice.Teacher modelThe larger model whose outputs are used to train a smaller model.Teaching process indicatorsmetrics that track what happens during instruction, not only final results.Team spiritShared commitment that helps groups work together under pressure.TeamFiltrationA cross-platform framework used for Microsoft 365 and Entra ID account enumeration, credential spraying, and related identity operations.Tech riskThe chance that technology-related weaknesses affect business operations or strategy.Tech sovereignty packagea European policy framework focused on strengthening control over technology capacity and strategic digital assets.Tech support scamFraud that uses fake warnings or support identities to coerce victims into calls, payments, or remote access.Tech-support impersonationA tactic where attackers pose as help desk staff or support agents to gain trust and pressure victims.Tech-support scamA fraud scheme that impersonates technical help to push victims into paying money, granting access, or revealing information.Technical capability noticeA UK legal tool that can require an operator to maintain or support certain access capabilities.Technical constrainta design limit that shapes how a system looks, behaves, or is delivered.Technical credibilityTrusted expertise built through hands-on work and demonstrated skill.Technical curiosityThe habit of asking how systems function and what happens when they change.Technical drawingsdesign files that can reveal intellectual property and operational details.Technical fileThe documentation package that records design, testing, risk controls, and related evidence for a regulated AI system.Technical fluencyEnough understanding of systems and controls to ask informed security questions.Technical folkloreRepeated stories about technology that persist without solid proof.Technical markingA machine- or system-level signal used to help identify AI-related content.Technical monitoran oversight mechanism used to check whether required rules are being followed.Technical skills gapthe shortage of people with the expertise needed to build, secure, and maintain complex systems.Technical surfacethe parts of a system that can be used, tested, or stressed by software.Technical-support scamFraud that tricks victims into contacting fake support agents or call centers.Technological dependenceReliance on external suppliers for critical hardware, software, or infrastructure components.Technological safeguardsSecurity and compliance controls built into digital systems and workflows.Technology stewardship and digital judgmentThe capacity to make durable decisions about platforms, architecture, and technical risk.TechshoringA policy idea focused on anchoring high-value technology activities within a country’s industrial ecosystem.Teen AccountsPlatform account settings designed to apply stricter defaults and limits for adolescent users.Telco cloudA telecom-oriented cloud architecture used to run network and service functions with software-defined controls.Telco sensingusing telecom infrastructure as a distributed system for detecting events in the physical world.TelecomA communications provider that carries voice, data, and messaging traffic.Telecom connectionA communications link used to move data or voice traffic between networks.Telecom datainformation held by phone and wireless providers, often connected to customer identity and service control.Telecom databasesdata stores connected to communications operations and often highly sensitive.Telecom dependencyA service relationship where an organization relies on a carrier or communications provider for connectivity.Telecom fraudScam activity that abuses voice or phone systems to deceive targets.Telecom intrusionunauthorized access to communications providers’ systems or data environments.Telecom metadataservice and account details tied to communications records.Telecom netblocksLarge IP address ranges assigned to telecommunications providers and their infrastructure.Telecom security baselineA common minimum set of controls used to compare and improve carrier defenses.Telecommunicationsthe networks and services that carry voice, data, and internet traffic.TelecomsCommunications networks and providers that carry voice, data, and other essential traffic.Telegram botA third-party automated account on Telegram that can handle messages and, if abused, collect sensitive data.Telegram bot channelA messaging path that can be abused to send tasks or receive results from compromised systems.Telegram command channelA messaging-based route that can be used to send instructions to malware.Telegram StarsTelegram’s in-app payment layer for digital goods and services.TelegraphAn early electrical messaging system that sends short signals over distance.Telehealth recordsDigital files tied to remote care workflows, sometimes containing sensitive health information.Telemarketingdirect marketing by phone, often governed by specific rules on contact and privacy.Telemarketing abuseunsolicited or deceptive phone-based sales activity that can cross legal or ethical boundaries.Telemarketing complianceThe set of controls used to make sales calls lawful.Telematic cash registerFiscal register that sends sales data electronically to tax systems.Telematic meetinga meeting conducted through digital communication tools.Telematic registerA certified fiscal device that records and transmits sales data electronically.Telemedicine platforma healthcare system that delivers services remotely through software and networks.Telemetry pathThe route security data takes from collection to alerting; if that path is altered, detection can go dark.Telemetry platformSoftware that gathers operational data for monitoring, investigation, and security analysis.TeleoperationRemote control of a machine by a human operator from a safer location.TeleoperatorA remote human who can interact with or assist a connected system.Teleradiologyremote review of imaging studies by clinicians.TelevisitA remote medical consultation, often by video or phone.Temp directoryA temporary file location often used for staging installers, scripts, and other transient files.TemperatureA generation setting that changes how random or consistent model output can be.Temperature ExcursionA period when stored goods move outside the safe temperature range and may need to be discarded.Temperature regulationControlling nozzle or bed heat so the filament stays within a usable printing range.Temperature-sensitive paperPaper coated to darken when heated by a print head.Temperature-sensitive planningPlanning that changes with heat or seasonal conditions.TemplateA reusable format that helps teams collect information in a consistent way.Template catalogA collection of prebuilt page designs that can be reused to impersonate different organizations.Template escapingReplacing dangerous characters so user input is rendered as text instead of executable code.Template HierarchyThe order WordPress uses to choose which theme file renders a page.Template injectiona flaw where crafted input changes how a template is processed.Template renderingThe process an application uses to turn stored or submitted data into an email or webpage.Template ResolutionThe process a web app uses to choose which template file to load for a page.Template runtimeThe part of an application that turns templates and data into web pages.Templating engineSoftware that turns template text and variables into a rendered page or output.Temporal Data ProblemA mismatch caused when events happen late, out of order, or not at all during disruption.Temporal resolutionThe ability of an imaging system to distinguish events that occur close together in time.Temporary ChatsSessions designed not to create new memories, useful for more sensitive drafting.Temporary circuita circuit-like state that exists only while a triggering condition remains active.Temporary clausea limited-term condition that may expire or be revised later.Temporary fixA short-term mitigation that reduces impact before a permanent repair is available.Temporary IAM credentialsShort-lived AWS credentials tied to an IAM role and used to access AWS APIs.Temporary mitigationA short-term control that reduces exposure before a permanent fix is applied.Temporary restraining orderA fast court order that can temporarily block access to assets or domains while a case proceeds.Temporary security credentialsShort-lived AWS credentials that expire automatically and reduce secret lifetime.Temporary-file handlingThe way software creates and manages short-lived files during setup or updates.Tenancy modelThe way resources are isolated or shared between customers in a hosted environment.Tenant recordsOperational data tied to leasing, billing, and property management.Tenant separationControls that keep one customer’s data, logs, and operations isolated from another’s.Tenant TelemetrySecurity and audit data generated by a cloud tenant, useful for spotting unusual activity.Tenant-Bound SupportRemote support that stays inside a managed organizational identity environment instead of relying on cross-tenant trust.TenderA competitive process for assigning public contracts or assets.Tender databid and sales information that can reveal commercial priorities.Terabit per second (Tbps)A bandwidth unit used to describe extremely large traffic volumes.Term lengthThe duration for which funds remain committed before maturity.Terminal agentAn AI tool that can interact with files, commands, and system output from a shell-like interface.Terminal commandA text instruction run in a command-line interface to perform actions on a system.Terminal emulatorSoftware that displays a text-based session on a modern computer.Terminal interfacea text-based interface controlled through commands.Terminal Operating System (TOS)Software that helps manage terminal activities such as cargo flow, yard operations, and intermodal coordination.Terminal systemsOperational platforms that coordinate cargo handling and port workflows.Terminal workflowCommands and tools used directly from a developer’s command-line environment.Terminal-side validationA local check performed by the payment reader before or during transaction processing.Termine finalethe point at which a procedure is clearly meant to end.Terminology updateA revision to the words used in a standard or guideline.Terms and conditionsThe rules that define how a financial product works in practice.Terms of Service (TOS)The usage rules that define what customers may and may not do with a service.TerraformInfrastructure-as-code software used to define and provision cloud resources with declarative configuration.Terraform moduleA reusable infrastructure-as-code component that helps define and provision cloud resources.Terraform providerA plugin that lets Terraform connect to external services and is commonly installed during infrastructure setup.Terraform stateA file that records infrastructure state and can contain sensitive cloud metadata or secrets.Terrain adaptationthe ability of a machine to adjust its motion to changing surface conditions.Territorial careA service model that brings healthcare closer to patients through local and community-based pathways.Territorial cooperationcollaboration between neighboring cities or regions to align planning and action.Territorial inequalityUneven access to services across different geographic areas.Territorythe country or region where a patent may have legal effect.Test environmentA non-production system used to validate code, configurations, or deployments.Test fixturea controlled setup that makes troubleshooting more repeatable.Test isolationSeparation between evaluation systems and production environments to prevent unintended impact.Test ringA small group of devices used to validate updates before broad rollout.Test servera non-production system used to validate software or settings before deployment.Test standA controlled setup used to evaluate a machine before broader use.Test-before-investA staged approach that lets organizations evaluate a technology on a limited basis before full deployment.Test-data platformA system that creates safe copies for development and QA.Test, Evaluation, Verification, and Validation (TEVV)A structured process for checking whether a system behaves as intended and meets safety requirements.TestbedA controlled environment used to evaluate how a technology behaves before wider deployment.TestbenchA simulation environment used to check whether hardware logic behaves as intended.Tethered exploitAn exploit that depends on an external connection or tool during the attack process.Text adventureAn interactive fiction format driven by reading, choices, and player input.Text and Data Mining (TDM)Automated analysis of digital works to extract patterns or correlations, subject to legal limits.Text editorSoftware used to create and edit plain text, code, and configuration files.Text extractionThe process of pulling key information out of longer written material.Text-rendered QR codeA QR-like pattern built from characters in the email body rather than a normal image file.Text-to-SQLA workflow that turns natural language questions into SQL database queries.Texture mappingApplying 2D images to 3D surfaces to make them appear detailed.Theft-first ransomwareattacks that prioritize data theft for leverage.Themea visual style that changes the appearance of an application without changing its core functions.Theme PreviewA WordPress feature that shows how a theme will look before it is activated.Theme preview flowThe WordPress path used to inspect or test a theme before activation.Theorem proverSoftware that helps construct and verify mathematical proofs under strict logical rules.ThereminAn electronic instrument controlled without touch, usually by hand movement near sensors or antennas.Thermal creepSlow deformation of a material over time when heat and stress act together.Thermal densityThe concentration of heat generated in a rack or space, often measured in kW per rack.Thermal energyHeat energy that can be directed into warming or drying tasks.Thermal envelopeThe range of temperatures and cooling conditions a device can tolerate while operating correctly.Thermal paththe route by which electrical energy becomes heat in a component or material.Thermal printerA printer that uses heat to mark special paper instead of liquid ink.Thermal ProsumerA user that both consumes heat and can return surplus heat to the network.Thermal-management applicationsSystems and equipment designed to control heat in industrial or automotive use.ThermodynamicsThe branch of physics that explains how heat moves and how energy changes form.ThermometerAn instrument that measures temperature and often serves as a basic reference point.ThermopolymerA plastic material that softens when heated and hardens when cooled.Thin provisioningA storage method that allocates disk space only when it is needed, rather than reserving the full volume in advance.ThinkslopA descriptive label for using AI to simulate thought or reasoning rather than support it.Third Party Risk ManagementA broader discipline for governing risk from external providers, contractors, and service partners.Third-party actionAn action maintained outside your own repository, so its code must be trusted and monitored.Third-party applicationan outside service or integration connected to an organization’s systems.Third-party assessmentAn external review used to test whether a system’s safety or security claims hold up under scrutiny.Third-party auditAn external assessment that checks whether required safeguards are in place.Third-party catalogThe list of non-operating-system applications a patch platform can update.Third-party certificationIndependent verification that an organization meets defined security requirements.Third-party claimAn allegation that remains unverified until independently confirmed.Third-party concentration riskThe danger created when many institutions depend on the same cloud, AI, or technology provider.Third-party connectoran integration that can widen operational exposure.Third-party control systemA control environment operated or supported by an external organization rather than the asset owner alone.Third-party detectionA security model where an external provider analyzes content and returns a result to the platform.Third-party email providerAn external service that handles email delivery or related infrastructure for an organization.Third-party endpointAn external server or service that receives data outside the original user-facing platform.Third-party IT provideran external service relationship that can widen trust boundaries.Third-party logistics (3PL)An outside company that handles shipping, warehousing, and delivery operations for another business.Third-Party Managed PlatformA system operated by an external provider rather than by the organization that owns the data.Third-party modelAn AI model developed outside the organization that is used for inference or other tasks.Third-party notification platforman external service used to send customer messages or app alerts.Third-party platformAn external service that stores or processes data on behalf of another organization.Third-party processingoutside