Samedi 17 Octobre 2026 04:54:55 GMT+02:00
Netcrook
WIKICROOK - S
TERMES TECHNIQUES
S7A Siemens PLC family commonly deployed in industrial control environments.S7commSiemens communication used for engineering and read/write interactions with S7 controllers.SA 5GStandalone 5G, which runs on a dedicated 5G core without depending on 4G control functions.SaaS exfiltrationUnauthorized copying or downloading of data from software-as-a-service platforms.SaaS portfolioThe collection of cloud-based applications and subscriptions an organization uses to run business functions.SaaS sprawlThe growth of many SaaS services across an organization, including sanctioned tools and overlooked shadow apps.SabotageIntentional interference meant to disrupt, damage, or undermine a system.SafariApple’s web browser and a common entry point for malicious web content.Safe BrowsingGoogle’s reputation and warning system for phishing, malware, and other unsafe web activity.Safe defaultsConfiguration choices that reduce risk unless a user intentionally changes them.Safe designbuilding protections into a system so they do not depend only on user action.Safe DLL Search ModeA Windows setting that changes DLL lookup order to reduce search-path abuse.Safe fallback pathA predefined alternative process that keeps care moving in a controlled way if an AI-supported workflow becomes unreliable.Safe harboura legal protection that can limit liability for online intermediaries under specific conditions.Safe KidsA parental-control toolset for managing device use, content access, and family safety settings.Safe Mode with Networkinga Windows startup mode that loads limited services while keeping network access.Safe shutdownA mode in which a system stops in a controlled way that reduces the chance of physical harm or data loss.Safeguard validationChecking whether protective controls actually reduce unsafe model behavior in practice.SafeguardingProtective steps used to reduce the risk of harm to vulnerable people online.SafeModeA Fastjson hardening option that disables AutoType and reduces risky parser behavior.Safer designA change intended to reduce user risk or make use more controlled.SafetyProtection against accidental harm, injury, or operational failure.Safety blockA guardrail that can refuse or interrupt an AI output when policy or risk thresholds are triggered.Safety by designBuilding protective features into a service during development, not after launch.Safety casedocumented evidence used to show a system is safe enough for deployment.Safety ClaimsStatements a vendor makes about how reliable, secure, or controlled an AI system is in practice.Safety constraintsRules that limit model behavior when outputs could create unacceptable risk.Safety disclosurePublic documentation that explains a model’s risks, safeguards, and known limitations.Safety frameworkA formal process used to evaluate risks and set conditions before training or releasing a model.Safety functionA control mechanism designed to prevent or reduce hazardous conditions.Safety guardrailsProduct rules and technical limits designed to reduce harmful responses.Safety instrumentationTools used to detect hazards, support alerts, or improve situational awareness in dangerous environments.Safety interlockA mechanism that prevents operation when a protective condition is not met.Safety slowdownA policy approach that favors slowing development until controls and oversight improve.Safety warningA caution meant to prevent unsafe use or misuse of a tool or process.Safety-by-designA product approach that builds protective controls into the core system architecture.Safety-critical componenta part whose failure or misuse could affect safe operation.Safety-critical environmentA setting where mistakes can affect physical safety, service continuity, or public infrastructure.Safety-critical systemA system whose failure could affect operational safety.Salary negotiationThe process of discussing pay and related conditions to better match value, responsibility, and market reality.Sale statusa label that may indicate an alleged attempt to pressure or monetize claims.Sales channelthe path used to offer or sell a service, such as web, call center, or retail.Sales vouchersfinance records that can expose transactions, approvals, or accounting detail.Salesforce orgA tenant-specific CRM environment that can store sensitive business records.Salesforce organizationA Salesforce tenant or org used to store and manage business data and workflows.Salesforce recordsbusiness records stored in Salesforce, often tied to customer operations.Salim Benbouziyanethe maker associated with the TN Deck project.Salted hashingA password storage method that adds random data before hashing to slow cracking.Salty waterWater containing dissolved salts, which often increases conductivity.SalvageReusing working components from damaged equipment instead of restoring the full device.SAMThe Windows Security Account Manager, which stores local user-account and security information.SAM databaseThe Windows store for local security account material, including password hashes for local accounts.sameAsA structured data property used to point to official profiles or pages that refer to the same entity.SameSiteA cookie setting that helps control when a browser sends the cookie in cross-site requests.SAML 2.0A protocol for exchanging authentication and identity assertions between identity providers and service providers.SAML ActionA configuration element used in federated identity and single sign-on workflows.SAML assertionA signed statement that tells a service provider who the user is and what access they should receive.SAML Service ProviderThe system that relies on an external identity provider to authenticate a user.Sample leaka partial data preview that may suggest disclosure without proving full theft.SamplesStored audio clips or sounds used by the device.Sampling biasDistortion that occurs when the collected data overrepresents some behaviors and underrepresents others.Samsung Smart SwitchSamsung’s transfer tool for moving data from one Galaxy device to another.Sanction discretionThe room an authority has to decide whether and how severely to penalize a violation.Sanction procedurethe separate process used to impose a penalty after review.Sanctioned hostinghosting infrastructure targeted by restrictive legal or administrative measures.Sanctions complianceControls used to avoid transactions or relationships that may violate international restrictions.Sanctions exposurethe risk that poor controls or failures lead to regulatory penalties or formal enforcement.Sanctions list versioningKeeping the exact sanctions dataset snapshot used at a specific decision time.Sanctions procedurethe formal process used when noncompliance may trigger penalties.Sanctions screeningA compliance check used to detect payments involving restricted parties, regions, or entities.Sandbox checkA test a sample uses to detect virtualized or monitored analysis environments.Sandbox editA test change made in a non-public or practice area before live editing.Sandbox ProtectionIsolation meant to limit what code can do if it is triggered or compromised.Sandbox-CRAA proposed regulatory sandbox mentioned for businesses in connection with CRA implementation.SANnavA SAN management application used to monitor and administer Brocade fabrics.SAP KernelCore runtime software that supports SAP execution and can be shared across many deployments.SAP Security NoteAn official fix advisory that identifies a vulnerability and the remediation path.SAP Security NotesVendor-issued advisories that describe vulnerabilities and provide the associated correction path.SAP Web DispatcherA front-end component that forwards HTTP(S) requests and can sit close to the network edge.SapphireA gem-quality variety of corundum in colors other than red.Sarbanes-Oxley (SOX)A U.S. law focused on internal controls and financial reporting governance.SARIFA standard format for sharing static analysis results across security tools and developer workflows.Satellite communications networkThe infrastructure that routes communications through satellites, ground stations, and connected user terminals.Satellite fallbackBackup communications that can help maintain service when primary terrestrial or cable links are degraded.SatoriAn upstream renderer that converts HTML and CSS into SVG for dynamic image generation.SaturationA condition in which a transformer no longer reproduces current accurately because its magnetic core is pushed beyond normal limits.SavebackA rewards feature that returns a percentage of eligible purchases to the customer.Saved objectA stored Kibana item such as a dashboard or visualization, protected by access rules.Saved objectsKibana-managed items such as dashboards, visualizations, and related application data.SBOM generationThe process of scanning an artifact, image, or filesystem to produce an SBOM document.SBOM managementThe storage, versioning, access control, and lifecycle handling of SBOM records after they are created.ScadenzaThe end date after which an offer or condition is no longer available.Scadenza di pagamentothe date by which a payment is due.Scalable infrastructureInfrastructure that can grow with workload demand without breaking performance or reliability.Scale industrialethe stage where a project moves from prototype or pilot to larger production.Scale-up capitalGrowth financing that helps a technology move from prototype to market deployment.ScaleupA company that has moved beyond startup mode and is focused on rapid growth.Scam call centera fraud operation that uses coordinated phone outreach to impersonate trusted institutions or support desks.Scam centerAn operation site used to run fraud campaigns, often with coordinated roles and communications.ScannerA compromised host used to probe other systems for weaknesses or open services.Scanner-agnosticAble to ingest results from different security tools without depending on one vendor.Scarcity pressureA tactic that uses limited availability to push faster, less careful decisions.Scenario simulationtesting possible outcomes before making a real-world decision.Scenario-based testingAn evaluation method that checks how a system behaves across realistic, chained actions.SceneKitApple’s framework for creating and rendering 3D scenes and related assets.Scheduled JobAn automated task set to run at a specific time or interval without user interaction.Scheduled payload executionMalware set to run at set times or intervals without constant operator action.Scheduled tasksA Windows automation feature that can be abused to relaunch malware or keep it running.Scheduled-task abuseA technique where malware uses legitimate task features for execution, persistence, or privilege escalation.Schema EnforcementChecks that prevent records from entering a pipeline unless they match the expected structure.Schema FrictionThe operational strain that appears when similar data must be reformatted for multiple incompatible reporting structures.Schema objecta named database item such as a table, procedure, or stored code unit.SchematicA diagram showing how circuit components are electrically connected.Scheming AIA working term for a model that appears aligned while pursuing a different objective.School-based programA learning initiative delivered through schools, often lowering access barriers.Scientific calculatorA calculator built for advanced functions beyond basic arithmetic.Scientific validationthe process of checking whether a result is accurate and reliable.SCIFa Sensitive Compartmented Information Facility used to handle sensitive compartmented information.ScommesseWagers placed on an uncertain outcome, often subject to separate regulation.Sconto commercialea price reduction tied to the commercial terms of a sale.SCOPa French worker cooperative structure with shared ownership and governance.Scope boundaryThe line that defines what a test, tool, or system is allowed to interact with.Scope driftWhen an agent goes beyond its intended task or permissions and starts acting outside its boundaries.Scope EnforcementControls that keep testing inside approved targets, rules, and authorization limits.Scope indicatora measure such as file counts or storage size that hints at scale, not proof.Scope of authorityThe exact boundaries of what an examiner is permitted to collect and inspect.Scope of compromisethe verified extent of harm, including systems, data, and users affected.Scope of impactthe confirmed extent of any intrusion, disruption, or data exposure.Scope uncertaintyearly victim posts rarely prove the full impact of an incident.Scoring boxa device used to register hits and keep score in fencing.Scoring rigthe broader equipment setup that supports fencing scoring.ScoutSuiteAn open-source cloud auditing tool used to inspect configuration and produce a point-in-time review.Scrapingautomated collection of data from web pages or portals at scale.Scraping clusterA coordinated set of automated clients used to collect data at scale.Screen hijackingmalware behavior that interferes with what a user sees to mislead them.Screen overlayAn Android capability that lets one app draw above another app’s interface.Screen readersoftware that reads digital content aloud or in braille for blind and low-vision users.Screen recordingA captured video or image sequence of a computer display that can reveal sensitive interface content.Screen Recording permissionA macOS privacy control that must be approved before an app can capture the screen.Screen SharingmacOS remote desktop feature that lets another user view or control a Mac.Screen streaminga behavior where malware sends live or near-live views of a victim’s desktop to an operator.Screen-sharingA live session where another party can view what is displayed on a device, which can expose sensitive information.Screenshot CaptureA technique that repeatedly records what appears on a victim’s screen.Script executionThe ability to run attacker-controlled commands or code on a target system.Script executorA tool that runs scripts, often marketed in gaming cheat ecosystems.Script payloadExecutable code delivered as part of an attack, often used to start further compromise.Script SandboxA restricted execution environment designed to limit what untrusted code can do.Script Security PluginA Jenkins plugin that helps control and approve user-supplied scripts before they run.Script utilitya small program that performs a practical task beyond a one-off command.Script-based frameworkMalware architecture built around scripts or flexible code components that can be reused in different operations.Script-block loggingA PowerShell logging feature that records processed script content for review and forensics.SCTPStream Control Transmission Protocol, a Linux kernel transport used for reliable, message-oriented communication.SD cardA removable flash storage format used in cameras, embedded systems, and portable devices.Seafloor disposalThe placement of materials on the ocean bottom, often creating long-term monitoring challenges.Sealed complainta court filing kept partly out of public view.Sealed court documentsCourt records restricted from public access because they contain sensitive or legally protected information.Search CensorshipInterference with search results so that certain queries, sources, or topics are hidden or downgraded.Search head clusterA group of Splunk nodes that share configuration, apps, and scheduling state.Search head clusteringA Splunk deployment model where multiple nodes coordinate search, scheduling, and shared state.Search IndexingThe process by which search engines crawl and surface web content, including pages that may no longer be linked publicly.Search results pageA search engine page that can be used as an intermediate hop in a chain.Search trustThe tendency to trust results that appear near the top of a search engine page.Search-result poisoningManipulating search visibility so malicious pages rank for popular queries.Seat tierA licensing level that defines a user's access rights, usage allowance, and price.Seat-based planA subscription model that assigns access to individual users within an organization.SEC materialityThe threshold used to decide whether a public company must disclose a cyber incident.SECIA knowledge management model with four phases - Socialization, Externalization, Combination, and Internalization.Second brainA structured system for storing and retrieving organizational knowledge.Second brandA separate brand used by a parent company to target a different customer segment.Second factorThe extra proof required after a password, such as a code or hardware token.Second-Hand SoftwareA secondary market for previously licensed software, where resale questions often turn on licence form and jurisdiction.Second-order SQL injectionAn attack where malicious input is stored first and later reused unsafely in a database query.Secondary marketA resale space where goods are sold after the original retail purchase.Secondary Use of Health DataReusing clinical data for research, innovation, or policy rather than direct patient care.Secret API keyA private credential that authorizes access to a service and should be treated as sensitive if exposed.Secret attributionThe process of linking an exposed credential to its owner, service, and likely usage context.Secret ChatTelegram’s device-specific chat mode that uses end-to-end encryption.Secret detectionAutomated scanning for exposed credentials in code, pipelines, and related text.Secret exfiltrationThe covert theft of credentials, keys, or other sensitive data from a system.Secret exposureaccidental disclosure of sensitive credentials in a place they should not appear.Secret keyA confidential credential used to authenticate server-side API requests.Secret leakageThe unintended reproduction or exposure of sensitive information by a system.Secret scopeThe boundary that controls whether a secret is available at repository, organization, or environment level.Secret scopingLimiting which jobs, runners, or environments can access sensitive credentials.Secretless authenticationAn access model that avoids storing long-lived passwords or API keys inside workloads.Secrets detectionScanning for hardcoded credentials, API keys, tokens, or other sensitive data in code and configs.Secrets exposureAccidental disclosure of credentials, tokens, keys, or other sensitive data.Secrets hygieneThe practice of storing, rotating, and protecting passwords, tokens, and keys safely.Secrets rotationreplacing exposed credentials, keys, or tokens with new ones.Secrets-management systemA platform for storing and controlling access to sensitive credentials and tokens.Section 5The FTC Act authority used to challenge unfair or deceptive acts or practices in commerce.SectopRATA remote-access trojan associated with theft and remote control activity.Sector authoritiesPublic bodies that help validate sector scope and align NIS implementation with operational realities.Sector-Focused AdviserA specialist who concentrates on the risks, rules, and operating realities of one infrastructure sector.SecureA cookie flag that limits transmission to HTTPS connections.Secure aggregationA cryptographic method that lets a server combine updates without directly seeing each participant’s individual contribution.Secure channelThe trusted connection between a Windows device and its domain that helps validate domain sign-in.Secure Code ReviewA structured inspection of code to find vulnerabilities, logic flaws, and unsafe design choices before release.Secure codingWriting software with security considerations built into the development process.Secure configurationHardening systems through safer defaults and controlled settings.Secure content platformSoftware used to exchange sensitive files and data under policy controls.Secure DecommissioningThe controlled retirement of IT assets, including data wiping, verification and compliant disposal or reuse.Secure development frameworkA set of practices that helps teams build, test, and maintain software with fewer security flaws.Secure environmentA controlled setup that limits exposure, access, and side effects during testing or deployment.Secure infrastructureTechnical systems designed to limit unauthorized access, copying, and misuse of sensitive data.Secure Internal Communication (SIC)Check Point’s certificate-based trust mechanism for communication between management components.Secure LockA legacy SCADAPack access feature retained for backward compatibility with older deployments.Secure multi-party computationA protocol that lets multiple parties compute together while keeping each party’s inputs private.Secure NFCAn Android setting that can restrict card emulation when the screen is off or the device is locked, depending on device and version.Secure Payment ConfirmationA web payment standard that binds user consent to transaction details such as merchant and amount.Secure ProfileAn Adobe ColdFusion hardening mode that restricts risky defaults and reduces exposure.Secure Remote AccessControlled access methods that let approved users connect to sensitive systems from afar.Secure Remote Access (SRA)Controlled remote access to systems that typically includes authentication, logging, and session restrictions.Secure runtimeAn execution environment designed to restrict how software can behave while it is running.Secure SandboxA restricted execution space designed to limit what an application, model, or agent can do.Secure Service Edge (SSE)A cloud-delivered security framework that can bundle access and web controls.Secure software developmentBuilding security checks and controls into the development lifecycle instead of adding them only after release.Secure Software Development Lifecycle (SDLC)A development model that builds security controls into each stage of software creation.Secure transactiona transfer that is carefully verified before it is signed and broadcast.Secure update mechanismA method for delivering authenticated and integrity-checked software or firmware updates to devices.Secure VMAn isolated virtual machine used to contain workloads and reduce exposure to other systems.Secure Web Gateway (SWG)A control that inspects and filters web traffic before it reaches websites or downloads.Secure wipingRemoving stored data so it cannot be easily recovered from a device.SecurityThe protections and controls that reduce the risk of unauthorized access, disruption, or misuse.Security advisoryAn official notice describing a vulnerability, its impact, and the fix path.Security associationThe agreed security parameters that allow two systems to communicate over a protected tunnel.Security assuranceEvidence that a system has been designed and tested to meet defined safety and protection goals.Security awareness campaignA structured effort to improve user behavior through repeated education and practical guidance.Security awareness programA structured effort to teach users how to recognize threats and report suspicious activity.Security awareness trainingEducation designed to help people recognize threats and respond safely in realistic work situations.Security bottleneckA point where security review capacity slows delivery more than the development work itself.Security BulletinAn official notice describing a vulnerability and the recommended response.Security buyerA person or team responsible for evaluating and purchasing defensive technology.Security capacityThe people, time, and tools available to carry out cybersecurity work effectively.Security checksValidation steps used by apps or platforms to detect tampering, risky devices, or abnormal behavior.Security Command CenterGoogle Cloud’s native security management service for finding misconfigurations, vulnerabilities, and threats.Security configurationThe policy settings that determine how a system allows, blocks, logs, or routes activity.Security constraintsAccess rules that control which users or requests may reach a protected endpoint.Security ControlA safeguard used to reduce risk, such as access rules, approvals, logging, or monitoring.Security control testingChecking whether defenses like firewalls, EDR, or WAFs really detect or block relevant attack activity.Security criteriaThe requirements used to assess whether a service is safe, manageable, and fit for purpose.Security data lakea storage layer for large volumes of security telemetry kept separate from analysis tools.Security data pipelinethe chain that moves, prepares, and delivers security data for analysis.Security data platformA system that collects and organizes security telemetry for investigation and response.Security descriptorA Windows access-control structure that defines who can access a device object and with what rights.Security ecosystemA coordinated set of tools, processes, and people that work together.Security exposureInformation or conditions that can increase risk if they are discovered or abused by an attacker.Security fixa patch that corrects a vulnerability or reduces exposure to attack.Security FunctionalityBuilt-in protections such as authentication checks, permissions, and safety controls.Security gapA missing control, boundary, or review point that can weaken protection.Security GatewayA network enforcement device that applies firewall and protection rules to traffic.Security graphA relationship model that maps data, identities, and assets to help prioritize exposure and attack paths.Security hardeningThe practice of reducing unnecessary exposure by tightening settings, permissions, and services.Security Hardening UpdateA vendor release that bundles fixes and reduces exposure in affected software.Security Impact RatingCisco's severity label for vulnerabilities, used to help customers prioritize remediation.Security information serviceA channel used to publish security notices, advisories, or updates.Security IntelligenceThe definition layer used by Microsoft Defender Antivirus to recognize threats and update protection.Security Intelligence UpdatesFrequent Defender updates that refresh detection content for new and emerging threats.Security LakehouseA data architecture that combines storage and analytics for security telemetry.Security leadershipThe work of setting direction, priorities, and accountability for an organization's defenses.Security leadership pipelineThe range of career paths that can lead into senior security roles.Security LevelsIEC 62443 concept describing graduated protection targets for industrial systems and components.Security maintenance releaseA vendor-issued update that fixes vulnerabilities and extends the usable security life of a device.Security ManagementThe control layer used to configure and administer Check Point security environments.Security Management ServerA Check Point management system that handles policy and administrative control.Security mechanism bypassA flaw that lets an attacker evade a protection step that should block or limit abuse.Security MisconfigurationAn unsafe setup, such as overly permissive settings or exposed administrative features.Security NotificationA vendor bulletin that identifies affected products, versions, and remediation guidance.Security of supplyThe assurance that essential components and services can continue to be delivered reliably.Security operationsthe processes and tools used to monitor, investigate, and respond to threats.Security Patch Level (SPL)The Android build marker that shows which security fixes are installed on a device.Security perimeterThe boundary of systems and services that must be protected as part of a product’s security posture.Security pipelineThe flow of talent, training, and advancement into cyber roles.Security postureThe overall state of an organization’s defenses, readiness, and risk management.Security Poverty LineThe point below which an organization cannot be effectively secured with its available resources.Security prioritythe operational decision to treat protection work as a continuous requirement, not a side task.Security readinessThe ability of an organization to prevent, detect, and recover from cyber threats.Security resourcesPeople, tools, and processes dedicated to protecting a platform or service.Security restrictionA control intended to limit what users, processes, or systems can access.Security restriction bypassA bug that allows someone to evade an intended access control or safety check.Security roadmapA planned sequence for upgrades, standardization, and control alignment.Security RulesFirebase policies that control which users can read or write data.Security scriptA small program built to perform a focused security task.Security Service Edge (SSE)A cloud-delivered security model that combines multiple access and protection functions.Security servicesoutsourced or managed offerings that help organizations detect, prevent, or respond to threats.Security signalA data point or event that may indicate a meaningful change in exposure, behavior, or control health.Security softwareA broad category of tools designed to help protect devices, accounts, or data.Security sprawlThe growth of disconnected tools and controls that complicates visibility and policy enforcement.Security sweepA search for unauthorized devices or signs of tampering in sensitive areas.Security testingTechnical assessment used to find weaknesses and verify whether security controls work as intended.Security tokenA Windows data structure that represents a user’s identity and permissions during logon and session creation.Security Tool SprawlThe use of many separate security products that can create blind spots and slow coordinated response.Security tool tamperingattacker activity aimed at weakening alerts, logging, or endpoint defenses before the main payload runs.Security training pipelineThe path through which new practitioners build skills and move into the field.Security Update (SU)A targeted update intended to fix specific security issues without a broader feature rollout.Security updatespatches designed to fix vulnerabilities and reduce exposure to known threats.Security ZoneA network control that separates trusted and untrusted access paths for a service.Security-Control BypassA weakness that may let an attacker circumvent protections such as authentication, authorization, or filtering.Security-Feature BypassA weakness that lets attackers sidestep a protective control that should have blocked the action.Security-focused configuration managementThe practice of defining, monitoring, and enforcing secure