vendors that handle user data on behalf of a service.Third-party processorAn external service that handles a specific part of data processing on behalf of the main product.Third-party rightsRights held by others that may affect whether a generated image can be used publicly or commercially.Third-party security productExternal security software or service that becomes part of an organization’s trust boundary.Third-party software applicationExternal software used by an organization that can expand exposure if trust or access controls are weak.Third-party supportMaintenance and technical support provided by a vendor other than the original software maker.Third-party trackerCode or request from a domain other than the site a user is visiting, often used for measurement or profiling.Third-party vulnerabilityA security weakness in software, services, or systems provided by an external supplier.Thread hijackingAbuse of an existing email conversation to make malicious messages look legitimate.Thread safetyA program property that prevents shared data from breaking when multiple threads run at once.ThreatAnything that could cause harm to an organization’s systems, data, or operations.Threat actor attributionthe process of linking activity to a group, which can remain uncertain.Threat Actor BrandA name used by researchers to group related criminal activity, which may include multiple tactics and shifting methods.Threat Actor LinkageAttribution that connects observed activity to a known intrusion set, often with some uncertainty.Threat classificationThe process of identifying what kind of attack is occurring and how to respond.Threat coverageThe range of malicious activity a security control can detect, block, or help investigate.Threat detection and responseSecurity workflows for spotting suspicious activity and reacting to it.Threat intel triagethe process of checking claims against internal evidence before drawing conclusions.Threat intelligence platform (TIP)A system used to collect, organize, and operationalize threat data for defenders.Threat intelligence sharingThe exchange of structured defensive information so other organizations can detect or respond faster.Threat landscapethe current mix of risks, actors, and attack methods facing defenders.Threat localizationThe process of identifying where suspicious or malicious activity is occurring within a network or system.Threat monitoringthe process of tracking hostile chatter for early warning signals.Threat postureThe overall state of risk and defense as seen by a user or organization.Threat predictionSecurity analysis that aims to estimate likely hostile activity before it fully unfolds.Threat pressureThe sustained intensity of hostile activity facing a system, organization, or sector.Threat prioritizationThe process of deciding which security risks deserve attention first based on impact, likelihood, and active exploitation.Threat profileThe specific risks a user wants protection against, such as phishing or malware.Threat researchanalysis of attacker behavior, tools, and methods used to improve defenses.Threat Screening CenterAn FBI unit focused on screening and threat-related information handling.Threat sharingThe exchange of cyber threat indicators or warnings so organizations can defend faster.Threat signalsIndicators that help organizations recognize related malicious activity.Threat surfaceThe combined points where a device or service can be targeted.Threat techniqueA repeatable method used by an actor to carry out hostile activity.Threat triagethe first-pass review used to separate a real security signal from noise.Threat validationthe review of evidence to see whether a security claim is credible.Threat visibilityThe ability to observe, classify, and track hostile activity before it becomes a larger problem.Threat volumethe scale of hostile or suspicious activity a security team must process.Three Lines of DefenceA governance model that separates operational ownership, risk oversight, and independent assurance.Three-way matchingAn accounts payable control that compares a purchase order, invoice, and goods receipt to confirm a transaction.Threshold cryptographyA method that splits cryptographic trust or key control across several parties so no single holder can act alone.ThresholdingA confidence cutoff used to decide when automation should act or escalate.ThrottleTo reduce the rate or scope of an AI system’s actions without fully stopping it.ThrottlingThe intentional slowing of network traffic until a service becomes hard or impossible to use in practice.ThrustThe force that drives a rocket forward.ThrusterA device that creates force to move an object in a chosen direction.ThunderbirdMozilla’s open-source email client, covered by Mozilla security advisories and patch releases.Thunderbolt 3A high-speed interface for connecting external devices such as storage arrays.TiBA data-size unit that can signal volume, but not necessarily confirmed theft or compromise.Ticket-granting ticket (TGT)A Kerberos ticket used to request access tickets for specific services.Tied deposit accountA savings product that locks money for a set period in exchange for interest.Tier 0The highest-trust administrative layer in Microsoft identity architectures, usually covering domain controllers and other crown-jewel systems.Tier 1 IT supportFrontline help desk work for routine, repeatable user requests.Tier 1 tournamentA top-level competition with the highest visibility and commercial value.Tiered controlsA staged security model that increases safeguards as capability or risk rises.Tiered disclosurestaged publication of material in phases to increase leverage.Tiered regulationA graduated enforcement model that can escalate from lighter engagement to more formal compliance action.Tiered-ratea pricing model that changes by usage band or time slot.Time DepositA fixed-term savings product where money is placed for a set period under agreed conditions.Time horizonA benchmark measure that links model success to the human time needed for a task of similar difficulty.Time referenceThe baseline a system uses to judge when events occur.Time-limited accessAccess that expires automatically after a defined period instead of remaining permanent.Time-of-Check to Time-of-Use (TOCTOU)A bug class where something is checked as safe, then changes before it is actually used.Time-of-click inspectionA defense that checks a link when it is opened, not only when the email first arrives.Time-of-click protectionA security control that checks a link when a user opens it, not only when the email arrives.Time-series databaseA database designed to store and query data points ordered by time, often used for telemetry.Time-to-bypassThe time it takes for an attacker to defeat a protection or guardrail during testing.Time-to-exploitThe interval between vulnerability discovery and practical attack use.Time-to-outcomeA measure of how long it takes to reach a business result, not just to complete a task.Timed disclosurea phased release tactic that uses deadlines to increase pressure.TimekeepingThe act of measuring and displaying elapsed time.Timing bugA flaw where the order or timing of operations creates a security problem, often by breaking assumptions about when checks occur.Timing constraintA limit created by how quickly a system can complete its update cycle.Timing fidelityHow closely a replacement matches the original device’s response timing.TinkeringInformal experimentation with a device to understand or improve how it works.Tiny TapeoutA project associated with making chip fabrication more approachable for smaller designs.Tipping pointA threshold where small changes in context can produce a sudden shift in model behavior.Tissue culture laba controlled plant-production setting that can be sensitive to workflow interruption.Title barThe top strip of a window that usually shows the app name and window controls.Title companya firm that manages title-related records and insurance for property transactions.TitolareThe data controller responsible for deciding why and how personal data is processed.TLB invalidationThe process of clearing stale address-translation entries so memory mappings stay correct.TLS 1.3A modern encryption protocol that protects data in transit with stronger confidentiality and integrity.TLS certificatesSecurity credentials for encrypted connections that can also help cluster related servers.TLS handshakeThe setup phase where a client and server negotiate cryptographic parameters before normal data exchange.TLS hostname verificationThe check that confirms a certificate belongs to the server name a client intended to reach.TLS receive pathThe code path that handles incoming TLS traffic before it reaches the application.TLS session ticketA mechanism for resuming encrypted sessions; if mishandled, it can create security problems during session reuse or key rotation.TLS TerminationThe point where encrypted connections are decrypted so traffic can be processed by the proxy or application.TLS validationThe process of checking certificates and connection parameters in encrypted sessions.tls-cryptAn OpenVPN feature that encrypts and authenticates control-channel packets to reduce exposure to unauthenticated traffic.TLS/SSL decryptionThe process of inspecting encrypted traffic so security controls can evaluate hidden content.TMStransportation management system, software used to coordinate freight, carriers, and shipping records.TN Deckthe name of the tiny custom cyberdeck featured here.TOFU"Trust on first use," a policy where a client remembers the first server key it sees and trusts it later.Token AuthenticationA login method that requires a secret token before a service accepts requests.Token billingA pricing model where AI usage is measured by the number of tokens processed or generated.Token bindingSecurity control that ties a token or artifact to a specific session, user, or workflow.Token costsThe billable expense created when AI systems process input and generate output in token units.Token endpointThe server endpoint where an authorization code is exchanged for tokens.Token entropyA shorthand for token usage that produces little value, often because of repetition or inefficiency.Token exchangeA process that swaps one credential for another, usually to narrow or change delegation.Token exergyA management analogy for the useful business outcome extracted from AI work.Token lifecycleThe full management cycle of issuance, use, rotation, expiration, and revocation for a token.Token lifetimehow long an access token remains valid before expiring.Token limitThe maximum amount of text a model can generate or process, measured in tokens rather than words.Token limitsconstraints on the number of tokens a model or service will accept or generate in a session or over a period of time.Token misuseusing a valid access token in a way that was not intended or authorized.Token persistenceContinued access that survives password changes because an authentication token remains valid.Token priceThe per-unit cost charged for model usage, often used in AI budgeting.Token pricingThe cost charged for each unit of model input or output.Token scopingLimiting what an authentication token can do so it cannot be used beyond its intended purpose.Token throughputThe rate at which an AI system can generate or process tokens under real workload conditions.Token-audience validationChecking that a credential is meant for the specific server or service that receives it.Token-Based PricingA billing model that charges based on the amount of text processed by a system.Token-Based UsageA consumption model where AI services bill based on tokens or similar usage units.Token-biasingA generation method that subtly shifts the model toward certain word choices.Tokenized stockA digital representation tied to equity exposure or a related financial claim.TokensSmall consumption units used to measure how much model processing an AI system performs.TomcatA Java web server and servlet container often used to host server-side web applications.Tomcat NativeAn optional component that lets Tomcat use native libraries for TLS and connector functions.Tomcat RewriteValveAn Apache Tomcat feature that can rewrite or block requests using configurable rules.TONResolverA malware family reported to use TON blockchain lookups to help locate its command-and-control infrastructure.Tool access controlRestricting what external tools, APIs, or actions an AI system can reach during operation or testing.Tool AllowlistA security control that permits an agent to use only approved tools or actions.Tool authorityPermission for an AI system to use external tools, APIs, or services beyond text generation.Tool authorizationRules that define what an agent is allowed to do with connected tools and services.Tool callA model-generated request to invoke an external function or action through an application layer.Tool changeA switch between print heads, feed paths, or materials during fabrication.Tool consolidationReducing overlapping security products so operations are simpler and easier to manage.Tool executionThe ability of an AI system to invoke connected actions, such as API calls or service operations.Tool MisuseAbuse of an AI system's authorized tools or actions for unintended outcomes.Tool orchestrationThe coordination of multiple tools or actions by an automated system or agent.Tool PermissionThe level of access an AI agent has to APIs, files, or external services.Tool PermissioningThe practice of limiting what external actions an automated agent can perform.Tool proficiencyskill in using a tool accurately, efficiently, and with awareness of its limits.Tool RegenerationRecreating disposable tools or payloads after a blocked or failed attempt.Tool shadowingA workshop method that uses a tool's outline to show where it belongs.Tool triggeringThe act of initiating an external action, such as an API call or workflow step, from an agent system.Tool-aware fuzzingA testing method that checks whether tool inputs cause security violations, not just crashes.Tool-connected AIAn AI system that can call external services, APIs, or workflows instead of only generating text.Tool-using agentAn AI agent that can call APIs, browse the web, move files, or perform other actions.Toolchain trustConfidence that compilers and related tools process code as intended and without hidden surprises.Toolpaththe route a printer head follows while building a part layer by layer.ToolsetThe collection of malware, delivery methods, and infrastructure used in a campaign.TopicA named channel in MQTT that clients publish to or subscribe from.Topological insulatora material with unusual conducting behavior at its surfaces or edges.Tor BrowserA privacy-focused browser that routes its traffic through the Tor network and adds anti-tracking protections.Tor leak sitea hidden-service page used to publish extortion demands or stolen data.Tor-based leak portala hidden-service website used to host leak or pressure content anonymously.Tor-format keyCryptographic key material used in Tor onion-service identity and publication workflows.Toroidal propellerA propeller design with a ring-like form intended to alter flow behavior.Torrent distributionPeer-to-peer sharing that can spread alleged stolen data.Torrent poisoningThe abuse of torrent ecosystems to distribute malicious files or links.Total cost of creditThe full price of borrowing, including interest and any fees or add-ons.Total Cost of Ownership (TCO)A way to price software by its full lifecycle costs, not only the initial build.TOTPTime-based One-Time Password, a temporary code used in multi-factor authentication.Touch-sensitive surfaceA surface that can respond when touched by a finger or other input.Touchpad scroll speedA setting that changes how quickly content moves during touchpad scrolling.Touchscreena display that accepts input directly from a finger or stylus.ToxAn encrypted peer-to-peer messaging protocol that can be repurposed for resilient malware communications.TPM 2.0A hardware security module used to store keys and support trusted device operations.Trace-based evaluationReview of an AI agent’s step-by-step behavior to spot unsafe actions or policy violations.TracesRequest paths that show how a transaction moves through connected services.TracingLogs that record an agent’s steps, tool calls, and state changes for review.Tracker formatA music-file format used in tracker software, associated with early home-computer music scenes.Tracker protectiona privacy feature intended to reduce tracking activity while users browse.Tracker siteA torrent index that helps users find and exchange file metadata in peer-to-peer networks.Tracking parametersExtra URL components used to carry analytics or attribution data.Tracking serverThe MLflow component that receives run data and serves as the main interface for experiment tracking.Trade credit insuranceInsurance that helps protect businesses from losses caused by customer non-payment.Trade secretsConfidential business information that has value because it is not publicly known.TrademarkA protected sign, word, or phrase that indicates the commercial origin of goods or services.Traditional career patha familiar upward