system baselines.Security-intelligence updateFrequent Defender content updates that refresh detection logic.Seed funding extensionAdditional investment raised after an initial seed round.Seed-based discoveryA method that starts with known public assets and expands outward to related infrastructure.Segmentation driftThe gradual weakening of network boundaries as devices, routes, or exceptions are added over time.SegmentazioneNetwork separation that limits lateral movement and contains incidents within smaller zones.SeImpersonatePrivilegeA Windows user right that allows a process to impersonate another identity after authentication.Seizure bannerA notice placed on a seized domain to show that access has been redirected by authorities.Seizure imagingThe use of imaging tools to observe how seizure activity begins, spreads, and changes over time.Selection criteriaThe practical factors used to choose between payment options, such as cost, timing, and protections.Selective deliveryA technique where a site serves different content depending on who is visiting, often to evade analysis.Selective forgettingDeliberately reducing the influence of information a model no longer needs.Selective patchingA risk-based update approach that applies fixes only after testing and scheduling in an OT-safe window.Selective sharingReleasing sensitive material only to people who genuinely need it.Selective standardizationChoosing one platform only in the areas where its advantage is durable, while keeping flexibility elsewhere.Selective VisibilityA control method that limits who can find or see content without fully deleting it.Self-assembly kitA product made up of parts that the user must put together before use.Self-assessmentAn internal review used to document whether required controls are in place.Self-attentionA mechanism that lets a model weigh relationships between tokens in the same sequence.Self-compassionA therapeutic stance that encourages nonjudgmental care toward oneself.Self-consciousnessAwareness of oneself as a distinct self, not just the ability to refer to "I".Self-consumptionusing electricity where it is generated instead of sending all of it to the grid.Self-custodial walletA crypto wallet where the user holds the secret keys or recovery phrase directly.Self-DefenseAn anti-tamper mechanism that blocks unauthorized changes to security software files, processes, or settings.Self-deleting backdoorMalicious code designed to remove itself after execution, reducing the evidence left on the host.Self-diagnosisThe act of assessing a health condition without clinical confirmation.Self-disclosureThe act of revealing personal or sensitive information during an interaction.Self-extracting archive (SFX)An executable archive that unpacks its contents when run.Self-hosted collaborationA document-sharing setup operated by the business itself rather than a public SaaS provider.Self-hosted gatewayA privately managed service that brokers access to other systems or APIs within an organization.Self-hosted packageSoftware deployed by the customer on their own systems instead of run by a central provider.Self-hosted softwareA service an organization runs on its own infrastructure instead of relying on a managed provider.Self-managed installationA deployment that the customer operates and patches directly, rather than a vendor-hosted service.Self-managed serverA system operated by an organization rather than by a hosted service provider.Self-organizationThe tendency of a system to form order from interacting parts without external planning.Self-perceptionThe way a person understands and evaluates themselves.Self-propagating payloadContent designed to cause an agent to copy or pass it onward to another agent or session.Self-protectionSecurity features in endpoint software designed to resist tampering, disabling, or removal.Self-registrationAccount creation without manual approval, which can expand risk if privilege checks are weak.Self-Regulated LearningA learning process where students plan, monitor, and correct their own progress.Self-replicating malwareMalicious code designed to copy itself or spread to other systems, often with little or no human involvement.Self-Serve ReturnsA return workflow that lets customers request or manage returns through an online portal.Self-service password resetAn account recovery feature that can become an identity takeover target.SelfieA self-taken image that often functions as both expression and social signal.Selfie video verificationA remote check that uses a short video of a user as part of identity validation.Seller reputationSignals that help buyers judge whether a seller is trustworthy.Selling cutoverA migration method where new transactions begin in the new system before legacy records are fully retired.SeLoadDriverPrivilegeA Windows user right that allows a process to load or unload device drivers.Semantic cachingReusing earlier AI responses when a new request is similar enough to avoid repeating expensive inference.Semantic clusteringA method for grouping related samples by similarity in meaning or structure.Semantic consistencyKeeping the meaning of data stable across systems, users, and workflows.Semantic diversityThe degree to which outputs differ in meaning, not just in phrasing.Semantic groundingThe process of making sure different systems attach the same meaning to the same terms or signals.Semantic HTMLcode that gives page elements clear meaning, helping assistive tools understand structure.Semantic security violationA flaw where software acts incorrectly in a meaningful way even if it keeps running.Semantic tagsMetadata associated with some visits that may add topical context.SemgrepA static analysis tool that uses pattern matching to scan source code.Semi-automated processA workflow that combines software assistance with human judgment.Semiconductor fabrication plantA specialized factory where chips are manufactured on silicon wafers.Semiconductor filmA thin layer used in electronic devices to shape electrical behavior.Semiconductor manufacturing equipmentThe specialized tools used to build chips, including lithography, deposition, and etching systems.Sender impersonationA tactic that makes a message look like it came from a real person, brand, or domain.Sender reputationA trust score built from the sending domain, address history, and prior abuse signals.Sender spoofingForging an email address so a message appears to come from someone else.Sender-constrainingA control that binds a token to proof of possession, making theft less useful.sendmsg()A socket system call used to submit data or messages for processing.Seniority bandA job level category such as entry-level, midlevel, or senior.SENSEA relational theory that treats the self as emerging through interaction, recognition, and experience over time.Sensitive data concentrationThe risk created when many high-value records are stored in one environment.Sensitive InformationData that could be exposed if an attacker reaches the right process, account, or file path.Sensitive Information ExposureA condition where protected data can be read by someone who should not have access to it.Sensitive intakeA contact flow that may collect highly personal information from a user.Sensitive recordsinformation that can create privacy, legal, or fraud risk if exposed.Sensitive-Information DisclosureThe accidental or unauthorized exposure of secrets, private data, or internal content.Sensitivity labelsmetadata applied to content to signal handling rules, restrictions, or protections.Sensor accessPermission to use hardware such as a camera or microphone.Sensor dataMeasurements collected by instruments for later analysis and interpretation.Sensor driftGradual change in sensor output over time that can reduce measurement accuracy.Sensor IntegrityConfidence that sensor data is accurate, untampered, and suitable for operational decisions.Sensor moduleA packaged sensor with supporting circuitry for quick integration.Sensor nodea device that gathers data from its surroundings and processes or forwards it.Sensor reliabilityThe ability of a sensor to keep working consistently over time.Sensor signalData collected by a device that measures a physical phenomenon.Sensor validationThe process of checking whether a sensor produces reliable data under expected conditions.Sensor-rich deviceA device with multiple inputs such as camera, microphone, and location-aware functions that can increase exposure.Sentencingthe court-imposed punishment given after a criminal conviction or plea.SEOSearch Engine Optimization, the practice of improving a page’s discoverability in traditional search engines.SEO AbuseManipulating search visibility to drive traffic toward malicious or deceptive pages.SEO fraudAbuse of search systems to manipulate rankings or visibility for financial gain.SEO-optimized contentText crafted to rank higher in search engines, which attackers can exploit to attract victims.SEPAThe European payment framework for standardizing euro transfers across participating countries.SEPA payroll XMLpayment files used to process salary transfers and carry sensitive employee banking data.Separation methoda technique for isolating one material from another mixed material.Separation of Duties (SoD)A control that prevents one person or account from holding risky combinations of privileges.SequencerA component that triggers notes or events in a set order over time.Sequestered testbedAn isolated environment designed to keep experiments from affecting live systems.SerendipityThe role of unexpected discovery in science, often arising from observation, chance, and human interpretation.Serial interfaceA method of sending data one bit at a time over a connection.Serial numberA device identifier used for tracking, support, or inventory.Serial spoofingPresenting a copied identifier so a system mistakes one device for another.SerialisationThe ability to build and operate systems in repeatable batches.Serialized object communicationA method of packaging data for transfer between systems, which can become risky when trust checks are weak.Series AAn early venture funding round used to scale a company after initial product validation.Series A fundingan early venture round used to grow product development and market adoption.Series BA later venture funding round used to scale a company after early product and market traction.Series C fundingA later-stage venture round used to scale product, sales, or operations.Series FA late-stage venture funding round for a mature private company.Series GA later-stage funding round for a private company, usually used to support further growth.Serious cyber incidentA significant security event that requires escalation because of its potential impact.Serious incidentA harmful event tied to AI behavior that can involve injury, major disruption, rights impacts, or other regulated damage.ServeThe shot that starts play in badminton.Server cullingA design approach that withholds unneeded game state from clients.Server EDRdetection and response tools designed for server workloads.Server hardeningTightening configuration to reduce attack opportunities.Server logsautomated website records that can help investigators review access patterns and anomalies.Server migrationmoving workloads, data, and services from one environment to another.Server modeA deployment style where pgAdmin runs as a web-accessed service rather than only as a local desktop application.Server Process PrivilegesThe operating system permissions held by the service account running an application.Server stateData managed on the remote side of an application, often fetched, cached, and refreshed by libraries like TanStack Query.Server-assisted decryption chainA staging method where payload recovery depends on interaction with a remote server.Server-controlled decryptionA method where malware needs a live server exchange before its payload can be unpacked.Server-side compromiseattacker control over a web server or its execution path.Server-side ControlDecision-making that happens on the provider’s systems rather than on the user’s device.Server-side correlationMatching browser-side signals with backend data to connect actions across different requests or contexts.Server-side credentialsSecrets stored or processed on the server, such as passwords or API keys.Server-side decryption chainA payload-recovery process that depends on remote infrastructure rather than only local files.Server-side enforcementSecurity checks applied on the backend, not just in the interface.Server-side file writeA flaw where attacker-influenced input can cause a server to write files in an unintended location.Server-side fingerprintingA web technique that profiles visitors on the server before deciding what content to show.Server-side persistenceTechniques used to stay on a compromised server after the initial intrusion.Server-side polymorphismA technique where the server generates changing page content on demand, making each visit look different.Server-side pushA repository write performed by the server itself, often after it processes an API action or automation step.Server-side renderingThe process of turning input data into a displayable form on the server before it reaches the browser.Server-side rendering (SSR)Rendering web content on the server before sending it to the browser.Server-side request abuseA flaw that lets a server be induced to make unintended requests.Server-Side Request ForgeryAn issue where a server is tricked into making requests to unintended internal or external locations.Server-side scriptCode executed on the backend of an application rather than in the user’s browser.Server-side theftunauthorized copying of information from internal systems rather than from individual devices.ServerlessA cloud model where functions run on demand without traditional server management by the user.Serverless functionCloud-hosted code that runs on demand without managing a server directly.Serverless functionsShort-lived code execution units run on demand without managing servers directly.Service accessA maintenance path used to inspect, reset, or repair a device.Service binaryan executable registered to run as a Windows service.Service changesunusual modifications that can help reveal unauthorized activity.Service coordinationThe process of linking appointments, monitoring, and specialist input across different settings.Service credentialsTokens, keys, or other secrets that let software prove identity and access resources.Service degradationA partial loss of normal performance or reliability, even when a platform is still partly usable.Service dependency chainlinked business services that can amplify disruption if one provider is hit.Service designThe structure of a digital service, including language, navigation, accessibility, and completion flow.Service health monitoringChecks used to track availability and detect degradation.Service infrastructureThe web, hosting, and domain systems that cybercriminals use to deliver and maintain an operation.Service integritythe reliable and consistent functioning of a digital public service.Service outageA disruption that makes a digital system unavailable or unreliable for users.Service planeThe operational layer that keeps a product available and functioning.Service PortalServiceNow’s public or semi-public web portal layer for self-service content and workflows.Service portal search endpointa built-in search function that may reveal data if exposed or misused.Service Provider (SP)The application that relies on an external identity system to log users in.Service provider recordslogs or account data held by a platform or cloud service that may support an investigation.Service qualitythe level of performance users experience, including reliability and consistency.Service recoverythe process of restoring functions after disruption.Service reliabilityThe ability of a platform or workflow to perform consistently over time.Service sunsetthe planned retirement of an online product, feature, or platform.Service tokenA credential used by automated systems or agents to authenticate without exposing a permanent secret.Service-account credentialsMachine identities used by tools and applications to authenticate with cloud services.Service-hosted contentData or media stored and delivered by a provider rather than saved as a local file by the user.Service-security configurationThe access-control rules that determine which users can reach a service or operation, including anonymous access.ServiceAccountThe workload identity a Pod or controller uses when talking to the Kubernetes API.Services economya market where criminal capabilities are packaged for repeated use.ServiceWorkerA browser script that can intercept network requests and manage background tasks for a web app within origin and scope limits.Servicing channelThe update path that determines when and how Office patches are delivered.Servicing lifecycleThe period during which a software version receives security fixes, updates, and support.Servicing pathThe official update route a device follows to receive supported builds and fixes.Servicing regressionAn unintended behavior introduced by an update or maintenance change.Servicing ringA staged deployment group that receives updates before the rest of the fleet.Servicing timelineThe fixed support period a Windows release receives before it reaches retirement.Servicing updateA monthly or scheduled patch package that can include security fixes and operational changes.Session archiveA saved capture of network activity, often used for debugging and troubleshooting.Session boundaryThe security line that should keep one authenticated user’s context separate from another’s.Session compromiseUnauthorized control of an active user session, which can let an attacker inherit the session’s trust.Session continuitythe process that keeps a user authenticated while moving between devices or apps.Session correlationLinking requests across time or identifiers to spot distributed automation or coordinated misuse.Session enrichmentadding extra context to a login or connection to improve risk decisions.Session expirythe moment when a token or link stops working.Session ForgeryThe creation or manipulation of a session token to impersonate a legitimate user or administrator.Session hijackTaking over a valid login session to act as another user without knowing their password.Session lengthThe amount of time a user stays active in an app or website.Session logA recorded trace of actions taken during a tool or terminal interaction.Session loggingRecording remote-user activity so administrators can review actions and investigate misuse.Session ManagerAn AWS Systems Manager feature used for controlled remote administration and port forwarding.Session privilegeThe level of control granted during a remote connection, which can determine what an operator can do.Session reconstructionThe process of rebuilding a communication session from captured packets or traffic copies.Session RecordingCapture of user activity or video during an authenticated session for auditing or review.Session resumptionA TLS feature that reuses prior session state to avoid a full handshake.Session SecretA value that keeps a logged-in session active after authentication succeeds.Session takeoverUnauthorized control of an active, authenticated session such as a logged-in banking app.Session trustConfidence that a live interaction belongs to the intended user and device.Session visibilityThe ability to monitor what an authenticated browser session is doing in real time.Session-bound dataInformation available only while a user remains logged in, often stored or rendered in the browser context.Session-level controlSettings that can limit, pause, or end an active live session.Session-level defenseSecurity controls that evaluate activity while a login session is underway.Session-level impactHarm limited to an authenticated user’s active session, rather than full control of the server.Session-level policyRules that evaluate each access request separately, often using identity and device checks.SetpointA configured value that tells an industrial system how to behave, such as when to start a pump.Settlement layerThe base blockchain that finalizes transactions and anchors trust for higher layers.Settlement recordsinternal finance files that may expose payment status and timing.Setup wizardThe initial configuration flow used to create or reconfigure a server’s administrative settings.Severe incidentA security event that can negatively affect availability, authenticity, integrity, or confidentiality and may require mandatory reporting.SeverityA rating used to prioritize how urgently a software flaw should be addressed.Severity modelA framework used to rank how dangerous a vulnerability is and how urgently it should be fixed.Severity rubricA scoring or grading guide used to judge how serious an incident is and how fast it should be handled.Sezione Addestramentoa training section responsible for instruction and preparation.SFERA modelA five-part performance framework built around Sincronia, punti di Forza, Energia, Ritmo, and Attivazione.SGI workstationA high-end Silicon Graphics computer used for graphics, visualization, and technical production work.SGP.32A standard for remote provisioning of connectivity in IoT devices.SGSIthe information security management system used to organize policies, controls, and oversight.SHA PinningLocking a dependency to a specific commit hash so the exact reviewed code is used.Shader compilationThe process of preparing graphics code for a GPU to execute.Shadow agentsAI agents operating in company systems without clear oversight or approval.Shadow AI stackAI tools or workflows that spread outside formal oversight, often before central governance can review them.Shadow APIAn API endpoint that exists in production but is not properly documented or tracked.Shadow automationUnofficial or poorly governed automation that operates without sufficient oversight or documentation.Shadow dataData stored or copied outside normal visibility or governance.Shadow EconomyHidden activity that escapes official measurement and governance.Shadow softwareUntracked internal tools or scripts created outside normal IT oversight.Shadow-based outputA visual method that forms images by blocking or shaping light.Shadowed policya rule that is hidden or overridden by another rule, making enforcement harder to reason about.ShallA legal term that signals an obligation rather than a preference.Shall vs willA distinction in legal language where “shall” usually marks duty and “will” often marks intent or future action.SHAPA post-hoc explanation method that estimates how each feature influenced a prediction.Shape sensingEstimating an object's form by detecting deformation or movement across a surface.Share-price responseThe way a stock price moves after new information signals higher or lower expected profits.Shareable linkA URL that grants access to content without requiring a direct invite.Shared accountA login used by more than one person, often making accountability harder.Shared Backend InfrastructureReused server-side services that can widen the impact of one authorization mistake across multiple surfaces.Shared codebaseone underlying code set reused across multiple products or extensions.Shared content governanceControls and review processes for monitoring how files, folders, or sites are shared.Shared conversation linkA public link to a saved chat or thread that can be reused in a lure.Shared correctionsReusable fixes or guidance captured so the same AI error is not relearned repeatedly.Shared credentialsvalid logins that can be reused if they are stolen or reused.Shared datainformation used by multiple teams or organizations to support common decisions.Shared keyThe same secret credential reused across multiple devices, increasing blast radius if exposed.Shared Key authorizationA storage access method that relies on account keys instead of identity-based access.Shared meaningA common understanding that helps audiences interpret information in similar ways.Shared memoryAny external location that multiple agents can read and write, creating an unplanned coordination channel.Shared pathA folder structure used to describe where files are located on a system.Shared platformA common digital service or codebase used by more than one organization.Shared portalA web access point used by multiple users, often a high-value target.Shared project contextTeam data such as issues, docs, and linked records that AI tools may use to perform work.Shared public gooda resource or protection that benefits many people at once and is hard to limit to one payer.Shared rulesCommon planning and operating standards that help multiple actors coordinate safely.Shared ServicesCentralized functions that provide common capabilities to many business units from one service layer.Shared storageA file area that apps may use to exchange content on Android devices.Shared systemscentralized tools used across many locations or business units.Shared Tab GroupsA browser feature that lets tab groups be shared and synchronized across users or devices.Shared workspace creditsPooled usage units that can be added when included limits are reached.Shared workstationA device used by more than one person, where visibility and access controls matter more.SharedWorkerA worker that can be used by multiple same-origin tabs or frames to share a single background process.SharePoint FarmA grouped SharePoint deployment where multiple servers and services work together as one environment.SharePoint flawsvulnerabilities in SharePoint, as reported here; the exact flaw is not specified.SharePoint librariesdocument repositories that may contain sensitive internal files and permissions.SharePoint on-premisesA locally hosted Microsoft collaboration platform that can be affected by chained web and authentication flaws.SharePoint ServerMicrosoft’s on-premises collaboration platform for documents, sites, and internal workflows.SharePoint vulnerabilitiesweaknesses in a collaboration platform that may be targeted for unauthorized access.SharePoint vulnerabilitya flaw in Microsoft SharePoint that can be abused to gain unauthorized access or run malicious actions.SharePoint worker processThe server-side process that handles SharePoint requests and can be a high-value target if code execution occurs.Sharing mobilityTransport services that let users access vehicles on demand instead of owning them.SharpA Node.js image-processing module that can handle formats including SVG.Sheara difference in speed or direction between neighboring layers of a material.Sheet metalThin metal stock that can be cut, bent, and formed into parts.Sheet of papera flat paper base that can be transformed into different shapes.Shell accessCommand-line control over a system, often the point where deeper compromise begins.Shell and core structureA design where one material surrounds another to form a layered part.Shell companya business entity with limited visible operations, often used to obscure ownership or transactions.Shell extensionA component that adds functions to the Windows shell.Shell historyStored record of past command-line activity that can expose operator actions.Shell startup filesConfiguration files that run when a terminal session begins and can change the user’s command-line environment.Shellcode injectiona technique that places code into another process for execution.Shellcode loaderA malware component that prepares and launches additional payload code, often as an early-stage execution bridge.ShieldFontA project name for a defense concept aimed at reducing the usefulness of AI scraping.ShieldingMaterial or structure used to reduce exposure by blocking or absorbing radiation.Shift-leftA security approach that moves checks earlier in development, before software is deployed.Shift-left testingMoving tests earlier in development so problems are found before release.Shipping operationsThe systems and steps used to prepare and move goods to recipients.Shipping workflowThe operational path that moves goods from fulfillment to delivery.Shop floorThe production area where manufacturing work is carried out.Short squeezea rapid price rise that forces bearish traders to cover positions.Short-form videoBrief video content designed for fast consumption and easy sharing on social platforms.Short-lived tokenA temporary credential that expires quickly and can reduce the value of theft.Shortcuta faster input method that replaces a longer on-screen or keyboard sequence.Shortcut abuseA technique that uses Windows shortcut behavior to hide commands or redirect users into a malicious execution chain.Shortcut masqueradingA trick that makes one file type appear to be another, often to induce a click.Shorted capacitorA failed capacitor that behaves like a near-direct connection and can disrupt circuit operation.ShutterGapA reported visibility gap where short-lived AWS resource exposure may occur between security scans.ShuttlecockThe lightweight object struck in badminton.SIC (Secure Internal Communication)A trust mechanism used to establish secure communication between management and gateways.SID chipa classic sound chip used in vintage home computers.Side effectAn external action caused by a system, such as submitting a form, sending data, or changing a service state.Side-channelAn unintended path that leaks data through timing, power, sound, or emissions.SidechainA blockchain linked to another chain so assets can be represented and moved under a separate rule set.Sideloaded APKan Android app package installed outside an official app store.SideScanningAn agentless inspection approach used to assess cloud workloads and storage from outside the workload itself.SIEM/SOARSecurity platforms that collect alerts and help automate response workflows.SIEM/SOCSecurity platforms and operations teams that collect, correlate, and respond to security events.SIG(0)A DNS request authentication mechanism based on cryptographic signatures.Sigma rulesHuman-readable detection rules that can be translated across security tools.Sign-in flowthe sequence of steps a user follows to authenticate with a service.Signal authenticityThe ability to verify that a network signal is genuinely from a trusted source.Signal flowThe route a signal takes through a device or circuit.Signal fusionCombining multiple data inputs, such as identity and contact details, into one risk decision.Signal interpretationThe act of assigning