route built around steady promotions and corporate progression.Traditional softwarePrograms that follow fixed rules without inferential behavior.Traffic analysisExamining network patterns to spot coordination, reuse, or unusual behavior.Traffic baselinethe normal communication pattern of a network, used to spot unusual behavior.Traffic camouflageA technique that makes malicious network activity resemble ordinary web behavior.Traffic concealmenttechniques that make malicious network activity look routine or harder to trace.Traffic correlationMatching network flows with endpoint or DNS activity to infer what a connection is really doing.Traffic dataMetadata about communications, such as origin, destination, time, and routing.Traffic diversionThe rerouting of network traffic away from its intended destination.Traffic filteringDefensive controls that inspect, block, or reroute suspicious traffic before it reaches a service.Traffic interceptionThe capture or observation of data moving between a browser and a website.Traffic obfuscationTechniques that disguise network traffic so it is harder to identify as VPN traffic.Traffic processingThe amount of network data a firewall inspects or forwards, often a major driver of cloud firewall cost.Traffic qualityA measure of whether clicks, visits, or views appear genuine.Traffic relaya device or node that forwards network traffic for another party.Traffic shapingA network control method that limits or prioritizes certain data flows.Traffic SignalingHidden malware activation triggered by a special network packet or sequence.Traffic surgeA rapid increase in network requests or user activity over a short period.Traffic tunnelThe protected path used to carry internet data through a VPN service.Traffic-light policyA simple framework that uses colors to signal when a tool may be used.Training centera controlled setting where systems are exercised and refined before wider deployment.Training dataInformation used to teach an AI system patterns it can later apply to new tasks.Training data provenancethe record of where model inputs came from and how they were obtained.Training fidelityhow closely a learning tool reflects the real conditions of the task being taught.Training-Data PoisoningCorrupting or biasing the data used to train a model so it learns unsafe or misleading behavior.Trajectory monitoringWatching the full sequence of an agent’s actions, not just isolated steps.Trajectory-level monitoringWatching an AI system’s full sequence of actions over time, not only single outputs.Transaction alertA notification that flags account activity, helping users monitor movement quickly.Transaction anomaliesunusual payment or transfer behavior that can indicate abuse.Transaction anomaly detectionMonitoring that looks for unusual payment behavior, device changes, or session patterns.Transaction conditionsThe specific limits or triggers that affect payments, withdrawals, or fees.Transaction dataInformation recorded on a blockchain when a transaction is sent, sometimes abused to hide payload pointers.Transaction flowthe sequence of steps that moves a purchase from checkout to payment processing.Transaction frictionExtra steps that slow suspicious payments or transfers.Transaction historyA record of account activity that can expose behavior patterns, relationships, and financial context.Transaction IDA field used to match STUN requests and responses, which can be abused for covert signaling.Transaction limitsPre-set boundaries that cap how much a system can move, change, or approve.Transaction loggingRecorded activity that helps detect fraud, errors, and suspicious behavior.Transaction metadatasupporting information such as time, amount, and routing details.Transaction monitoringSystems that flag unusual payment activity for investigation.Transaction processingsystems that move or validate financial instructions and records.Transaction signingA cryptographic process that helps prove a transaction was authorized and unchanged.Transaction traceabilityThe ability to follow a payment or transfer through its processing path.Transaction trailthe path money follows as it moves between accounts or services.Transaction verificationThe practice of confirming that a payment request, amount, and recipient are legitimate.Transaction volumeThe total value moved through a system over a period of time.Transactional leadershipA leadership style centered on supervision, rewards, punishments, and routine control.TransceiverA device that can both transmit and receive signals.Transcoding PipelineAn automated media-processing workflow that converts files between formats, often using libraries like FFmpeg.Transcranial magnetic stimulationA medical technique that uses magnetic pulses in treatment.TranscriptThe written record of a spoken exchange, which can be searched, retained, or reviewed later.Transcription toolSoftware that converts speech into text, often creating a separate record of meeting content.TransferApplying what was learned in one setting to a new problem or context.Transfer stationAn intermediary service that can relay API traffic and obscure its origin.TransferabilityThe ability to move AI knowledge and controls across models or platforms without losing function.TransferFiles permissionA ScreenConnect role control that governs file transfer, and in some workflows tool execution.TransferListA mechanism for moving objects or buffers between execution contexts, which can become risky if validation is inconsistent.Transformation maturityThe ability of an organization to turn technology adoption into repeatable enterprise capability.Transformational leadershipA leadership style that seeks to inspire innovation, change, and commitment through vision and example.TransformerFactoryA Java XML API used to create XSLT transformers, which should be hardened for untrusted input.Transient errorA temporary failure that may succeed on retry once the service recovers.Transient executionA processor behavior where instructions run before their final outcome is known, sometimes leaving measurable traces.TransistorsElectronic components that control current and form the basis of many circuits.Transition riskFinancial risk linked to policy, market, or operational shifts during a move to a lower-carbon economy.Transition strategya practical plan for moving from one role to another with less disruption.Transitional intelligencethe ability to navigate change thoughtfully and adapt without losing direction.Translation compensationA limited reimbursement scheme that helps eligible applicants offset translation costs.Translation noiseSmall errors or distortions introduced during machine translation.Translucent plastica material that lets light pass through while still obscuring full detail.TransmissionThe act of sending data from one place to another through a communication channel.Transmission mediumThe physical path a signal uses to travel from sender to receiver.TransmitterThe ground-based radio unit that sends control commands to the drone.Transnational criminal organizationa criminal group that operates across national borders and jurisdictions.Transnational cyber-enabled crimeCriminal activity that crosses borders and uses digital systems or networks.Transnational fraudCriminal deception that operates across borders to make detection and enforcement harder.Transnational initiativeA coordinated effort that spans more than one country or jurisdiction.Transnational issueA matter that affects workers or operations in more than one country within a corporate group.Transnational repressionThe use of surveillance or intimidation across borders to silence critics abroad.Transonic flightFlight near the speed of sound, where airflow can change rapidly and unpredictably.Transparency disclosureA notice that tells users when content was generated, manipulated, or assisted by AI under policy or legal rules.Transparency obligationA requirement to disclose or label certain AI uses and outputs so users are not misled.Transparency summaryA public or regulator-facing overview of training content meant to support accountability and rights review.Transparency, Consent, and Control (TCC)macOS privacy framework that asks for user permission before apps access sensitive files and locations.Transparent conductive coatingA layer designed to remain visually clear while still supporting electrical behavior.Transport assuranceguarantees about delivery, integrity, or receipt during transmission.Transport authenticationVerification applied at the network layer before a service accepts requests.Transport Layer Security (TLS)A protocol that encrypts data in transit and uses certificates to authenticate endpoints.Transport privacyProtection that helps conceal traffic contents from local observers on an untrusted network.Transport-layer authenticationLogin controls enforced at the protocol or network layer before application features are reached.Transshipmentthe routing of goods through an intermediate country or company before final delivery.Trapped-ion quantum computerA quantum processor that uses electrically charged atoms held in electromagnetic traps to represent qubits.Trasformazione tecnologicaThe process of integrating digital systems into operations, products, and management.Trattamento infiltrativolocalized therapy in which a substance is injected into a targeted tissue area.Travel documentsrecords such as passports and visas that can carry high identity and fraud value.Travel recordData tied to a passenger trip, such as booking or itinerary details.TreasuryThe finance function that manages cash, liquidity, and outgoing payments.Treatment planA tracked set of actions used to reduce, transfer, or accept a security risk.TrebuchetA gravity-powered launcher that uses a counterweight and swinging arm to propel a projectile.Tree-of-Thoughts (ToT)A prompting approach that explores multiple reasoning paths before choosing an answer.Trend reversala change from sustained decline to renewed increase in a metric.Tri-camera setupA three-camera arrangement used to capture multiple views or channels.Triag ethe first-pass process of checking exposure, scope, and immediate risk.Triage cueA signal that prompts fast internal checking before conclusions are drawn.Triage triggeran event that prompts immediate verification and containment checks.Trial and errorA method of testing ideas by repeating attempts and learning from the outcomes.Trial periodA limited free window that lets a customer test a service before paying.TrickBotA modular Windows malware family known for persistence, modular payload delivery, and remote control.Triggered lightningLightning deliberately initiated under controlled conditions for study.TripwireA hidden trigger designed to generate an alert when someone interacts with something that should remain untouched.TRNGTrue Random Number Generator, a hardware source of randomness used in key creation.Trojanized DLLA dynamic link library altered to carry malicious logic while appearing normal.Trojanized downloadA legitimate-looking file that hides malicious code inside.Trojanized FileA legitimate-looking file that contains hidden malicious behavior.Trojanized forkA modified copy of a legitimate project that keeps expected functionality while hiding malicious code.Trojanized npm packageA package in the Node.js ecosystem that has been altered to include malicious code while still appearing useful.Trojanized packageA legitimate-looking software package that has been altered to include malicious code.Trojanized Wallet AppA fake or altered wallet application designed to steal recovery phrases or other sensitive data.TRONA blockchain network whose addresses can be used in transfers and screened in sanctions compliance.TroubleshootingThe process of identifying and fixing a technical problem.TRS-80a line of personal computers from the late 1970s and early 1980s.True-positiveA finding that is confirmed to be real rather than a false alarm.True-positive vulnerabilitya finding that is confirmed to be a real security issue, not a false alarm.TrueType (.ttf)A common font file extension that can be abused as camouflage in malicious email attachments.TrueType fontA common font format supported natively by Windows and other platforms.TrustThe confidence that helps teams accept guidance, follow process, and respond consistently.Trust and governance challengea security and policy problem where protection depends on clear rules, reliable reporting, and user confidence.Trust assessmentA process for judging whether a project or component meets expected security and reliability standards.Trust assuranceA security control that helps users confirm an identity or connection before relying on it.Trust channelA communication path people tend to believe, such as SMS or chat.Trust checkpointA place in a workflow where a system or user must verify that an interaction is legitimate.Trust controlA safeguard that checks whether a person, item, or message should be accepted.Trust cueA sign that makes someone seem legitimate, such as a profile, title, or mutual contact.Trust indicatorsVisual cues that show whether a participant is external, guest, or anonymous.Trust layera system that controls and verifies access between connected services or organizations.Trust metadataSecurity information attached to a file that helps the operating system decide how cautiously to treat it.Trust metricsIndicators used to measure whether people rely on AI appropriately and use it consistently.Trust misuseWhen a system’s apparent helpfulness causes users to over-rely on it.Trust pathA legitimate channel users rely on, such as a server-hosted download or update flow.Trust policyA rule set that helps decide which packages or signatures are accepted as trustworthy.Trust postureThe confidence others place in a company’s security and governance practices.Trust proxyA trusted service used as an intermediary to make a malicious path look benign.Trust reviewA reassessment of what a device should be allowed to access or do.Trust servicesDigital services that support identity, signatures, seals, and other forms of proof in electronic transactions.Trust zonea business area where sensitive systems, users, or partners intersect.trust_remote_codeA flag that allows a loader to execute custom Python code from a remote repository.Trust-based systemA service that depends heavily on user confidence and identity claims.Trust-chain abuseA tactic that exploits legitimate software, signatures, or system trust to conceal malicious execution.Trust-sensitive systemsservices such as account access and records handling that customers must rely on.Trusted access abuseAttack activity that relies on valid credentials, approved systems, or sanctioned pathways rather than obvious break-in noise.Trusted Access for CyberAn authorization framework that restricts advanced AI cyber capabilities to approved users and approved use cases.Trusted boundaryA security limit that separates data a program can safely accept from data that must be verified first.Trusted Client restrictionsAccess controls that limit administrative connections to approved IPs, subnets, or hosts.Trusted ClientsA restriction mechanism that limits which IPs can connect to management services.Trusted communication pathA channel that software assumes is safe, but which can be abused if an attacker can influence one endpoint.Trusted connectionA network relationship allowed by design, but one that can become a persistence path if abused.Trusted device enclaveA protected storage or execution area that keeps sensitive credentials isolated from normal software.Trusted domaina legitimate web address that users and systems are more likely to accept at face value.Trusted Execution EnvironmentA protected area inside hardware or firmware designed to isolate code and data from the rest of the system.Trusted hostsRestricted IP addresses allowed to reach an administrative interface, used to narrow who can attempt management access.Trusted Identity PropagationA mechanism that carries user identity across connected services so actions can be attributed and controlled.Trusted input pathA device or interface that a system treats as legitimate control input.Trusted Listan official registry of qualified trust service providers recognized for certain electronic trust services.Trusted mission dataSensitive mission-related information that must be handled under strict access and handling rules.Trusted onboardingA secure setup process that verifies a device before granting it network access and credentials.Trusted operator boundaryA security model that assumes one controlled user or operator, not an adversarial shared environment.Trusted originA web security boundary that determines which content can access the app’s same-origin data and permissions.Trusted proxyA reverse proxy that is allowed to add or forward identity information to a backend application.Trusted ResearchUK guidance for protecting sensitive research, data, and intellectual property from misuse or theft.Trusted signersA NuGet control that restricts package acceptance to approved signing identities.Trusted TypesA browser defense that helps prevent unsafe DOM injection paths.Trusted URL AllowlistingA control that limits outbound links or destinations to approved addresses only.Trusted Web ServiceA legitimate online service abused by malware to blend into normal traffic.Trusted workflow abuseThe misuse of normal business channels, such as platform inboxes or collaboration tools, to make malicious content look routine.Trusted-access programA controlled admission process that limits a sensitive capability to vetted users.Trusted-binary proxy executionA technique where attackers abuse a signed or built-in system tool to run malicious content.Trusted-Network DeploymentA setup where a service is meant to run behind network controls and only accept approved clients.Trusted-process exclusionA policy rule that reduces or removes monitoring for selected processes, which can create blind spots if overused.TrustOpsOperational workflows that turn governance commitments into day-to-day security action.Trustworthy AIAI designed to be reliable, secure, explainable, and suitable for its intended use.TrustZoneA hardware security architecture that separates trusted and non-trusted execution environments.TruthinessA programming behavior where a value is treated as true even when it represents an error state.TSCMTechnical Surveillance Countermeasures, the practice of detecting and reducing technical surveillance threats.TTL RGBAn older video standard that carries color and sync signals using TTL logic levels.TTYA traditional text terminal concept that began with physical teletype devices.Tube launchingA launch approach mentioned in the article as a way to improve model rocket performance; the supplied summary does not explain how it works.TumblingRotating or flipping in a repeated, unstable-looking motion.TUN/TAPVirtual network devices that let user space send and receive packets through the kernel.TunnelAn encapsulated path that can carry traffic through another trusted process or channel.Tunnel interfaceA logical interface that represents encapsulated traffic between endpoints.TunnelerTooling that forwards traffic through a compromised system to reach internal services.Tunneling implantmalware that relays traffic through the victim host to create covert remote access.TupleA structured permission fact, often used to represent a relationship such as user, relation, and resource.TurbopackA Next.js build tool and bundler involved in the vulnerable deployment pattern.Turbulenceirregular motion that can stir, distort, and mix a flowing medium.Turing completeA system able to express any computation in principle.Two-dimensional materialA material that is only one or a few atoms thick, often studied for unusual physical properties.Two-photon polymerizationA laser-based process that can create microscopic structures with very fine detail.Two-step verification (2SV)An extra account check that asks for a second secret after the main login step.Two-way dead-dropA covert exchange method where both commands and responses move through the same hidden channel.Type resolutionThe logic a parser uses to decide which class or object type should be created from input data.Type-confusionA memory-safety bug where software treats data as the wrong type, which can lead to corruption.TypefaceThe visual design of letters, numbers, and symbols.TypeScript SDKA software development kit for building applications and integrations in TypeScript.TZA Unix environment variable that influences timezone and time conversion behavior.TZ environment variableA process setting that influences timezone interpretation for time-related operations.U-spaceA European framework for managing drone traffic with digital services that support safer shared airspace.UACUser Account Control, a Windows feature that limits when programs run with elevated privileges.UAC-0145A threat label used in reporting for a cluster associated with the campaign.UALinkAn open interconnect standard for linking accelerators in high-bandwidth AI systems.UAVUnmanned aerial vehicle, commonly called a drone, used for reconnaissance, transport, or strike support.UbiquitiA networking equipment brand known for switches, access points, and related infrastructure gear.ubusOpenWrt’s internal message bus for inter-process communication and remote procedure calls.UCIeA die-to-die interconnect standard designed to improve interoperability between chiplets from different vendors.udhcpcdA DHCP client component used in embedded networking software to obtain network settings automatically.UI automation abuseMisusing interface-control features to simulate user actions, harvest data, or drive fraud.UI densitythe amount of information packed into a limited interface area.UI personalizationVisual customization that changes how an app or website appears to the user.UI segmentationthe separation of different content types so users can identify what is official, generated, or sponsored.UI trust signalA visual cue that helps users judge whether an interface looks normal and reliable.UI-API layeran application interface path that can be abused if access controls are weak.ULAA custom logic chip used in Sinclair systems to combine multiple functions in one component.Ulchi Freedom ShieldA recurring U.S.-South Korea joint military exercise focused on readiness across multiple domains.Ultrasound-guided treatmentprocedure performed with live imaging to improve placement and precision.Unattended AutomationAutomation that runs without active user intervention, usually on scheduled or triggered workflows.Unattended systemA process that runs without constant human supervision.Unauthenticated APIAn application interface that accepts requests without verifying the caller’s identity.Unauthenticated code executionRunning attacker-chosen code without first logging in.Unauthenticated endpointa web or API path that can be reached without proving identity.Unauthenticated file operationsActions on files that can occur without a valid login.Unauthenticated network attackerA remote actor who can reach a service over the network without logging in first.Unauthenticated PairingA weaker pairing state that can accept a bond without the same level of user verification.Unauthenticated pathA route that can be reached without logging in or presenting credentials.Unauthorized activityaccess or actions that were not approved by the system owner.Unauthorized campaignA marketing action carried out without permission from the relevant rights holder or organizer.Unauthorized code executionRunning code on a device without permission, often by abusing a software flaw.Unauthorized data exposureSensitive information becomes readable by a user or system that should not have access.Unauthorized exposureaccess or disclosure that has not been authorized by the owner.Unauthorized file accessA flaw where software can reach files outside the intended directory or permission boundary.Unauthorized File UploadA weakness that lets an attacker place a file on a server without proper permission checks.Unauthorized file uploadsFile transfers carried out without the proper approval or permission.Unauthorized File WriteThe ability to place or overwrite files in locations that should be protected.Unauthorized streamingDelivering video content without the rights holder's permission.Unauthorized transferA transaction or asset movement made without permission.UnboundID LDAP serverAn embedded LDAP server implementation used for in-memory directory services.UncertaintyThe margin of doubt that remains when interpreting AI evaluations or predictions.Uncrewed aircraft system (UAS)A drone and its related control and communications components.Underwater capabilitiesMaritime or subsurface capabilities linked to sensing, infrastructure, or defense operations below the surface.undiciThe HTTP client library used by Node.js and the foundation for its built-in fetch API.Undocumented hardwarePhysical components whose behavior or interface is not publicly described in full.Unexpected restartA Windows crash event that forces the system to reboot, sometimes with a stop code.Unfair PracticesA legal standard in U.S. consumer protection law that can cover conduct causing likely consumer harm.Unfair Practices ActA consumer-protection law aimed at deceptive or unfair business conduct.UnicodeA text encoding standard that represents characters across many writing systems, including special-use and non-printing code points.Unicode obfuscationA hiding method that uses unusual or visually deceptive characters to mask malicious script logic.Unicode tag charactersA Unicode character family intended for tagging use, often invisible in tag-unaware systems.Unicode Tags blockA Unicode range, U+E0000 to U+E007F, reserved for special protocol tagging and normally invisible in plain text.Unicode variation selectorA special character used to alter how text appears, sometimes abused to hide suspicious content.UnicornA private company valued at more than one billion dollars.UniEmensThe payroll reporting flow used to transmit contribution and wage data.Unified dataA governed customer-data layer that brings together information from different systems into one managed view.Unified Endpoint Managementa system for administering and securing multiple device types from one console.Unified Endpoint Management (UEM)software that helps administrators manage and apply policy across multiple device types.Unified Patent Court (UPC)A common court for certain European patent disputes, designed to reduce parallel national litigation.Unintended channelsCommunication paths that were not designed or approved for the task.Unintended emissionsSignals a device leaks without intending to, sometimes carrying recoverable information.Unintended transmitterHardware that was not designed to broadcast data but can still leak it under certain conditions.Unitary patentA European patent with unitary effect across participating states, managed through a streamlined post-grant process.Universal binaryA single Mac binary that contains code for more than one CPU architecture.UnixA family of operating systems and design traditions that shaped modern server and developer workflows.Unix domain socketA local IPC channel used by processes on the same system to exchange data.Unix-like systemAn operating environment built around Unix-style permissions and administration models.Unlimited dataa commercial label for data access that may still be subject to plan conditions.Unlimited simultaneous connectionsA subscription model that lets many devices use the same service at the same time.Unlock authorizationThe rule set that decides who can remove a lock from a protected file or resource.Unmanaged assetsDevices or systems that are present on the network but not centrally controlled.Unmanaged IdentitiesAccounts or machine principals that lack clear ownership, lifecycle control, or monitoring.Unpatched ServerA system that has not received the security update needed to close a known flaw.unpkgA CDN that serves files from npm packages as public web content.Unplugged activityA hands-on learning exercise that teaches computing ideas without requiring a device.Unprivileged local userA user or process with standard permissions on a device, not administrative control.Unsafe ReflectionA code path where software dynamically resolves classes or objects in a way that can be abused if input is not tightly controlled.Unscoped packageA package that sits in npm’s global namespace instead of being tied to an organization scope.Unsecured CredentialsCredentials In Files: A MITRE ATT&CK technique describing secrets stored in files or similar local artifacts.Unserialize()A PHP function that rebuilds values from serialized data and should not process untrusted input.Unsigned codeSoftware that lacks a trusted digital signature and may be blocked by integrity controls.Unsigned DLLA library without a trusted digital signature, which can be a warning sign in plugin-heavy environments.Unstructured modela more flexible setup that may be less standardized and harder to compare.Unsupported deviceHardware that no longer receives vendor security updates or active maintenance.Unsupported softwareSoftware that no longer receives active security fixes from its vendor.Unsupported VersionA software release that no longer receives full vendor security fixes.Unsupported WindowsA Windows version that no longer receives standard security servicing from Microsoft.Untrusted control sphereA trust-boundary problem where attacker-controlled input influences code or behavior that should be trusted.Unused rulea control that exists in policy but does not appear to trigger.Unusual access patternsBehavior that deviates from normal account use and may indicate suspicious activity.Unverified allegationA claim that has not yet been independently confirmed by supporting evidence.Unverified attributionA named victim or attacker link that has not been independently confirmed.Unverified breachA suspected incident that has not yet been confirmed through independent evidence.Unwanted-tracking alertsSafety features designed to warn users when a compatible tracker may be moving with them.Upcominga status label showing the post is not presented as a completed leak.Upcoming listingA posted entry that signals intent before any files are shown.Upcoming statusA label that indicates the listing is not yet fully populated with evidence.UpcyclingReusing discarded material to create something functional and new.Updatea new version or package that changes or improves an existing game.Update agentSoftware that installs or coordinates system updates, often with elevated trust and broad reach across devices.Update APIThe service layer that delivers update information and packages to client systems.Update availabilityWhether a device can still receive security patches and software fixes.Update cadencehow regularly a device receives software and security updates.Update chainThe path software takes from release to installation, including trust and delivery steps.Update continuityThe ability of a security tool to keep receiving and applying updates without interruption.Update ControllerA software component that helps manage the delivery or application of updates.Update cycleThe regular process used to deliver fixes and maintenance.Update infrastructureThe servers and network paths used to distribute software updates and patches.Update mechanismThe process a product uses to deliver patches, upgrades, or maintenance files to installed systems.Update pipelinethe delivery path for software fixes, definitions, and feature changes.Update provenanceProof that software updates come from a trusted and authorized source.Update resiliencyThe ability of a security product to keep updating even when the system is stressed or interfered with.Update ringsStaged rollout groups that limit how many devices receive an update before wider promotion.Update rollbackA recovery method that removes a recent update to restore system stability.Update synchronizationthe process of comparing and pulling update information between systems.Updater Trust BoundaryThe security line around update mechanisms, where file writes and package handling must be tightly controlled.UPFThe User Plane Function, which forwards user traffic according to control-plane instructions.UpgradeMoving to a newer software version, usually to gain fixes, security improvements, or new features.Upgrade pathThe supported route from one version to another.UplinkData sent from a device to the network or cloud.upload_filesA WordPress capability that permits file uploads to the media library.Upload-to-execution pathA workflow where a user-uploaded file reaches a process that may run code or interpreter logic on the server.Upper stagethe final rocket stage that performs the last push to place a payload into its target orbit.Upstream dependenciesEarlier components, such as weights or training data, that a model relies on.Upstream filteringBlocking malicious traffic before it reaches the target network.Upstream kernel treeThe main Linux codebase where fixes are first merged.Upstream scrubbingFiltering malicious traffic before it reaches a target network.Urban planningThe discipline of organizing land use, mobility, and services in a city or town.Urban proprioceptionAn AI-driven way to sense operational pressure in a city through connected data signals.Urgency biasthe tendency to act too quickly under pressure.URIA standardized identifier for a resource, often including a path or query string on a server.URI encodingA way of representing special characters in web addresses so applications can parse them safely.URLThe web address that points to a resource online.URL chainingfollowing one web address after another in a repeated sequence.URL cloakingA technique that hides the real destination of a hyperlink behind redirects or misleading link handling.URL encodingA way of representing characters in a URL so they can travel safely over the web, sometimes used to disguise malicious input.URL LeakageUnintended disclosure of data through links, redirects, or web addresses used by a system.URL obfuscationMethods that hide the true destination of a link so it appears safer or less suspicious than it really is.URL shortenerA service that replaces a long web address with a shorter redirect link.URL spoofingA technique that makes a browser