meaning to data or biological activity, which can be incomplete if context is missing.Signal layerA source of evidence that contributes to a security decision without determining it alone.Signal leakageUnwanted information escaping from a device through physical emissions.Signal noiseunwanted variation that can make a sensor reading less clear or less reliable.Signal PINA user-set secret involved in Signal recovery and registration-related protections, separate from chat backup decryption.Signal processingmathematical manipulation of audio or other data streams to produce an effect or output.Signal reconstructionThe process of turning captured emissions or traces back into readable or audible information.Signal separationTechniques that keep similar inputs distinguishable in crowded conditions.Signal triggerA limited input that causes a predefined action when a condition is met.Signature CandidateA proposed digital signature scheme under evaluation before possible standardization.Signature validationThe process of checking that a digital signature is authentic and that the protected data has not been altered.Signature-based antivirusOlder detection method that identifies threats by matching known patterns.Signed applicationSoftware carrying a valid digital signature, which can still be misused if its behavior is malicious.Signed authentication materialData signed by an authenticator to prove possession of the private key during login.Signed bootA startup process that checks cryptographic signatures before allowing firmware to run.Signed cookieA cookie protected with a cryptographic signature to detect tampering.Signed driverA driver carrying a valid digital signature, which can increase trust and make abuse harder to spot.Signed firmwareFirmware that includes a cryptographic signature so the device can verify it was issued by the trusted vendor.Signed installerAn executable marked with a digital signature that helps confirm origin, but not intent.Signed manifestA cryptographically protected record that carries provenance-related metadata about content.Signed softwareAn application with a digital signature used to help verify publisher identity.Signed tokenA cryptographically signed authentication artifact that confirms a successful sign-in session.Signed updateAn update package that includes cryptographic proof it came from an authorized vendor or system.Signed vendor softwareCode marked with a digital signature that helps Windows trust its publisher.Signed vulnerable driverA trusted driver with known flaws that attackers can abuse to weaken defenses.Signerthe device or system that authorizes transactions with private keys.Signing authorityThe cryptographic permission needed to authorize a blockchain transfer.Signing certificateThe cryptographic identity Android uses to determine whether an app update is genuine.Signing oracleA system that produces signatures for inputs it receives, which can become a target for abuse.Signing subkeyA secondary key used for specific signing tasks and often rotated independently.Signing-keyA secret used to validate pre-signed URLs and prevent forged access requests.SigV4Amazon-style request signing used to authenticate some S3-compatible requests.SIISLA digital platform used in labor-related procedures and vacancy publication workflows.Silent audioAudio processing that can occur in a browser without producing sound the user hears.Silent failureA failure mode that does not produce an obvious error, warning, or alert for the user.Silent installationsoftware that lands on a system with little or no visible user interaction.Silent participationactivity such as scrolling, viewing, or pausing that happens without public posting.Silent patchA security fix released with limited public advisory detail.Silicon photonicsA technology that uses silicon-based components to guide or convert data with light rather than only electrical signals.Silicon Valleythe U.S. tech hub often used as a symbol for innovation and power.Silicone molda flexible negative form used to reproduce an object’s shape.SILTRA recordsSocial Security filing data that can expose workforce and contribution information.SIM activationThe process that starts service on a mobile card and makes the line usable.SIM cardThe removable chip that identifies a subscriber on a mobile network.SIM provisioningthe step that activates a subscription and links it to a SIM or eSIM.SIM Toolkit (SAT)A standardized feature set that lets a SIM interact with the device it is inserted into.Sim-to-real transferthe challenge of making a system work reliably outside simulation.Sim-to-real validationThe process of checking a model in simulation before deploying it to real equipment.Siman componentsInternal Arena-related executables involved in processing and model handling.Similarity testingMethods used to check whether generated output is too close to a protected work.Simulated environmentA controlled workspace that mimics real software tasks for training or testing.Simulated Penetration TestingSecurity testing performed in a replica or model of an environment to reduce the risk of disrupting live systems.Simulated phishingA controlled training exercise that sends fake phishing messages to measure and improve user response.Simulation and evaluationPre-deployment testing used to check whether an agent reaches the right outcome and follows policy.Simulation environmenta controlled space for testing systems, processes, or defenses without affecting live operations.Simulation fidelityhow closely a model matches the system it is trying to represent.Simulation modea configuration that changes how a system models execution or behavior.Simulation pipelineThe chain of tools and data used to test behavior in a virtual environment before real-world deployment.Simulation testingThe use of virtual scenarios to expose edge cases and unsafe behavior before real-world deployment.Simultaneous playbackThe number of streams that can run at the same time on one account.Simultaneous streamsthe number of devices allowed to watch at the same time.Simultaneous viewsa product feature that lets more than one device stream at the same time under one subscription.Sinclair SpectrumAn 8-bit home computer widely associated with the early personal-computing era.Single Packet Authorization (SPA)A method that keeps services hidden until a valid request is received.Single point of knowledgea situation where critical understanding is concentrated in too few people.Single Reporting PlatformENISA’s centralized channel for mandatory CRA reporting.Single Reporting Platform (SRP)The EU reporting channel used for certain CRA vulnerability and incident notifications.Single Source of TruthAn authoritative data source used to keep reporting and decisions consistent.Single-cloud stackAn environment built mainly around one cloud provider, where native security services can be simpler to operate.Single-instance appSoftware designed to run one active copy and pass later launches to the existing process.SingularityA speculative idea that AI may reach a point where technological change accelerates beyond familiar human control.SinkholeA defensive server that diverts malicious traffic away from its intended destination.SIP ALGSession Initiation Protocol Application Layer Gateway, a feature that helps handle VoIP traffic in some network setups.SIRIA European standard for exchanging real-time public transport information.Sistema di Interscambio (SdI)The official channel that receives and routes electronic invoices in the Italian PA workflow.Site blockerA tool that restricts access to selected websites during chosen time periods.Site Reliability Engineering (SRE)A production-operations discipline that uses reliability targets, monitoring, and automation to keep services stable.Site service accountA limited service account used by an application or appliance.Site takeoverA situation where an attacker can control site settings, content, or administrator-level functions.SIVESpain’s coastal surveillance network used to detect, track, and support response to maritime activity.SkeletonA simplified string form used to compare visually similar domain names.SkiaChrome’s 2D graphics library for rendering text, shapes, images, and other page content.Skill decayThe gradual weakening of a capability when it is not exercised regularly.Skill mappingThe process of translating a person’s abilities into structured categories that software can compare.Skill registryA repository that lists extensions or add-ons an AI agent can install or use.Skill taxonomyA structured way to classify tasks and capabilities so they can be shared and reused consistently.SkillsA platform layer that packages knowledge or business functions for AI-assisted retrieval and use.Skills debtThe buildup of capability gaps when employee knowledge does not keep pace with platform change.Skills frameworkA model that maps cybersecurity work to defined roles and competencies.Skills-first approachA workforce model that prioritizes verified competencies over fixed role categories.Skin tradingThe exchange of in-game cosmetic items through external markets or platforms.Skip-auth routeA configured path that is exempted from authentication handling.SKUStock keeping unit, a billing line item used to separate cloud services or usage categories.Sleeper buildA project that keeps an ordinary outward appearance while hiding upgraded internal functionality.Slide rulean analog calculation tool that uses sliding scales to estimate mathematical results.Slipstreamthe trailing airflow behind a moving body.SLOA service level objective, or a target for how well a service should perform from the user’s point of view.Sloshingthe back-and-forth movement of a liquid inside a container.SLSA provenanceA build attestation that records where, when, and how software was produced.SLTTState, local, tribal, and territorial governments, a common public-sector cybersecurity category in the United States.Small businessa company with limited staff, budget, or operational capacity.Small displaya compact screen with limited space for text, icons, and layout elements.Small language modelA compact model tuned for narrower tasks, often with tighter accuracy and cost targets.Smart App ControlA Windows 11 feature that helps block untrusted or suspicious applications using Microsoft app intelligence and code integrity capabilities.Smart buildingnetworked systems that manage facilities, access, or automation.Smart Contract AuditA security review of blockchain code to look for logic errors, vulnerabilities, and unsafe design patterns.Smart controllerAn advanced OT device that can combine processing, communications, and control functions.Smart deviceAn electronic device that automates functions or connects to other systems.Smart displayA screen-based device that can combine visual output with networked services and, in some designs, voice or app integration.Smart homeA living space that uses connected devices for lighting, climate, security, or other automation.Smart inverterA connected device that converts solar output into grid-compatible power and may also coordinate system behavior.Smart LinkA URL handling feature that can turn links into richer content or previews inside work tools.Smart MeterA digital meter that records consumption and can support communication with utility systems.Smart meter 2Ga next-generation electricity meter that supports digital communication with the supplier.SmartConsoleCheck Point’s graphical administration tool for managing security policy and objects.SmartLoaderA Windows malware loader that can upload screenshots and system information and download or install other malware.Smartphone softwareThe operating environment and app controls that shape what a phone can do.Smartphonesgeneral-purpose mobile devices that can influence how other devices are set up and used.SmartPOSa payment terminal that combines card acceptance with software-driven business functions.SMB authentication coercionA tactic that forces a system to initiate SMB authentication, sometimes creating credential-abuse risk.SMB named pipesWindows communication endpoints carried over SMB that can be used for local or remote inter-process messaging.SMB/SMB2Windows file-sharing protocols that also carry DFS referral traffic across the network.SMBssmall and midsize businesses, organizations that often need strong security with limited staff.Smcstandard cubic meter, a unit used to measure natural gas consumption.SMC-DA Linux shared-memory transport used for specialized intra-node communication.SMEsSmall and medium-sized enterprises, which often have fewer compliance and training resources than larger firms.SMFThe Session Management Function in 5G, responsible for session control and coordination with the UPF.SMPTE ST 2110A standard for carrying separate audio, video, and metadata streams over IP in real-time production.SMS blasterRadio equipment used to broadcast unwanted text messages to nearby phones.SMS first-factor sign-inA legacy sign-in method that uses a text-message code as the primary authentication step.SMS phishingFraud delivered by text message to prompt a harmful action.SMS-based recoveryPassword reset or verification codes sent by text message, which can be vulnerable if a number is taken over.SMTP credentialslogin details for email delivery systems that can be abused if exposed.SMTP smugglingA framing flaw where servers disagree about message boundaries, which can let traffic be interpreted in an unintended way.snap-confineA privileged helper used to launch snap applications inside a restricted environment.Snap-fitA design that uses flexible tabs or clips to lock parts together.snap7.dllA dual-use library that can automate access to Siemens S7 PLCs for legitimate testing or malicious scripting.snapdThe service that manages snap packages, including installation, updates, and execution behavior.Snapdragon 850Qualcomm processor used in some Windows PCs.Snapshot fuzzingA fuzzing method that restores a target to a saved state after each test case, making fragile services easier to test.Snapshot pageA saved view of content at a specific moment, often used for shared chats.Snapshot replicationCopying point-in-time data snapshots to another system or location for restore or disaster recovery.Snippet eligibilityWhether a page can be shown as a short excerpt in search surfaces.Snippet-level scanningA method that examines code fragments directly rather than relying only on declared dependencies.SNMP NotificationsAlert messages in the SNMP framework that can become a risk if handled unsafely.SNMP trapA monitoring message used to report events or alerts from a system to an administrator.SnortA widely used open-source network intrusion detection engine.Snowflake environmentA cloud data platform context referenced in the unverified claim.SNOWLIGHTA staging component that helps pass execution to the next payload in the chain.SOAPACTIONAn HTTP header used in SOAP-based requests; in this case it is identified in the CVE record as part of the attack path.SOC analystA defender who reviews alerts, validates threats, and escalates incidents when needed.SOC as a serviceA subscription model for outsourced security operations center functions.SOC workflowsThe steps analysts follow to triage alerts, investigate activity, and respond to incidents.SOC-as-a-ServiceA managed service model that delivers SOC capabilities from an external provider.Social engineering lureA deceptive prompt or page designed to make a user take an action that benefits the attacker.Social license to operateInformal public acceptance of an infrastructure project based on whether local burdens seem justified by broader benefits.Social media profilingthe process of building a target picture from public online activity and personal details.Social objectsomething that gains meaning through shared human relationships and context.Social presenceThe feeling that another mind is present in an interaction, even when it is machine-generated.Social security contributionsMandatory payroll-linked payments used to finance public social insurance systems.Social Security number (SSN)A U.S. government identifier used in employment, taxes, and benefits, often targeted for identity misuse.Social Security numberspersonal identifiers that can be abused in identity theft and fraud.Social valueThe broader public or organizational benefit a system creates, beyond simple efficiency gains.Social videoshort video content designed for fast sharing and quick audience engagement.Social withdrawala reduced pattern of participation in school, work, or social life.Società in-housePublicly controlled entities used by municipalities to manage shared services and infrastructure.Socio-technical riskRisk shaped by both technology and the people, institutions, and incentives around it.Socket HijackingSteering connection setup so a request uses an unintended or malicious socket path.Socket.IOA real-time communication library sometimes used by malware for command-and-control traffic.SOCMINTSocial Media Intelligence, the use of social platforms and their signals for analysis, monitoring, or investigation.Sodiuma highly reactive chemical element that must be handled with care in many environments.Soft bindingA recovery method that helps reconnect provenance data when embedded metadata has been removed.Soft skillA human capability such as communication or empathy that supports effective teamwork and decision-making.Soft skillsCommunication, collaboration, judgment, and other human-centered abilities used in leadership.Soft-brickA state where a device is still functional at the hardware level but is difficult to use normally.SoftPOSSoftware that lets a smartphone or tablet accept contactless payments without a separate card reader.Software bill of materialsAn inventory of software components used in a product or service, useful for patch verification.Software cash registerA checkout solution delivered through software rather than only dedicated hardware.Software compatibilitythe degree to which a program can operate correctly in a given environment.Software discoveryThe enumeration of installed applications or tools to support attacker decision-making.Software distribution control planethe administrative layer used to publish, update, or manage software at scale.Software engineering channelThe pathway through which AI may affect firm performance by changing the productivity of software engineers.Software environmentThe collection of code, tools, settings, and systems used to develop or run software.Software literacythe practical ability to understand and work with software beyond basic clicks or commands.Software maintenanceOngoing work to fix bugs, improve stability, and keep code usable over time.Software marketplacean online store where users download apps or extensions.Software supply chain riskRisk that a third-party component, update, or integration has been tampered with or compromised.Software supply-chain attackAn intrusion method that targets trusted software distribution or build processes instead of attacking endpoints directly.Software support windowthe time period during which a product receives fixes and security updates.Software-Defined Perimeter (SDP)an access model that reveals applications only after authentication.Software-defined radioA radio system that uses software for tasks normally handled by dedicated hardware.Sogliaa usage limit that determines when a pricing condition applies.Soil remediationthe process of reducing or removing contaminants from soil.Solar chargingconverting sunlight into electrical energy for later use.Solar eclipseAn event where the Moon passes between Earth and the Sun, partially or fully blocking sunlight.Solar photovoltaicsTechnology that converts sunlight directly into electricity.Solder pasteA mixture of solder particles and flux used before heating and reflow.Solder stencilA thin template that controls where solder paste is deposited on PCB pads.Solderingjoining metal parts with melted filler metal to form an electrical and mechanical connection.Solely automated decision-makingA decision made based only on automated processing, without meaningful human involvement.SolenoidAn electromechanical device that moves when energized by electric current.SolidWorksCAD software used to create and manage 3D engineering designs.Sonic boomthe sharp sound made when movement exceeds the speed of sound.Sound barrierthe point at which an object moves as fast as pressure waves in air.Source code historyretained commit records that can preserve deleted secrets.Source code inspectionReviewing code to identify flaws, risky patterns, or security weaknesses.Source code leakTheft or publication of application code that can expose logic, secrets, and internal architecture.Source code managementTools and processes used to store, version, review, and control access to code.Source code scanningAutomated analysis of program source files to identify security weaknesses before software is shipped.Source code thefttheft of application code that may reveal logic, secrets, or infrastructure details.Source confidentialityThe duty to protect the identities and communications of people who share information privately.Source disciplineThe habit of separating confirmed information from speculation.Source Distribution (sdist)A Python packaging format that can execute build or install-time code in some cases, especially when source builds are allowed.Source evaluationchecking where information comes from and how reliable it is.Source mapA debugging file that maps minified code back to original code and can reveal sensitive implementation details.Source mapsDevelopment files that map minified JavaScript back to original code, which can expose internal logic if publicly accessible.Source of truththe authoritative record used to keep reported facts consistent.Source rankingThe process a search system uses to decide which sources appear first or most prominently.Source validationThe process of checking whether a person, claim, or channel is trustworthy and authentic.Source VerificationChecking whether information is accurate, current, and supported by reliable evidence.Source visibilityThe degree to which original publishers remain discoverable and recognizable in digital interfaces.Source-address critical optionAn SSH restriction that limits authentication to approved client IP addresses or CIDR ranges.Source-address validationNetwork filtering that helps block packets forged to appear as if they came from somewhere else.Source-code vendorA seller who distributes malware code that others can copy or modify.Source-grounded AIAn AI system that answers using user-provided materials and often ties claims back to those inputs.SourcetreeA desktop Git client used to manage repository workflows on local machines.South Workinga flexible work model that lets professionals work from Southern Italy while staying connected to digital employment.Sovereign cybersecuritySecurity products and services positioned around regional control, trust, and reduced dependency on foreign suppliers.Sovereign industrial capacityThe ability to retain strategic control over critical technologies and supply chains.Sovereign instanceA service deployment designed to operate within a defined jurisdiction.SovereigntyThe ability of a state to retain control over critical capabilities, decisions, and dependencies.SP0256A classic speech-synthesis chip associated with allophone-based voice generation.SPASingle-page application; a web app that updates content without full page reloads.Space controlActions designed to contest and maintain freedom of operation in space.Space cybersecurity policyRules and guidance aimed at protecting satellites, ground systems, and related services from cyber risk.Space domain awarenessThe ability to detect, track, characterize, and attribute activity in space.Space raceThe period of intense competition to reach the Moon.Space stationa structure designed for people to live and work in orbit.SpacesKibana’s logical separation for grouping content and limiting what different users can see.SpambotAutomated software that sends messages at scale without manual intervention.Spanning Tree Protocol (STP)A layer 2 protocol that helps prevent switching loops by managing redundant paths.Spare parts inventoryExtra components kept available so repairs can happen faster.Sparse attentionAn approach that limits which tokens can interact broadly, reducing compute.Spatial lookupA database query that filters records using geographic relationships or coordinates.Spatial omicsMethods that measure molecules in tissue while preserving where they appear in the sample.Spazi adattivilearning environments that can change to fit user needs.SPDSerial Presence Detect, memory-module metadata used by systems to identify and configure RAM.SPDXAn open standard for representing software and related metadata such as AI assets, datasets, provenance, licensing, and vulnerabilities.SpearfphishingA targeted form of phishing tailored to a specific audience or workflow to increase the chance of interaction.Special buildA vendor-provided cumulative software build that bundles security fixes and other corrections.Special categories of datahighly sensitive data that need extra protection under GDPR.Special education recordssensitive files that may contain protected educational and health-adjacent information.Specialized agentAn AI workflow designed for a narrow task rather than broad, open-ended decision-making.Specialized assistantA tool built for a narrow task area, usually with tighter rules and more predictable output.Specification gamingFinding loopholes in a task definition and optimizing the loophole rather than the goal.SpecificityThe degree to which a biological agent acts on one target rather than many.SpectreA class of CPU attacks that exploit speculative execution to infer protected data through side channels.Spectre-v2A speculative execution attack class that manipulates indirect-branch prediction.Spectrum analyzerA visualization that shows the shape of an audio signal across frequencies.Spectrum compliancemeeting the operating rules that govern how radio devices can legally transmit.Spectrum licenseLegal authorization to use specific radio frequencies for mobile communications.Spectrum monitoringThe process of watching radio-frequency activity for interference, anomalies, or threats that may affect service reliability.Speech recognitionSoftware that turns spoken audio into text or commands.Speech synthesiserHardware or software that converts text or symbols into spoken output.Speech-to-textSoftware that converts spoken audio into written text for search and analysis.Spend capA preset limit that stops or flags usage once a budget threshold is reached.Spend limitAn administrative cap used to control how much a workspace can bill during a period.Spend telemetryMetadata about how money is spent on software or cloud services, used to detect usage patterns.Spesa correnteRegular operating expenditure used to run services day to day, including support and upkeep.SPF and DMARCEmail authentication controls that help verify sender identity and reduce spoofing.SPIA serial bus used to move data between a controller and peripheral devices such as flash memory.SpiderMonkeyMozilla’s JavaScript and WebAssembly engine used by Firefox.Spin FV-1a digital signal processor associated with audio effects and guitar pedal hardware.SPIREA system used to issue and manage SPIFFE identities.SPKI pinningA defense-in-depth technique that ties a client to a known public key for a server.Split ViewA side-by-side tab layout that lets two web pages stay visible in one browser window.SplunkA platform used to search, monitor, and analyze machine-generated data.Splunk Cloud PlatformThe hosted version of Splunk used for search, analytics, and administration in a cloud service model.SPNService Principal Name, the identifier Kerberos uses to map a service to an account.Spogliatoichanging rooms, a setting where people usually expect a strong degree of privacy.Sponsored resultA paid search listing that can appear above ordinary results and be abused for deception.Sponsored search resultsPaid search placements that can be abused to give deceptive pages visibility and credibility.Spontaneous collapsea family of theories proposing that quantum states can collapse without measurement.SpoofableCapable of being falsified so that data or signals appear genuine when they are not.Spoofed domainA deceptive web or email domain made to resemble a legitimate organization.Spoofed WebsiteA fake site built to resemble a legitimate one closely enough to mislead users.Sportello telematicoan online submission window or portal used for filing formal requests.Sports automationThe use of machines or software to support training or play.Spot demanddirect buying of an asset rather than exposure through derivatives.Spot ETFan exchange-traded fund that holds the underlying asset directly.Spotlight feedSnapchat’s public short-form video surface for broader content discovery.Spreadsheet exposureA file-sharing or publishing mistake in which tabular data becomes publicly reachable or visible beyond the intended audience.Spring Boot fat-jarA packaged Java application that includes its dependencies inside one executable archive.Spring ToolsDevelopment tooling that supports building and working with Spring-based Java applications.SPVSpecial Purpose Vehicle, a separate entity used to isolate assets, finance projects, or share risk.SQL connectionA link between an application and a database server used to read or write data.SQL datastructured database content that can include sensitive records.SQL Injection (SQLi)A flaw where unsafely handled input can alter a database query.SQL InterfaceMongoDB's newer SQL-oriented connectivity option for BI workflows.SQL Server backupa backup copy of SQL Server data that may contain operational information if improperly accessed.SQL Server backupsSaved database copies that may contain live data, depending on retention and encryption controls.SQL Server Database EngineThe core service that processes database queries and runs under a specific service identity.SQL Server sysadminA high-privilege database role with broad administrative control.SQL ViewA GeoServer feature that publishes database query results as map layers.SQL ViewsGeoServer features that can generate custom SQL queries for data access, making request handling security-critical.SquidOpen-source software used as a caching proxy for web