display a misleading web address or security cue.URL takedownThe removal or blocking of a web address used to host or share content.URL verificationChecking a link’s real destination before opening it.URL-supplied promptsPrompt text carried in a link or URL parameter instead of entered directly by the user.Usability security tradeoffthe balance between making a feature easier to use and keeping it safer to operate.Usable securitysecurity guidance and controls that people can understand and follow in real situations.Usable spaceThe portion of a resource that can actually be put to work in practice.Usage limitA quota that restricts how much a service can be used during a set period.Usage limitsThe consumption caps or allowances that control how much of a service a user can use.Usage rightsLegal authorization to operate on a specific frequency band.USB 3.0A high-speed USB standard designed for faster data transfer than earlier versions.USB Audio Class 1.0A USB device class for audio hardware supported by Windows drivers.USB audio deviceExternal hardware such as headsets, microphones, or speakers that carry sound over USB.USB controllerThe hardware layer that manages communication between the computer and USB devices.USB hubA device that expands one USB port into multiple downstream ports.USB interfacethe connection layer that lets devices communicate with modern systems.USB microphonean external audio input device that captures sound and sends it to software for analysis.USB ProtectionA control that reduces unauthorized USB access when the device is locked.USB redirectionA remote-session feature that forwards USB-related behavior across a network connection.USB-C Power DeliveryA power system that lets USB-C devices use negotiated charging profiles.USB-to-serialA bridge that lets a computer communicate with serial devices over USB.USDT freezeA hold placed on Tether tokens that can block further movement in some cases.Use-case selectionThe process of choosing the business problem an AI system is meant to solve.Used marketThe resale channel where secondhand equipment may be available.Useful-Life AssumptionAn accounting estimate of how long equipment will remain in service before it is retired.UsenetAn early distributed discussion system where public technical conversations were posted in newsgroups.User accountsidentity records that may matter for access control and follow-on abuse.User data directoryThe main storage location where a browser keeps profile data and local state.User EnrollmentAn Apple management mode that gives limited control over a personally owned device for work use.User intentthe goal or need inferred from a visitor’s actions or signals.User perceptionHow people interpret what they see on screen, which can shape quick security judgments.User Profile ServiceA Windows component that loads and unloads user profiles during logon and logoff.User Protection FundA reserve some exchanges use to help cover certain losses; Bitget said this incident falls within that coverage.User serviceabilityHow easily an owner can inspect, open, or repair a device.User settinga preference that controls how software behaves for a person or device.User trust boundarythe line where a person expects software behavior to remain visible and controllable.User verificationA local approval step such as a PIN, fingerprint, or face check before authentication.User-AgentAn HTTP header that identifies the client making a request, but it can be forged by attackers.User-facing settingA control visible to the person using the device.User-level registry pathsRegistry locations tied to an individual user profile rather than the machine-wide configuration.User-modifiableCapable of being changed by the person using the device.User-serviceable batteryA battery designed so users or technicians can replace it without major teardown.UserspaceThe area where applications and many system services run, separated from the kernel by security boundaries.Userspace-only modeAn Open vSwitch deployment option that avoids the kernel datapath but usually reduces performance.USIM Application Toolkit (USAT)A standardized SIM-toolkit capability used in modern USIM environments.UsrClass.datThe Windows file that stores per-user Classes registry data.Utenze domesticheElectricity customers who use the service for home consumption.UtilizationThe share of available compute or serving capacity that is actually being used.Utilization riskThe possibility that expensive infrastructure will run below expected capacity, weakening returns.UTXOUnspent Transaction Output, an individual unspent output on the Bitcoin ledger that can be spent in a later transaction.UV lightUltraviolet radiation, energetic enough to trigger changes in some materials.UV printinga printing process that uses ultraviolet light to cure or set ink or material.UXSSA browser or extension flaw that can let attacker-controlled content act with the privileges of a trusted site.V formationa V-shaped group flight pattern used by birds.V-HUMINTA shorthand for virtual or digital human intelligence conducted through online platforms and relationships.V2 rocketa German rocket developed in the 1940s and often treated as a landmark in early rocketry.V8 bytecodeAn intermediate compiled form used by the V8 engine before JavaScript executes.V8 engineChrome’s JavaScript and WebAssembly runtime, used to execute code from web pages.V8 isolateA separate JavaScript execution context created by the V8 engine to separate runtime state.VacancyA job opening posted to support recruitment and, in some cases, compliance steps.Vacuum dryingA drying method that uses lowered pressure to help moisture leave a material more easily.Vacuum-driven dot matrixA grid-based display that relies on suction or pressure changes to form patterns.Vagus nerveA major nerve that helps connect the brain with internal organs and supports autonomic regulation.Valid credentialAn accepted login token, key, or secret that proves identity to a system.Valid-account reuseAbuse of stolen or reused credentials to log in as a legitimate user.Validation BypassA weakness where input or request checks are skipped, misapplied, or too weak.Validation environmentAn isolated setup used to check whether a suspected vulnerability can be reproduced safely.Validation gapthe space between an attacker claim and independently confirmed incident facts.Validation rulea check that confirms whether data follows the expected format or business logic.Validation stepA check performed by a person to confirm that an AI-generated result is accurate, safe, or appropriate before use.Validation-to-dispatch mismatchA bug where input is checked one way but later executed through a different path.Validatora node that helps secure and run a proof-of-stake blockchain by proposing or attesting to blocks.Valuation compressionA drop in market multiples when expectations cool or funding conditions tighten.Valuation riskThe chance that unresolved technical or contractual issues reduce the price a buyer is willing to pay.Value for moneyThe principle that a product’s costs should be justified by its benefits, features, and expected performance.Value metricsMeasures that track whether AI delivers outcomes such as productivity, trust, efficiency, or revenue.Value realizationThe process of proving that a feature delivers measurable business benefit, not just technical capability.Value-chain upgradingThe process of moving into more profitable or knowledge-intensive stages of production.Values washingEthics language or responsible-AI messaging that is not backed by real operational controls.Valutazione di rischioThe process of judging whether a client, case, or activity needs closer scrutiny.Vantage pointthe position or angle from which something is observed.Vapor pressureThe pressure exerted by a substance's vapor when it is in balance with its liquid or solid form.VariabilityDifferences in how systems, services, or processes are run in practice.Variable rateAn interest rate that can change over time under the product’s terms.Variant processingThe server-side step that creates resized or transformed versions of uploaded files.VAT deductionthe process that lets a business recover eligible value-added tax on purchases.VAT revenueTax income collected from value-added tax on goods and services.VBSVirtualization-Based Security, a Windows architecture that uses the hypervisor to isolate sensitive security functions.VBS enclaveA software-based trusted execution environment in Windows that isolates sensitive code and data from the rest of the system.VBS fileA Visual Basic Script file that can be used as a Windows-native launcher for malicious activity.VBSpamA comparative test that measures how email security products handle wanted, unwanted, and malicious mail streams.vCenterVMware's central management system for administering ESXi hosts and virtual infrastructure.vCenter ServerVMware’s centralized management platform for hosts, virtual machines, and access control.vCPUA virtual CPU allocation used to size cloud instances and, in some products, to anchor licensing.VDDKVMware Virtual Disk Development Kit, a toolkit used by some software to work with virtual disks.VDPVulnerability Disclosure Policy, a formal method for receiving and handling security reports.VDRVulnerability Detection and Response, a framework for finding, assessing, and remediating weaknesses continuously.Vector dataData used to support similarity search and retrieval in AI systems.Vector indexa searchable data structure used by AI systems to retrieve related content.Vector indexingA search method that organizes embeddings so retrieval systems can find relevant content faster and with less compute.Vehicle HALThe layer that mediates access between Android components and vehicle hardware interfaces.Vehicle immobilizationA function that prevents a car from starting or moving.Velocity controlA fraud-control rule that limits how quickly or how often transactions can be made.Velocity limitscontrols that slow down rapid sign-ups, logins, or transactions.Vendor access reviewA security check on what external providers can see, change, or extract.Vendor announcementA product or service disclosure used to introduce new features, launches, or updates.Vendor assessmentA formal review of a supplier’s security, reliability, and compliance posture.Vendor certificationA formal approval process that checks whether a provider meets required security or compliance standards.Vendor consolidationReducing the number of suppliers in a category to simplify operations and purchasing.Vendor continuityThe expectation that a software provider will keep supporting a product over time.Vendor credibilitythe degree to which a security company is seen as trustworthy and technically legitimate.Vendor relianceDependence on external suppliers or service providers for security, infrastructure, or business operations.Vendor sprawlA growing mix of suppliers and platforms that can fragment control.Vendor supportThe maintenance a manufacturer provides for a product or feature.Vendor trustThe confidence customers place in a supplier’s reliability, supportability, and long-term security posture.Vendor-hosted environmentA system operated by a third party, which can limit direct visibility during investigations.Vendor-linked accountan external or third-party login that connects into a company environment.Vendor-manageda service operated by the company that built the underlying platform.Vendor-Managed PlatformA system operated by a supplier rather than directly by the customer organization.Vendor-neutral certificationA credential focused on skills that apply across different tools and companies.Vendor-supplied codeCode packaged by the software or hardware vendor, often trusted more than ordinary applications.VenomRATA remote access trojan used to control infected Windows systems and support follow-on malicious activity.Venture firmAn investment company that backs early-stage businesses in exchange for equity.Venue marketingpromoting a message through a prominent physical location.Venue operationsThe physical planning that supports a live event, including access and equipment flow.VERVulnerability Evaluation and Reporting, the process for judging impact and providing structured vulnerability status.VeraCryptAn open-source tool used for encrypted disks and containers.VerbalizationThe formal recording of meeting discussions and decisions into minutes or an official record.VerdictA jury’s formal decision on the facts and liability in a case.Verifiabilitythe capacity to confirm a result against evidence or records.Verifiable consentClear authorization that can be checked and limited to specific actions or transactions.Verifiable evidenceProof that a security control was implemented and can be shown to exist or operate.Verifiable Execution RecordA structured record of signed execution events and the state changes they produce.Verifiable parental consentA confirmation step designed to make sure a parent approves data collection from a child.Verifiable proofDocumentation or data that can be checked to support a stated claim.Verifiable resultsoutcomes that can be checked with evidence rather than assumed from spending alone.Verification bottleneckThe slowdown created when code can be produced faster than teams can safely review it.Verification callbackA separate, trusted contact method used to confirm a suspicious request.Verification channelA separate communication path used to confirm high-risk requests.Verification checksidentity and compliance steps used to reduce fraud and meet legal requirements.Verification debtThe backlog of review, checking, and accountability work created when generation is faster than oversight.Verification gapthe space between a claim and independently confirmed incident facts.Verification habitsThe routine of checking information, sources, and outputs before trusting or sharing them.Verification independenceThe idea that the reviewer or test path should not be controlled by the same system that produced the work.Verification lagthe delay between an allegation and confirmed technical facts.Verification metadataTechnical records created during an identity check, such as timestamps or status fields.Verification of PayeeA payment control used to improve confidence in recipient details before a transfer is completed.Verification organizationA third-party entity that checks whether a system’s safety or risk claims are supported by evidence.Verification pagea screen that claims to confirm access or legitimacy and can be impersonated to build trust.Verification promptA screen or check intended to confirm legitimacy, but often imitated by attackers.Verification renewalA periodic requirement to repeat identity checks after a set time window.Verification triagethe first defensive check used to test whether an alert matches real activity.Verification triggeran alert that calls for internal review before conclusions are drawn.Verification-first scanningA method that checks whether a found secret is still active before treating it as urgent.Verified accessA control that limits sensitive capabilities to users or organizations that have been checked or approved.Verified AccountA platform identity marked as official or authentic, which can increase trust but does not guarantee safety.Verified compromiseevidence that confirms a real intrusion, not just a public allegation.Verified credentialsDigital proofs that let a user demonstrate specific facts without sharing every detail.Verified dataInformation that has been checked against reliable primary sources before it is used in a decision.Verified domainA controlled organization domain used to help bind users to trusted enterprise identities.Verified factinformation supported by evidence, not by a claim alone.Verified fixespatches that are checked before release to reduce the risk of introducing new problems.Verified impactconfirmed evidence that shows what was actually affected.Verified profileA platform identity marker that signals authenticity but does not guarantee account security.Verified resultan output that has been checked and accepted for use.Verified vulnerabilityA security flaw that has been checked and confirmed as real rather than speculative.VerifierAn independent checker that confirms whether an AI-generated result is valid or consistent.Version BranchA specific software line that may receive different fixes and support rules from the vendor.Version complianceThe process of confirming that systems are running the intended patched software build.Version currencyKeeping software on the latest approved release to reduce exposure to known issues.Version floorThe minimum software version that contains a security fix and should replace older builds.Version historyA change-tracking feature that preserves earlier states of a file or workflow.Version parityA state where servers and agents are running the same remediated software level after patching.Version skewThe condition where different devices or platforms are running different software builds during a staggered rollout.Version thresholdThe specific software build at or above which a vulnerability has been fixed.Version triageThe process of checking exact software builds to determine whether they are affected by a vulnerability.Version updateA dependency refresh based on a newly published software release.Version update pull requestA proposed change that updates a dependency to a newer release.Vertical AIAI designed for one domain, where rules and context matter more than general-purpose flexibility.Vertical marketplaceA marketplace focused on one sector or product category, often requiring tighter data standards.Vertical videoA full-screen mobile format designed for handheld viewing.Veto powerThe practical ability to stop or override an AI-driven decision.Vetrinizzazione socialeA social dynamic where people present themselves as if they were on display.Vetted defendersTrusted security users who receive access to sensitive tools under controlled conditions.vGPUVirtual GPU technology that allows multiple virtual machines to share GPU resources.VHDA virtual hard disk file format used to package disk images and mount them as virtual drives.VHD/VHDXVirtual hard disk formats used to store and mount profile or data containers in virtualized systems.VHDLA hardware description language used to model digital circuits before implementation.VHFVery High Frequency, a radio band used for voice and data transmission.vhostThe Linux kernel backend that accelerates some virtio devices.VHSAn analog videocassette format used for recording and playing back home video.vi-compatibleable to follow the editing model and commands associated with vi.Vibe-coded appSoftware built primarily with AI-generated code and natural-language prompting.VibrationRepeated mechanical oscillation that can signal imbalance or stress in rotating systems.Vibration adhesionsticking behavior that changes when repeated motion is applied.Victim announcementa public posting that names a target in an extortion context.Victim attributionThe process of linking a threat claim to a real organization, which can remain uncertain.Victim claimingan allegation that may not prove full compromise.Victim counta recorded tally that may reflect listings, claims, or reported incidents depending on methodology.Victim designationthe named target, which may remain unclear or undisclosed.Victim fielda metadata slot used to name or describe the targeted entity.Victim hasha unique identifier used to label a claimed target or incident.Victim identificationthe process of linking an incident to a specific organization.Victim identifierthe domain or label attached to the claimed target.Victim labelan attribution that identifies a company or organization as targeted.Victim ledgera public listing used to name claimed targets in extortion campaigns.Victim maskingpartial redaction used to obscure an identity while signaling an alleged target.Victim namingthe public identification of a target in an extortion post or claim.Victim notificationthe act of naming a target in a ransomware context.Victim outreachThe process of contacting affected users or organizations to help them remediate an incident.Victim profilingA process that ranks targets by indicators suggesting value, access, or usefulness to attackers.Victim publicationa public listing used to pressure a named target in an extortion case.Victim scoringA ranking method that prioritizes compromised systems by value, access, or usefulness.Victim supportAssistance given to affected organizations during response, recovery, and investigation.Victim verificationchecking whether a claim matches internal evidence.Victim website fielda metadata entry that may be missing, blank, or undefined.Victim website statusWhether a target site is identified, reachable, or undisclosed.Victim-specific loaderA loader that decrypts or activates payloads only in the intended target environment.VictimologyThe pattern of who is targeted, which can help analysts understand intent and actor focus.Victorian eraThe 19th-century period when science, engineering, and industry advanced rapidly.ViDAThe EU tax initiative focused on VAT in the digital age and modernized reporting.Video identificationA remote method for checking identity during online onboarding.Video outputThe display feedback that lets an operator see the state of a machine.Video pipelinethe chain of steps that moves camera data to the screen.Video Processing Unit (VPU)A specialized component that handles video-related processing on a device.Video qualitythe resolution or clarity level delivered by the platform.Video surveillanceCamera-based recording that can capture identifiable people, locations, and behavior.View frustumThe visible volume of a scene that the camera can render.View-stateA web application mechanism that preserves page state between requests, protected by cryptographic validation.Viewabilitywhether an ad was actually visible on a screen, not just served by a system.Vima highly configurable text editor built for fast keyboard-driven editing.ViralityRapid, wide circulation of content across users and networks.virtioA standard for efficient guest-to-host device communication in virtual machines.virtio-fsA filesystem sharing layer used by virtual machines to access host files through a mediated path.VIRTIO-NetA standard virtual network device model used by guests to exchange network data with the underlying platform.Virtual assetsdigital representations of value that can be transferred or traded.Virtual cella computational model that imitates biological behavior for testing hypotheses.Virtual channelA protocol path used by RDP to carry specific classes of data, such as clipboard content.Virtual environmentA simulated computing space that reproduces system behavior in software.Virtual histologyA method for examining tissue structure in 3D without immediately cutting the sample into slides.Virtual hospitalA care model that delivers some services outside the physical hospital setting.Virtual keyA scoped access key used to grant limited access through the gateway.Virtual machine (VM)An isolated software computer that runs inside another system.Virtual machine escapeA breakout from a guest environment into the host or another higher-trust layer.Virtual machine obfuscationA protection method that moves logic into a private instruction system to complicate reverse engineering.Virtual memoryA memory-management method that uses disk space to extend usable memory.Virtual patchingA compensating control that helps block exploitation attempts around a vulnerable system without changing the system itself.Virtual serverA BIG-IP configuration object that defines how traffic is handled and which policies apply.Virtual summitAn online event format for talks, panels, and briefings.Virtual SwitchSoftware that bridges a host or virtual machine to network traffic paths.Virtual walletA digital account used to receive or store payments online.Virtual-memory errorsmemory allocation failures that can interrupt malicious execution.VirtualAllocExA Windows API used to allocate memory in a remote process.Virtualization control planeThe administrative layer that manages virtual machines and host infrastructure.Virtualization frameworkApple’s framework for creating and managing virtual machines, including Linux guests, on supported Mac hardware.Virtualization StackThe combined layers of hypervisor, management tools, and guest systems that deliver virtual infrastructure.Virtualization-based Security (VBS)A Windows architecture that uses hardware virtualization to isolate security-sensitive functions.Virtualization/Sandbox EvasionA technique category for detecting or bypassing analysis and containment environments.virtuser_queryA Roundcube component named in technical advisories as the affected code path for this issue.VirusTotalA file and URL analysis platform that aggregates multi-engine detection results.ViseA clamping tool that holds an object steady during work.Visibility boundaryThe line between data meant for the device owner and data visible to others.Visibility layerThe combined reporting and monitoring context that shapes what defenders can observe and count.Visibility riskthe chance that a change in presentation affects how easily something is found.Visibility trackThe geographic path where a celestial event can be observed most clearly.Visible light transmissionThe ability of a material to let visible light pass through it.Visible outputThe part of a system that users can directly see on the display.Visitor managementsystems used to register, track, and control site access.Visitor-Aware DeliveryContent delivery that changes based on who is requesting it.Visual cuea feature people use to recognize meaning, quality, or identity at a glance.Visual effectA designed appearance meant to create a specific impression for viewers.Visual framingthe use of editing, angles, and pacing to shape how information is presented.Visual illusionan image or effect that appears different from its underlying physical steps.Visual minimalismA design approach that reduces clutter so the main message is easier to read.Visual spoofingcontent that can resemble legitimate interface elements and mislead users.Visual Studio CodeA code editor and development environment that supports extensions and workspace trust controls.Vital functionsbasic processes needed to sustain life, such as breathing and heartbeat regulation.Vital SystemsThe minimum set of systems and networks required to deliver a critical service and preserve continuity during disruption.ViteA frontend build tool with a local development server used for fast web app development.VLAan acronym used in the article for Google-related model work; the source summary does not specify the full expansion.VLANA virtual network segment used to separate devices and reduce unwanted access across a network.VLAN segmentationA way to split a network into logical segments to limit traffic exposure.VLFVery Low Frequency radio used for long-range transmission, including time signals.VLOSEVery Large Online Search Engine, a reported designation used in the DSA context for major discovery services.VM isolationUsing virtual machines to separate workloads so one tenant's process space is separated from another's.VMDKA VMware virtual disk file format that stores the contents of a virtual machine disk.VMware VMCIA VMware guest/host communication interface that can move data inside the virtualization layer.VMware vSphereVirtualization platform used to run and manage virtual machines.VMXNET3A VMware virtual network adapter used for high-performance networking inside virtual machines.VNCA remote desktop protocol family used for viewing and controlling computers over a network.Voice Activity Detection (VAD)A method that detects when speech is present so a system can avoid processing silence.Voice Anti-SpoofingControls designed to detect cloned, replayed, or synthesized audio in voice-based authentication systems.Voice biometricsA method of checking identity using speech characteristics, which can be vulnerable to synthetic audio.Voice commentsaudio-based responses posted in place of or alongside text.Voice impersonationMimicking a person’s voice to deceive a target into believing the caller is real.Voice inputA method of controlling a system by speaking instead of typing.Voice modeA conversational speech interface where the user and AI interact aloud, usually creating stored text records.Voice spoofingThe imitation of a person’s speech or vocal pattern to mislead a target.Volatile dataInformation that can disappear or change quickly, such as memory contents or live connections.Volatile stateData that can disappear or change when a system is powered off or accessed.VolitionThe act of choosing intentionally, rather than by accident or default.Volturea contract change tied to a change in the service holder.Volume Shadow Copy ServiceWindows feature that creates restore-friendly snapshots of files and volumes.Volumetric imagingA method for capturing information across multiple depths so the result is a three-dimensional view.Voluntary assessmentA security review that an organization chooses to request or participate in, rather than one imposed by mandate.Voluntary measurea safeguard that depends on choice rather than enforceable duty.Voluntary slowdownA non-binding proposal to pause or reduce some AI activity, depending on how the pause is defined.Voter databaseA system that stores election registration and eligibility records.Vouchera public contribution that reduces the cost of approved purchases under specific rules.Voucher Cloud & Cybersecuritya public incentive program tied to cloud and cybersecurity purchases.VPC Flow LogsAWS network logs that record IP traffic to and from VPC interfaces.VPN certificateA digital credential used to prove identity during VPN authentication.VPN clientsoftware used to create encrypted remote access to a network.VPN control planeThe part of a VPN system that handles negotiation, authentication, and session setup.VPN keysSecrets used to authenticate and secure virtual private network connections.VPN serverThe remote endpoint that receives encrypted traffic from the user’s device.VPN server addressThe hostname or IP address a remote user connects to for VPN access.VPN sessionAn encrypted remote connection that can be abused if trust checks fail.VPN trust modelThe set of technical and organizational controls a user relies on when sending traffic through a VPN provider.VPN-over-DNSA tunneling technique that uses DNS as a transport path for nonstandard traffic.VPNv2 CSPThe Windows management interface used to configure VPN profiles through MDM tools.VPS management softwareTools used to create, control, and maintain virtual private servers.VRFVirtual Routing and Forwarding, a way to separate routing tables on the same device.VS CodeA widely used code editor that supports extensions to add features and language tooling.VShell RATA remote-access trojan associated with interactive control and memory-resident execution.vSphere ClientVMware’s interface for managing virtualized environments and related administrative functions.Vulnerability AssessmentA structured process for finding, analyzing, and prioritizing security weaknesses.Vulnerability backlogA growing set of unresolved security findings waiting for triage, remediation, or verification.Vulnerability ChainTwo or more flaws used together so that one helps lead to the next and increases impact.Vulnerability clearinghouseA centralized process for collecting, triaging, validating, and routing software flaw information.Vulnerability data qualityThe accuracy, completeness, and consistency of vulnerability records used by defenders and tools.Vulnerability Disclosure ProgramA public channel for reporting security issues, usually without guaranteed payment.Vulnerability exploitation windowThe time between a flaw becoming known and attackers using it in the wild.Vulnerability Operations PlatformA workflow layer that helps consolidate findings, prioritize risk, and coordinate remediation.Vulnerability probingRepeated testing of a service to look for weaknesses that might be exploited.Vulnerability reportingThe structured disclosure of a security flaw so it can be assessed, mitigated, and tracked.Vulnerability Reward ProgramA structured payout system that rewards researchers for responsibly disclosed security flaws.Vulnerability validationThe process of checking whether a suspected flaw is real and reproducible.Vulnerability-management platformSoftware used to identify, track, and prioritize security weaknesses across systems.Vulnerable componentA software element with a known weakness that may raise security risk.VURAA shorthand for visible, understandable, repeatable, and auditable.W-9 forma tax document that can contain identity and payment-related details.WAF (Web Application Firewall)A filter that inspects web traffic and can block suspicious requests before they reach an application.WAF fingerprintingProbing a web application firewall to infer its presence, behavior, or configuration from responses.WAICOan initiative or organization associated with AI cooperation in Shanghai; exact legal status and membership are not confirmed in the baseline.Waiting roomA holding area that delays entry until a host admits a participant.WaiverA formal exception that removes or limits a specific regulatory obligation under defined conditions.Wake vortexa swirling airflow left behind by a moving object.Wall wartA small plug-in power adapter commonly used with consumer electronics.Wallet approval flowThe sequence in which a user reviews and signs a crypto transaction or authorization request.Wallet fileA local file or artifact associated with cryptocurrency access, often valuable to attackers if stolen.Wallet fingerprintingBrowser-side detection of installed crypto wallets or extension artifacts to identify higher-value targets.Wallet freezea restriction that blocks movement from specific addresses during an investigation.Wallet functionalityThe user-facing controls for sending, receiving, or managing digital assets.Wallet importThe setup step where an existing wallet is restored into new software.Wallet import flowThe setup process used to restore access to a crypto wallet.Wallet infrastructurethe backend systems that support a crypto wallet service.Wallet injectiontampering with wallet-related input or display flows