traffic.SR 26-2Federal Reserve, OCC, and FDIC model risk management guidance updated in 2026, emphasizing tailored oversight of models, including AI and analytics.SSDSolid-state storage that uses flash memory instead of spinning disks.SSESecure Service Edge combines security controls for users, devices, and cloud access in a service model.SSH BastionA controlled jump host used to reach private systems through a narrower access path.SSH brute forcingAutomated guessing of SSH passwords until a login succeeds or attempts are blocked.SSH daemonA background service that provides remote shell access and administrative command handling over SSH.SSH exposureThe condition where Secure Shell management is reachable from untrusted or public networks.SSH handshakeThe early exchange where client and server negotiate keys, algorithms, and session setup.SSH materialAuthentication data such as passphrases or keys used to access remote systems securely.SSH private keyA sensitive authentication file used to prove identity to remote systems over SSH.SSH probingAutomated attempts to identify or guess access on SSH services exposed to the network.SSH rekeyingA process that refreshes encryption keys during an SSH session.SSH tunnelAn encrypted path that carries network traffic inside an SSH session.SSIDThe network name broadcast by a Wi-Fi access point so nearby devices can identify it.SSL_accept()The server-side OpenSSL entry point that begins and processes a TLS handshake.ssl_prereadA stream feature that reads TLS ClientHello data before full connection handling.SSL/TLS certificatea digital certificate used to secure encrypted connections between a user and a website.SSM AgentThe AWS Systems Manager component installed on managed nodes to process Systems Manager operations.SSM documentAn AWS Systems Manager document that defines automation, configuration, or operational commands.SSN exposuredisclosure of Social Security numbers, a high-risk identity event.SSNsSocial Security Numbers, highly sensitive identity data often cited in extortion claims.StabilityThe ability to remain controlled under changing conditions.Stability anchora factor that helps people stay oriented when external conditions become uncertain.Stability issuea problem that affects reliability, crashes, or normal operation.Stable kernel branchesMaintained Linux release lines that receive backported fixes for production systems.Stable milestoneA Chrome release marker used to track scheduled updates, not a severity rating.Stable-channel updateThe public browser release track that delivers security fixes to most users.StackA last-in, first-out structure used to store intermediate values during computation.Stack effectairflow created by temperature-driven density differences, usually pushing warm air upward.Stack OverflowA crash condition caused by excessive recursion or call depth exhausting stack memory.Stackable credentialA certification or course that can be combined with others to build job-relevant skills over time.Staff dataEmployee personal or work-related information that can be sensitive if exposed.Staged datafiles prepared before possible publication or sale.Staged deploymentA rollout method that applies updates to small pilot groups before broader release.Staged filesData gathered or prepared during an extortion workflow.Staged leakpartial publication used to intensify coercion before a full release.Staged loadingA multi-step process where one component unpacks or retrieves the next payload before final execution.Staged releasetimed publication of material in steps rather than all at once.StakeholderA person or group affected by, or able to affect, a company’s activities.Stakeholder alignmentShared agreement among the people who fund, build, use, and govern a project.Stakeholder ManagementThe practice of understanding and aligning the needs, interests, and influence of people involved in a project.Stakinglocking cryptocurrency to support network operations and earn rewards.Stale cache valuescached data that no longer matches the current state of the system.Standalone microphoneA microphone that operates as its own device rather than as a simple accessory.Standardan agreed technical specification used across different systems.Standard Contractual ClausesPre-approved contractual terms used to legitimize transfers of personal data outside the EU.Standard editionthe baseline version sold at the regular entry price.Standard workA lean method for defining repeatable tasks that can be improved over time.Standardization processThe formal review path used to evaluate and select algorithms for wider adoption.Standardsagreed technical or governance rules that help systems interoperate, comply, or gain wider acceptance.Standards bodyAn organization that develops shared rules or technical baselines for interoperability, safety, or compliance.Standards candidatea proposed algorithm being evaluated before formal adoption.Standards EcosystemThe network of vendors, owners, integrators, and bodies that shape security practices around a standard.Standby modeA low-power state where a device appears inactive but may still process data.Standing credentialsLong-lived or already-available access credentials that an agent can use without fresh authorization for each action.Standing local-admin rightspersistent administrator-level access on a device.StarlinkSpaceX's satellite internet network for civilian and commercial connectivity.StarshieldA SpaceX satellite communications service aimed at national-security and government use.STARTTLSA mail protocol extension that upgrades an email connection to TLS for encrypted delivery in transit.Startup entrya setting that makes software run when Windows boots.Startup executionPrograms configured to launch automatically when a user logs in.Startup memory loaderThe component that loads saved instructions or memory when a session begins.State ChangeAny update that alters a system of record, such as modifying account details or submitting a claim.State CIOA state government technology leader responsible for digital strategy, operations, and cyber coordination.State confusionA failure where data is accepted in the wrong request or conversation context.State consistencythe condition where an app and its background settings remain aligned after a transfer.State driftA mismatch between intended configuration and what is actually running.State Environmental Quality Review Act (SEQR)New York’s environmental review process for state agency actions and certain projects.State integrityThe reliability of stored data so it cannot be altered or counted incorrectly.State lineageThe chain showing how one system state leads to the next across actions or workflows.State managementThe process of tracking machine conditions so each action happens in the right order.State tableA live record of active flows that helps a NAT device match returning packets to the right session.State transitionA change from one device mode to another, such as sleep, wake, open, or close.State-changing requestAn action sent to a system that alters settings, starts or stops processes, or changes data.State-directed operationa cyber mission carried out under government authority or supervision.State-linked cyber actorA hacker or group believed to align with a government’s strategic goals.State-trackingA system that records changing values such as damage, fuel, or progress.Stateful firewallA firewall that tracks connection state so it can make decisions in context.Stateful settinga preference that persists across sessions, reboots, or updates.Stateless architectureA design where each request carries the context needed to be handled independently.Statement of reasonsa written explanation for why a platform took an enforcement action.Static Application Security Testinganalyzing application code for security issues before software is released.Static benchmarkA fixed evaluation set that does not change over time, which can lose value as models improve.Static binaryA self-contained executable that runs without separate installation dependencies.Static credentialsFixed login details that do not change dynamically and can become a persistent access risk.Static detectionSecurity scanning based on file signatures, hashes, or fixed indicators rather than live behavior.Static HTMLA web page file that can be displayed by a browser without server-side logic.Static inspectionAnalysis of a file without executing it, often used for signature matching.Static IPa fixed public address that can simplify remote access and service publishing.Static libraryAn archive of object files, typically packaged as a .a file and linked into software at build time.Static websiteA normal, persistent web page that can often be blocked, scanned, or taken down more easily.Station-keepingSmall corrective maneuvers that preserve a spacecraft’s intended orbit or position.Statistical thinkingusing numbers and probability to judge evidence and patterns.Status CommunicationTimely, accurate updates that explain service impact, recovery progress, and known unknowns during an outage.Status cuesvisible or behavioral signals that suggest rank, confidence, or social position.Status pageA public page used to communicate service health, incidents, and recovery progress.Status-reporting layerThe part of a system that turns internal health data into user-visible messages.Statutory DefinitionThe legal wording in a law that fixes how a term is officially understood.Stealer loga record of credentials or browser data collected by infostealer malware.Stealth listingA listing that does not clearly disclose the model provider’s identity.Stealth modea private operating phase before a company makes a public launch.Steam GuardSteam’s account protection layer that adds an extra verification step for logins and device authorization.Steam wandA tube or nozzle that releases steam for heating or frothing.Steel stencilA professionally made stencil material used for more precise paste application.Stencil duplicatorA machine that reproduces text or images by forcing ink through a prepared stencil onto paper.Stereo visionA technique that uses two viewpoints to estimate depth from image differences.Stewart platformA parallel mechanism used for precise multi-axis movement; the source describes it as a common 6-DOF actuated plate used with a fixed base.STLA common 3D mesh file format used to describe printable geometry.STM32F207An STM32 microcontroller model used as the core of the oscilloscope project.Stockpile leakageloss of equipment from stored reserves through theft, corruption, or poor controls.Stolen datainformation an actor claims to have taken from a target.Stolen-data storagespace used to hold exfiltrated files or credentials.Stop conditionThe rule or signal that tells a system to pause, hand off, or terminate an action.Stop ConditionsPredefined limits that tell testers or operators when to halt an evaluation or deployment.Stop ruleA predefined condition that pauses use of a system when uncertainty, risk, or malfunction becomes too high.Storage mediathe physical material or device used to save digital information.Storage mediumThe material or system used to hold information for later use.Storage offloadA migration method that shifts copying work to the storage layer instead of the host.Storage remanenceLeftover data that can remain on reused storage media after a previous workload is gone.Storage zeroingOverwriting reused storage blocks so previous contents cannot be recovered by the next tenant.Store listingThe app’s public description, screenshots, and metadata shown in the marketplace.Store-and-forwardA delivery method where a node holds a message until it can pass it along.Stored account creditPreloaded balance held inside an account and usable for purchases or redemptions.Stored Cross-Site ScriptingA bug where malicious script is saved by a system and later delivered to other users, often through an admin interface.Stored injectionAn attack pattern where malicious input is saved first and executed later by another process.Stored mailEmail content kept on a server or appliance rather than only on a user device.Stored SQL injectionA variant where malicious input is saved first and triggered later in a different part of the application.Stored-program computerA machine designed to keep instructions in memory rather than hardwiring them.Storefronta digital sales or download portal used to distribute software or content.Storefront attack surfaceThe public-facing parts of an e-commerce site that attackers can reach remotely.Storefront impersonationA fake page or listing designed to resemble an official seller or download source.Storefront metadataThe product fields attached to a listing, such as platform, region, and price.Story missiona designed objective that advances the main narrative.StoryboardA scene-by-scene visual plan that maps how a story or video will unfold.STRBrazil's real-time gross settlement system for irrevocable interbank transfers.STRASpace Threat Response Architecture, an EU framework for coordinating responses to space-related threats.Strategic centera site that concentrates skills, decision-making, or high-value industrial activity.Strategic dependencyReliance on external suppliers or infrastructure that can create security and resilience risk.Streaming fraudManipulation of play counts or listening behavior to distort rankings or payments.Streaming rightsthe legal permission to distribute live or on-demand video over the internet.Streaming stickA compact media device that plugs into a television to run apps and stream content.Stress scenarioa severe but plausible condition used to test whether systems and finances can withstand shocks.Strike predictionThe challenge of forecasting when and where a lightning event will occur.String lightsFlexible strands of bulbs or LEDs often used for casual decorative lighting.Stripped BinaryA binary file with symbols and debug data removed, making analysis harder.Strong authenticationA layered identity check that uses more than one factor or control.Strong magnetic fieldsPowerful magnetic forces that can affect nearby material and systems.strongSwanAn open-source IPsec and IKE software suite used to build VPN connections.Structural auditA review of a model’s internal behavior, features, or causal pathways rather than only its outputs.Structural pressureOngoing organizational or market forces that shape a role over time.Structured cablingan organized wiring system used to keep network infrastructure orderly and maintainable.Structured contentInformation organized into fields that software can process more reliably.Structured dialoguea formal exchange intended to clarify issues and narrow disputes early.Structured experimentationa controlled way to test new tools or workflows with guardrails before wider rollout.Structured exportA built-in way for a device to send readings in a machine-readable form.Structured interviewa consistent interview format that uses the same job-relevant questions for each candidate.Structured loggingLogging in a predictable machine-readable format, often used for search, monitoring, and alerting.Structured modela welfare setup built around clear rules, repeatable processes, and defined services.Structured OutputMachine-readable