to capture secrets or alter actions.Wallet mappinga link between a person and a crypto address or transaction trail.Wallet secretsensitive information used to control a cryptocurrency wallet, such as recovery material or private access data.Wallet seed phraseRecovery words used to restore a crypto wallet and derive its keys.Wallet serviceA platform that helps users store, send, or manage cryptocurrency.Wallet stealerMalware designed to capture cryptocurrency wallet material such as seed phrases, private keys, or browser-stored wallet data.Wallet swappingreplacing a cryptocurrency address with another one to redirect payments.Wallet trailA sequence of blockchain transactions that may help investigators follow the movement of cryptocurrency.Wallet-draining scriptMalicious code that attempts to move cryptocurrency from a victim-controlled wallet.Wallet-layer controlsRules inside a digital wallet that enforce spending limits, approvals, and counterparty restrictions.Wallet-stealingMalicious code aimed at capturing information used to access a crypto wallet.WalletServiceA Windows service tied to wallet-client functionality and present on some deployments.WallhackA cheat that reveals players or objects through walls and other obstacles.Wanted systemThe gameplay logic that controls police attention and response.Warehouse automationSystems that support storage, picking, and fulfillment operations.Warehouse estateA centralized analytics environment that stores large data collections.Warehouse management systemSoftware that tracks inventory, picking, packing, and dispatch inside a distribution site.WargamingA structured exercise that explores conflict scenarios and possible responses.Warm walletAn intermediate custody layer that is more accessible than cold storage but less exposed than a hot wallet.Warning frictionA small delay or extra step that can interrupt rushed, unsafe decisions.WarrantyA limited support period during which the maker may repair or replace a product.Warranty messagingThe notices and support paths that explain statutory and commercial product remedies.Waste managementthe long-term handling, storage, and disposal of hazardous byproducts produced by an industrial process.Waste streamThe path a discarded material follows through collection, sorting, processing, or landfill systems.Watch-listA curated set of reference identities used by a biometric system to generate matches or alerts.Watchdog timera safety mechanism that reboots a device if software stops responding.WatcherElasticsearch feature for scheduled checks and automated actions.Water blockA metal part that transfers heat from a chip into the coolant.Water coolingA method that uses liquid to carry heat away from components.Water ISACA sector information-sharing body that helps water organizations exchange threat intelligence and incident details.Water usethe water demand linked to operating digital infrastructure and related services.Water use efficiency (WUE)A data center metric for how much water is used per unit of IT power consumption.WaterfallA sequential delivery model that uses fixed phases and formal handoffs.Waveguide arrayA group of waveguides arranged together to capture more detailed spatial information.Ways of WorkingThe delivery methods and practical techniques used to plan and run projects.WCAGWeb Content Accessibility Guidelines, the main international benchmark for accessible web content.WCAG 2.2Web accessibility guidelines with testable criteria for making digital content more usable for more people.Weak AuthorizationA control failure where access checks are too permissive or incomplete.Weak solutionA generalized solution that satisfies the equations in an averaged sense, even if it is not smooth.Weaponizable fileA file type that is commonly abused to deliver malware or other harmful code.Weapons diversionthe movement of arms from lawful or military control into illegal markets.Weargradual loss of performance caused by use, tension, or friction.Wearable computingTechnology worn on the body that interacts with digital systems.Wearable displaya screen worn close to the eyes for private viewing.Wearable modA modified wearable device that adds or changes functionality beyond the original design.Wearable sensorA sensor designed to be worn on the body and collect physical data.Wearable techTechnology built for body-worn use in everyday settings.Weather instrumentA tool used to observe atmospheric conditions and support forecasting.Weather patternA recurring atmospheric condition that can influence temperature and storms.Weather radarA radar system used to observe atmospheric conditions by detecting reflected radio energy.Weatherproofingdesign measures that help electronics withstand moisture, dust, and temperature changes.Web AccessThe remote browser-based interface used to manage or monitor a device.Web applicationsoftware delivered through a browser rather than installed as a native desktop program.Web application root directoryThe top-level file area of a web app, where sensitive content should be kept to a minimum.Web bloatunnecessary page weight caused by excess resources or complexity.Web browserSoftware used to view web content and run browser-based applications.Web callingBrowser-based calling that extends access beyond the mobile app.Web compromiseunauthorized alteration or control of a website or web server.Web DispatcherAn SAP component that can route and manage inbound traffic to backend systems.Web filteringPolicy-based blocking or allowing of sites, categories, or content.Web FormsAn older ASP.NET model built around server controls and stateful page behavior.Web injectorMalware that alters web content or browser behavior by injecting code into a live session.Web integritythe trustworthiness of a website's content, files, and behavior.Web logsserver records that can help confirm access patterns, errors, and suspicious activity on a website.Web Management PlaneThe browser-based admin surface used to configure and control a device or service.Web panelA browser-based control interface used to manage systems, tasks, or campaign activity.Web PentestingAuthorized testing of web applications to find security weaknesses before attackers do.Web ProtocolsInternet communication methods such as HTTP and HTTPS that can be abused to make malware traffic look normal.Web push notificationsBrowser-delivered alerts sent by a website, sometimes even when the page is not open.Web server compromiseunauthorized control of a server that can change content, redirects, or behavior.Web Server UserThe operating-system account used by the web server process, often with limited but useful permissions.Web taxA digital tax applied to certain online revenues or services.Web tokenA session credential that can authenticate a user to an online service without re-entering a password.Web traffic redirectionSteering browser requests to a different page than the user intended to visit.Web-accessible directoryA server path that can be reached through a browser and may serve files directly to the public.Web-based toola tool accessed through a browser rather than installed locally.Web-facing assetan internet-exposed site or service that may become an attack target.Web-facing domaina public internet asset that can be named in an attack claim.Web-facing exposurean internet-reachable service that may increase attack surface.Web-facing infrastructurePublicly reachable services and applications exposed to the internet.Web-facing servicean internet-accessible system that can become a high-value target.Web-managed switchA switch that can be configured through a browser-based interface.Web-management interfaceThe browser-based panel used to configure and administer a router.Web-server compromiseUnauthorized control of a public-facing server, often used to host, redirect, or alter content.Web-to-LeadA public form workflow that sends website submissions into CRM lead records.WebAudioA browser API for creating, processing, and synthesizing audio in web applications.Webcam feedA stream of images or video published from a camera over the internet.WebExtensionThe standard browser add-on framework used by Firefox extensions.WebExtensionsThe browser add-on framework used by Firefox, built around permissions and scripts that can interact with web pages.WebExtensions APIFirefox’s add-on framework, which lets extensions request powers such as cookie access.WebFigMikroTik’s browser-based management interface for configuring and troubleshooting RouterOS devices.WebGPUA graphics API that lets web apps access GPU capabilities for rendering and computation.WebLogic ServerOracle’s Java application server, often used as the runtime foundation for enterprise apps.WebLogic Server Proxy Plug-InThe module that forwards requests from Oracle HTTP Server to Oracle WebLogic Server.Webmail abuseMisuse of an email web interface to read, alter, or impersonate mailbox activity.Webmail clientA browser-based email interface that renders messages and mailbox data.WebMCPAn experimental Chrome feature related to structured agent-tool interactions on the web.WebrootThe directory exposed to the web server where public site files are served from.WebSEALIBM’s policy-enforcement gateway used in front of protected web resources.WebSocket tunnelingMoving traffic through WebSocket channels so it can blend with normal web communications.WebSocketsA protocol that maintains a long-lived connection over HTTP/S, often used for interactive web apps and sometimes abused for malware traffic.WebUIA browser-based interface used to manage or configure a device.WebUSBA browser API that allows web pages to communicate with compatible USB devices after user permission.Weighted criteriaA scoring method that assigns different importance levels to evaluation factors.WeightsLearned model parameters that determine how an LLM responds.Well-tempereda phrase associated with tuning, though its exact meaning here is not specified.Weroa European payment initiative aimed at broader digital usability.Wet labLaboratory work using physical biological samples and experiments.wfreerdpThe Windows client component of FreeRDP used to launch and manage RDP connections.WhatsApp Business PlatformThe business-facing messaging framework used for customer engagement at scale.WhatsApp FlowsA WhatsApp business feature for guided, in-chat forms and structured customer interactions.Whistleblower channela protected internal reporting path for sensitive complaints.Whistleblowing channela protected path for reporting suspicious conduct internally.White-labelHardware made by one company and sold under another brand name.White-label operatora company that markets a product under its own brand.Whitebox penetration testA security assessment done with internal knowledge of the code or system design.Whole-slide imageA high-resolution digital scan of an entire microscope slide.Wholesale serviceCarrier capacity sold to another provider or customer rather than directly to end users.Wi-Fi CallingA carrier feature that routes voice calls over internet access instead of relying only on mobile radio coverage.Wi-Fi discoveryThe scanning and signaling behavior devices use to find nearby wireless networks.Wi-Fi radioThe wireless hardware used to send and receive Wi-Fi signals.Wi-Fi securityControls and policies that protect wireless access and connected devices.Widget instanceA saved copy of a WordPress widget’s settings and state.Widgets BoardA Windows panel for glanceable content such as status updates and device information.WiFi profile exportAn administrative process that can reveal saved wireless network settings, including keys in some cases.WiFi routerA network device that connects local devices to wireless and wired networks.Wii Nunchuka controller accessory originally made for the Nintendo Wii.Wiki talk pageA persistent discussion page on a wiki that can be edited and reused as a shared communication surface.WikiWebA collaboratively editable web knowledge system, often designed for simple public contributions.Win+RThe keyboard shortcut that opens the Windows Run dialog, a common point in ClickFix-style execution chains.Win32The traditional Windows application model used by many desktop programs.Win32 callback APIA Windows interface that lets an application register code for later invocation by the system or another component.Win32 callback APIsWindows interfaces that let programs trigger functions in response to events, sometimes abused for stealthier execution.Window focusThe active window that receives keyboard input and user interaction.Window HopperA PowerToys feature for faster switching between windows in the same app.Window stateThe size and placement of an app window when it opens or runs.Windows 11Microsoft's current desktop operating system, delivered through numbered feature releases.Windows 11 beta buildsPre-release Windows versions used to test changes before wider release.Windows 11 regressionA new software problem introduced by an update or change in the operating system.Windows 98A legacy Microsoft operating system designed before today’s USB hardware became standard.Windows autostart persistenceA way malware can launch automatically when a user logs in, helping it survive reboots.Windows code integrityA Windows security mechanism that helps enforce trust rules for code before it runs.Windows command shellA command-line interface often abused to run system commands during an intrusion.Windows Credential ManagerA Windows feature that stores saved credentials for apps and browsers.Windows Deployment Services (WDS)A Windows Server role used for network-based Windows deployment.Windows desktopA securable workspace in Windows that handles windows, input, and display activity for a session.Windows EndpointA computer running Windows that is managed as part of an organization’s device fleet.Windows Endpoint Security AgentProtection software that runs on a device to detect, block, and respond to threats.Windows fleetThe collection of Windows devices managed by an organization.Windows Hello ESSEnhanced Sign-in Security, a Windows Hello mode that adds stronger isolation to biometric sign-in.Windows Hello for BusinessMicrosoft’s enterprise passwordless sign-in system built on device-bound keys.Windows Hello for Business (WHFB)Microsoft’s enterprise passwordless sign-in system that uses device-bound keys plus a local unlock factor.Windows IoT Enterprise LTSCA long-term servicing channel for specialized devices that need extended stability.Windows IPCInterprocess communication methods that let applications and services coordinate.Windows loaderThe operating system component that resolves and loads DLLs, including through a search order that can be abused.Windows Management InstrumentationThe Windows framework behind system inventory, configuration, and management functions.Windows Plug and Play (PnP)Windows feature that detects hardware and helps install the correct drivers automatically.Windows Protected Process Light (PPL)a Windows protection model for making certain processes harder to tamper with.Windows ransomwaremalware that targets Windows environments and encrypts data for extortion.Windows RegistryA Windows configuration database that can store settings, launch points, or loader data.Windows RunA built-in dialog for launching programs, paths, and commands quickly.Windows Script Host (WSH)A Windows component that executes script files such as VBScript and JScript from within the operating system.Windows Scripting HostA Windows component that runs scripts such as VBScript and can become a malware execution path if left exposed.Windows serviceA background component that can run independently of a user session and may hold elevated rights.Windows settings backupA Windows feature that preserves selected user settings and related app data for restoration.Windows ShellThe Windows user interface layer that helps manage desktop and file interaction.Windows shortcut (LNK)a Windows shortcut file that can be abused to launch hidden commands or payloads.Windows shortcut file (.lnk)A shortcut format that can launch programs or commands and is sometimes abused to hide malicious behavior.Windows SmartScreenA Microsoft reputation feature that warns users about potentially unsafe apps and downloads.Windows Subsystem for LinuxA compatibility layer that lets Windows run Linux user-space tools and environments.Windows Task HostA Windows system component named in the vulnerability alert.Windows Update scanthe check a device performs to find updates that are available or missing.Windows Update StackThe Windows servicing path that installs operating system updates.Windows VaultA Windows storage area used for saving credentials and other secrets.Windows-onlySoftware that runs on Microsoft Windows and not on other operating systems.WinlogbeatAn Elastic component that collects Windows event logs and forwards them for search or analysis.WinSockMicrosoft’s Windows Sockets networking interface, used by applications and system components for network communication.Wire dataNetwork traffic reconstructed into structured records for analysis and investigation.Wire fraudA scheme to defraud that uses interstate wire communications in furtherance of the fraud.Wireless companionA separate device used to provide network connectivity or radio functions.Wireless credentialsThe passwords or keys used to join and secure a Wi-Fi network.Wireless hygieneGood operational practices for radio systems, such as careful configuration and minimizing unnecessary signal exposure.Wireless impersonationThe act of copying a network name or presence to mislead users.Wireless intrusion preventionControls intended to detect or block hostile wireless activity.Wireless LCD streamingTransmitting what a screen shows without a wired display connection.Wireless meshA network design where devices can relay traffic through one another to extend coverage.Withdrawalthe act of taking back previously given permission.Withdrawal conditionsthe contractual rules that apply if a customer ends the agreement early.Withdrawal controlsAccount settings that limit or verify outgoing transfers from a crypto platform.Withdrawal flowThe user journey that lets a shopper cancel a distance purchase within the required process and timeframe.Withdrawal monitoringdetection of unusual transfer behavior, timing, or volume that may signal abuse.Withdrawal suspensionA temporary block on outgoing transfers used to slow losses and support investigation.Withholding taxTax deducted automatically before income reaches the account holder.WMI event subscriptionA Windows mechanism that can be abused to trigger code when specific system events occur.WMI persistenceA technique that uses Windows Management Instrumentation event subscriptions to maintain access.wolfSSLAn open source TLS library designed for small-footprint and resource-constrained environments.Word processorSoftware used to create and edit document text.Word splittingShell behavior that breaks text into arguments, which can be risky with untrusted input.WordPress AdministratorThe most privileged single-site WordPress role, with broad control over users, settings, and plugins.WordPress Media LibraryThe built-in WordPress area for storing and managing uploaded media files.WordPress themeA set of server-side templates and assets that controls site appearance and can also influence page logic.Work authorizationOfficial permission to work in a country or jurisdiction, often controlled through visas or permit systems.Work factorAn estimate of the computational effort needed to complete an attack.Work itemA tracked project object, such as an issue or similar planning record.Work ProfileAn Android-managed space that separates certain apps and data from the personal profile.WorkbookAn Excel file that can include sheets, formulas, charts, and data.Worker controlThe ability of employees or their representatives to understand, limit, and govern how workplace data is used.Worker isolationA defensive design that separates risky file-processing tasks from core service threads or processes.Worker psychologythe emotions, stress, and motivation that shape decisions at work.Worker surveillanceMonitoring of employees that can exceed legitimate safety needs if not tightly limited and justified.Worker-Augmenting AIAI designed to improve human performance and productivity instead of replacing labor outright.WorkersSeparate JavaScript execution contexts that run tasks off the main browser thread.Workflow adapterA component that controls approval and lifecycle steps in identity management.Workflow approvalA security gate that requires review before untrusted automation jobs can run.Workflow baseliningThe practice of documenting and analyzing an existing process before changing it.Workflow compressionThe shortening of an attack process by automating or accelerating steps.Workflow consistencythe predictability of how a task appears and behaves across devices.Workflow dataLogs, traces, approvals, and metadata that record how an AI agent moved through a task.Workflow designthe structure of steps a user follows to complete a task correctly.Workflow detailsinternal process information that can help outsiders understand how systems are used.Workflow editorAn account role that can change and run automation workflows.Workflow EnforcementLogic that controls how actions proceed through a system; flaws here can break expected security checks.Workflow Identity HijackingA reported attack technique that appears to involve workflow-level identity or authorization abuse, allowing seemingly benign requests to trigger sensitive actions.Workflow integritythe reliability of the steps people use to review and act on information.Workflow managementSoftware that schedules, routes, and monitors business or production tasks.Workflow metricsMeasurements that track how work is actually performed, including quality, exceptions, and rework.Workflow resiliencethe ability of routine business tasks to keep running during disruption.Workflow riskThreat exposure embedded in routine business processes such as approvals, identity checks, and automation.Workflow secretsSensitive credentials made available to a CI job, such as API keys or tokens.Workflow validationThe process of proving that a technical pipeline works reliably under real operating conditions.Workforce amplificationUsing AI to extend human capability and productivity rather than simply replacing workers.Workforce bottleneckA shortage of skilled workers that slows projects, expansion, or maintenance.Workforce cutsStaff reductions that can change how much work an agency can handle at once.Workforce developmentTraining, hiring, and role design that build the human capacity needed to operate security controls.Workforce frameworka structured model for defining or evaluating roles and skills.Workforce pipelineThe flow of people entering, developing, and advancing through employment.Workforce redesignThe reshaping of roles, teams, and processes to fit new business tools or operating models.Workforce retentionthe ability of an organization to keep experienced employees over time.Working capitalThe cash a business needs to run day to day, often tied up in inventory and operations.Working fluidthe substance that carries energy or motion through a machine.Working memoryThe short-term mental workspace used to hold and manipulate information during a task.Working treeThe files actually checked out on disk after a repository fetch or sync operation.Workload attestationThe process of proving what is running before trust is issued.Workload IAMIdentity and access management for non-human actors such as services, automations, and AI agents.Workload identitiesNon-human identities, such as apps and service principals, that can authenticate to cloud resources.Workload Identity FederationA method for non-human systems to authenticate using trusted external identities instead of long-lived secrets.Workload intensityThe amount of effort, time pressure, and cognitive load a role demands over a given period.Workload IsolationSeparating systems so one workload cannot directly interfere with or access another without permission.Workload overloada state where too many tasks crowd out focus, rest, or priority work.Workload protectionSecurity controls focused on protecting servers, containers, databases, and other running cloud services.Workload SaturationA state where responsibilities, meetings, and after-hours demands exceed sustainable capacity.Workload segmentationThe practice of assigning different resources or prices based on intensity of use.Workload signalA measurable indicator that demand or task volume is rising.Workload smoothingScheduling and control methods that reduce sudden changes in power demand.Workload throttlingA reduction in service capacity or speed after usage limits are reached.Workplace interfaceThe web-facing component identified as affected in this case.Workplace platformthe core set of tools used for messaging, collaboration, documents, and daily office work.Workplace surveillanceMonitoring activity or behavior in an employment setting, often with serious privacy and power-balance concerns.Worksharethe division of tasks, value, and responsibilities among partners in a program.Workshop operationsThe service-side processes that support maintenance, repair and customer scheduling.Workstation GPUA graphics processor designed for professional tasks such as design, simulation, and AI workloads.Worm-like AttackAn attack pattern that may spread quickly or automatically across systems, often using trusted workflows.Worm-like campaignMalicious activity that appears to spread or replicate across connected systems.Worm-like capabilityBehavior that suggests the malware may spread or replicate across systems with limited manual help.WormableA flaw that can support automatic spread between vulnerable systems, often without user interaction.WP_ErrorA WordPress object used to represent failure states during core operations.wp_optionsA WordPress database table used to store site settings and other option data.WP_QueryThe WordPress core class used to build content queries.WP-CronWordPress’s built-in scheduled task system, triggered by site activity rather than a traditional OS cron job.WPA3A wireless security standard that improves authentication and encryption for Wi-Fi networks.wpautop()A WordPress formatting function that converts plain text and line breaks into HTML paragraphs.WPFWindows Presentation Foundation, a framework for building Windows desktop interfaces and document workflows.Wrench attackphysical coercion used to force a victim to surrender cryptocurrency access.Wrist-worndesigned to be worn on the wrist for convenient access during use.Writable rootThe top-level path an application is allowed to modify inside its working scope.Write AuthorityPermission for a system to create, edit, or publish content in another environment.Write permissionAccess that allows a system to change records, not just read them.Write surfaceAny system endpoint or feature that can change content, settings, or access.Write-back actionA tool-enabled step where an AI system changes records or triggers downstream systems.Write-path integrityThe assurance that authorized changes are the only changes made to data, configs, or code.WriteProcessMemoryA Windows API used to write data into the memory space of another process.Wyoming protocolA TCP-based protocol used by Home Assistant for structured voice-assistant communication.X serverThe display server that manages graphical output and input for X11-based systems.X-ray machineA device that generates X-rays for imaging or inspection.x86-64A 64-bit processor architecture common in modern PCs and also used in the PS5 platform.xargsA Unix utility that builds and runs commands from standard input, often used for bulk processing.XcodeApple’s integrated development environment used to build apps for macOS and other Apple platforms.XFSA high-performance Linux filesystem that manages data and metadata inside the kernel.XFS (eXtensions for Financial Services)The software interface that connects ATM applications to hardware such as the cash dispenser.XGBoostA gradient-boosted tree machine learning method designed for strong performance on structured tabular data.xHCIThe modern USB host controller interface used by newer PCs and laptops.XLSA spreadsheet file format that can be parsed by document-processing libraries and may carry malicious structure.XML parserSoftware that reads and interprets XML, turning structured text into data an application can process.XML processingThe part of a system that reads and interprets XML-formatted requests or data.XML Signature ValidationThe process of checking whether a digital signature correctly covers the intended XML content.XML Signature WrappingAn attack pattern that abuses XML structure so the verifier and the application disagree on what is trusted.XML-RPCA legacy remote procedure interface used by WordPress for compatibility and remote management functions.XMPPExtensible Messaging and Presence Protocol, an open messaging protocol used for real-time communication and signaling.XMRa cryptocurrency often used in ransom demands.XORA simple reversible operation often used in malware to hide strings from basic static inspection.XOR decodinga simple transformation sometimes used to reveal hidden configuration data.xp_cmdshellA SQL Server feature that can run operating-system commands from the database context.XPath ConstraintA rule used to filter which records an app user can reach.XPayAn online payment gateway used to process e-commerce transactions and connect a merchant site to payment processing.XPSXML Paper Specification, a document format and print pathway used by Windows rendering components.XPS foamClosed-cell extruded polystyrene foam, commonly used for insulation and packaging.XRP LedgerA decentralized blockchain that validates transactions through consensus among validator nodes.Xtensa Lx7A processor core design used in the ESP32-S3 family.XZA compressed file format with structured metadata, including Streams, Blocks, and an Index.XZ archiveA compressed file container that stores data in blocks and metadata, making its parser a meaningful security boundary.Y2K aestheticA design style inspired by translucent plastics and futuristic visuals common around the early 2000s.YAGNI"You Aren't Gonna Need It" - a principle against building features before there is a real need.YARAA rule-based language used to identify malware through strings, patterns, and file traits.Year-over-year surgea change measured against the same period in the previous year.YieldThe share of manufactured components that meet quality standards and can be shipped.YOLO modeA configuration that bypasses approval prompts for dangerous or high-risk actions.Youth mobilizationefforts aimed at increasing participation among younger voters.Youth Policy Dialoguea structured consultation format that brings young people into policy discussions.YouTube SEOMethods for improving how videos are discovered through YouTube search and related surfaces.YubiKeythe security device being customized in this project.Z-bufferA depth buffer that helps decide which object is in front during rendering.ZanzibarA relationship-based authorization model that stores permission facts as data and evaluates access from those relationships.ZeekA network analysis framework focused on detailed protocol and evidence logging.Zero data retentionA processing mode where prompts and outputs are not kept after inference, depending on the service setup.Zero retentionA service model where data is not kept after processing, subject to limits and exceptions.Zero Standing PrivilegeA model where permanent admin rights are removed in favor of temporary, approved access.Zero Trust Network Access (ZTNA)A security model that verifies each request before granting access, rather than trusting a user or device by default.Zero-accessA cloud model intended to prevent the provider from reading user content in plaintext.Zero-access designA model where the service provider does not hold the keys needed to read user content under normal operation.Zero-click executionCode execution that can occur without a separate user approval step once the malicious payload is installed.Zero-click spywareSurveillance software that can begin an attack without requiring the target to click a link or open a file.Zero-click XSSA cross-site scripting flaw that can execute without requiring the victim to click or actively trigger it.Zero-Data-RetentionA privacy control in which processed data is not kept beyond the request lifecycle.Zero-knowledge modelA design in which the provider is structured so it cannot read the user's plaintext data.Zero-Touch ProvisioningA setup method where devices automatically obtain configuration with minimal manual handling.Zero-touch provisioning (ZTP)Automated onboarding process that enrolls a device and applies configuration with minimal manual setup.Zero-trust authenticationA security model that requires explicit identity verification before access is granted.Zero-trust controlsA security model that verifies every user, device, and request instead of assuming trust inside a network.Zero-value Ethereum transactionA blockchain transaction that transfers no ETH but can still carry public input data.Zero-width UnicodeInvisible characters that can alter machine-readable text without changing what users see.ZerocopyA performance technique that reduces data copying by pinning user pages for kernel access.ZeroizationThe process of clearing storage so old content cannot be recovered by a later user or workload.ZeroMQA messaging library that moves data between processes and systems, while leaving application security choices to the developer.ZeroMQ (ZMQ)A messaging library often used for fast inter-process or network communication.ZigbeeA low-power wireless protocol used by many smart home devices and sensors.Zip SlipA form of archive-based path traversal where extraction writes files outside the intended destination.Zonal incidentA failure that affects resources inside one availability zone or data-center segment.Zone-and-conduit modelAn OT design approach that groups similar assets into zones and controls communication paths between them.Zone.IdentifierThe metadata stream Windows uses to store origin information for downloaded files.ZX SpectrumA classic home computer known for compact hardware and inventive software tricks.