results formatted in a predictable way, such as typed fields or labeled values.Student modelThe smaller model that is trained to copy useful behavior from a larger teacher model.Studio continuityThe degree to which a project keeps the same team, process, or creative direction.Study guideA learning resource designed to prepare readers for an exam.STUN protocolA standard used to discover NAT mappings and support real-time network connections.Sub-applicationA reusable app or workflow component that can be chained into a larger AI-driven process.Sub-millisecond power rampA very fast change in electrical load measured in less than one thousandth of a second.Sub-tier supplierA supplier that supports your direct vendor rather than serving you directly.SubassemblyA smaller functional unit inside a larger device, such as a board, button set, or housing.Subcontracting chainThe layered set of downstream providers supporting a primary ICT service.SubdomainA domain name under a larger parent domain that can be created in large numbers.Subdomain takeoverAn attack in which someone claims a dangling subdomain and controls what it serves.Subgroup evaluationTesting model behavior separately across demographic or contextual groups.SubjectThe speaking self, understood here as more than a biological person.Subject Alternative Name (SAN)A certificate field that lists the hostnames or IP addresses the certificate covers.Subject fidelityHow well a model preserves the identity or defining features of the original subject.SubkeyA secondary key linked to a main GPG identity, often used for a specific task such as signing releases.Submarine cablesUndersea fiber-optic links that carry data between countries and continents.Submarine interconnectorAn undersea cable system that links electricity networks across borders or regions.Submersible droneA robot designed to operate in water or other submerged conditions.Submission workflowthe process used to send billing or administrative records into another system.Subscriber countThe number of people following a channel, often used as a rough audience metric.SubscriptionA recurring payment model for access to a service over time.Subscription dependencyA workflow that relies on access to a paid service or plan feature.Subscription layerrecurring paid services tied to a product or platform, creating extra account risk.Subscription plana pricing model that grants access for a monthly or yearly period.Subscription renewalThe date a paid plan extends, which can trigger policy changes or new limits.Subscription validationA check that confirms an active paid plan before access is granted.Subsea data centerA computing facility deployed underwater, often to use the surrounding environment as part of its cooling and siting design.Subsidized accessReduced-cost or supported access to a tool, service, or program for selected users.SubsidyPublic financial support designed to reduce costs or support a target group.Substantial modificationA significant change to a product that may affect compliance analysis.SubstantiationEvidence used to support a product claim, especially in advertising and procurement review.Substantive complianceMeeting a rule in practice, not just in policy documents.SubstationA grid facility where switching, protection, and control equipment help move and regulate electric power.SubstitutionA situation where the system replaces human input instead of merely assisting it.Subtractive securitya design approach that reduces risk by removing unnecessary access and pathways.Success criteriaPredefined thresholds that determine whether a rollout is healthy enough to continue.Suction gripperA mechanism that uses vacuum to hold or manipulate objects.sudoersThe configuration file that defines sudo authorization rules.SuitabilityThe requirement that financial advice matches a client’s goals, risk appetite, and circumstances.SunspotA dark region on the Sun’s surface linked to concentrated magnetic activity.Super adminA highly privileged account that can change core settings and access broad Workspace administration functions.Super peerA more central node in a peer-to-peer malware network that helps relay information across the overlay.Super_adminA high-privilege role that can alter other administrator accounts and system settings.Super-appA mobile app that combines several services, such as chat, payments, and social features, in one platform.Superannuationa retirement savings system that depends on secure identity, payments, and account administration.SupercomputingHigh-performance computing used for data-heavy workloads such as advanced AI training and simulation.Supercomputing stackThe combined hardware, software, and operational layers that keep a supercomputer service running.Superconducting transistora transistor concept that uses superconducting materials to move signals with very low electrical resistance.SuperconductivityA state in which a material carries electric current with zero resistance below a critical temperature.Superseding indictmentAn updated criminal charging document that can add counts, defendants, or new allegations to an existing case.Superset SQL LabA built-in interface for writing and running SQL queries inside Apache Superset.SupersonicFaster than the speed of sound in a given medium, usually air.SuperuserA high-privilege account with broad administrative control over a device or system.Superuser accountA highly privileged account that can change system settings and manage other users.SupervisionThe oversight function used to monitor banks and financial institutions for safety and compliance.SupervisorThe Home Assistant management layer that can control apps and system-level operations on Home Assistant OS.Supervisor tokenA high-privilege bearer credential used for internal Home Assistant control-plane access.SUPERVISOR_TOKENThe documented credential used by apps and Home Assistant to authenticate to Supervisor APIs.Supervisory Control PlatformSoftware that monitors and controls connected industrial devices and processes.Supervisory controllerA system that monitors and manages operational equipment such as refrigeration or HVAC assets.Supervisory reporta formal notice sent to an oversight authority about a regulated event.Supervisory SystemA platform that monitors and manages field devices, often collecting status data and sending configuration changes.Supplier assuranceOversight meant to reduce risk from external vendors, integrators, and service providers.Supplier DependencyA relationship in which an internal service relies on an external provider, platform, or managed service to function.Supplier dossierInternal records used to assess vendors, ingredients, or manufacturing partners.Supplier financeA payment structure where a buyer's obligations are managed through a financier, often extending settlement timing.Supplier governanceThe discipline of overseeing vendors, setting expectations, and monitoring dependency risk across outsourced services.Supplier switchThe process of moving a customer from one energy provider to another.Supplier switchingThe process of moving an account from one energy provider to another.Supply capA maximum amount of an asset that the protocol is designed to allow.Supply chain assuranceSecurity checks and governance practices used to reduce risk from vendors, software, and hardware providers.Supply chain bottleneckA constraint that slows the flow of components from factories to buyers.Supply chain concentrationThe clustering of critical production steps in a small number of regions or suppliers.Supply chain databusiness information tied to suppliers, logistics, and production workflows.Supply chain exposurerisk that disruption at one business affects partners, customers, or logistics.Supply chain hygienePractices that keep software builds predictable, reviewable, and easier to trust.Supply Chain MalwareMalicious code delivered through trusted software distribution paths, such as packages, updates, or build dependencies.Supply Chain Risk Management (SCRM)A structured way to identify and reduce risks in suppliers, products, and services across their lifecycle.Supply chain transparencyVisibility into the vendors, components, and dependencies behind a service.Supply chain trustThe confidence that code, packages, and build metadata have not been altered between creation and deployment.Supply-chain abuseMisuse of manufacturing, packaging, or preinstallation paths to place unwanted software on a device.Supply-chain disruptioninterruption of external suppliers, services, or dependencies that support operations.Supply-chain governanceThe practice of mapping, assessing, and managing security risk introduced by vendors, components, and upstream providers.Supply-chain integritySecurity measures that help ensure software, updates, and dependencies have not been tampered with.Supply-chain malwareMalicious code that targets software distribution channels to reach downstream users.Supply-Chain Risk Management (SCRM)The practice of identifying and reducing risk introduced by hardware, software, services, and vendors.Supply-chain tamperingUnauthorized modification of a product before it reaches the end user.Supply-chain trustConfidence in the origin, update path, and control of a third-party component.Supply-chain-style attackAbuse of a trusted distribution point to reach downstream victims.Support bathA surrounding medium used during some printing or fabrication methods to help hold a shape in place.Support channelan attacker-controlled contact path used for pressure or negotiation.Support deadlineThe date after which normal vendor maintenance is no longer provided.Support materialtemporary structure used to hold difficult shapes during printing.Support sessionA live remote connection between a technician and a user for troubleshooting or assistance.Support structuresTemporary material that holds overhangs and delicate parts during printing.Support toolingCustomer service systems that may store tickets, notes, and account details.Support windowThe time span a vendor commits to servicing a device or platform.Supported releaseA software version that still receives security updates and vendor maintenance.Supporting infrastructureThe digital services that help criminal networks communicate, host content, or coordinate activity.Suppression listA list used to exclude people from further contact.Suppression logicRules that block messages to people who have objected or otherwise must not be contacted.Surface areaThe amount of exposed material available for heat exchange and evaporation.Surface chemistrythe chemical behavior that occurs where a material meets its environment.Surface finishthe texture and visual quality of a part’s outer layer.Surface texturethe fine structure of a material that affects grip and motion.Surface transportationTransportation infrastructure such as rail, transit, and related ground-based systems that can carry operational cyber risk.Surface-mount componentsElectronic parts mounted directly onto the surface of a PCB.SuricataAn open-source IDS/IPS engine built for high-speed packet inspection.Surrogate modelA stand-in system trained to approximate the behavior of a target model.Surrogate therapistA tool used as a stand-in for professional mental-health care.SurveillanceThe collection of information about people, devices, or activity for observation or analysis.Surveillance authoritiesRegulators that assess whether compliance methods are adequate under the AI Act.Surveillance cameraa device that records scenes or activity for monitoring and review.Surveillance dataInformation collected to observe movement, behavior, or activity.Surveillance integrationthe linking of monitoring tools with other security or building systems.Surveillance malwareMalicious code designed to quietly monitor a device and collect information rather than destroy files.Surveillance toolssystems used to collect, process, or manage monitoring data.SuspectA person under investigation, not a person proven guilty.Sustainable controlsSafeguards that can keep working over time instead of depending on ad hoc effort.SVGAn XML-based vector image format that can be misused as a malware container.SVG attachmentA scalable vector graphic file that can carry active content such as embedded scripts.SVG SmugglingA technique that hides active or deceptive content inside SVG files to make malicious delivery look harmless.SVIDA SPIFFE Verifiable Identity Document, usually a short-lived workload credential.Sviluppo dei territorilocal growth driven by knowledge, institutions, and the practical use of expertise.SwaggerThe older branding and tooling ecosystem associated with OpenAPI.Swap meetAn informal marketplace where attendees trade or give away items.SwappingMoving data between RAM and disk when physical memory is under pressure.swatchdogA Zimbra service involved in monitoring-related functions and part of the vulnerable path.Swift-based payloadMalware implemented in Apple’s Swift language, which can help it fit a macOS environment.Switchthe process of moving from one supplier contract to another.Switched capacitora circuit technique that uses timed switching to simulate analog behavior.SwitchingThe process of changing electrical paths or states.Switching costsExpenses and friction involved in moving from one provider to another.Switching logicThe rules a device uses to choose between multiple inputs.SY0-701The exam code named in the guide.Symlink raceA timing flaw where a symbolic link is changed between checks, causing a program to follow the wrong path.Sync timeouta failure to complete a synchronization attempt within the expected time.Sync timingThe timing pattern that tells a display when to start lines and frames.Syncable authenticatorA passkey-style credential that can move across devices, but whose security depends on recovery, sync, and policy controls.Synced passkeysPasskeys that can be shared across approved devices through a secure sync mechanism.Syndicatea coordinated criminal network with specialized roles.SyndicationA co-investment setup where multiple investors pool capital and share risk in the same funding round.SynkLoaderA malware family described as a loader that can stage additional tools.SyntaxThe set of rules that defines how a command must be written.SynthesisThe process of converting hardware description code into logic for a chip.SynthesiserAn electronic device or program that creates sound by generating audio signals.Synthetic AudioSound created or substantially altered by an AI system rather than recorded directly from a human performance.Synthetic content markingTechnical labeling that identifies AI-generated or manipulated text, audio, image, or video.Synthetic identity fraudThe use of mixed real and fake identity details to open accounts or contracts.Synthetic monitoringAutomated testing that checks services before real users are affected.Synthetic nucleic acid sequence screeningChecks used to flag or block risky DNA or RNA orders before synthesis.Synthetic polymersMan-made materials built from long chains of repeating chemical units.Synthetic sexualized imagesAI-made or AI-altered images that depict a person in explicit or sexualized form.Synthetic testimonialA review or endorsement created by AI or automation rather than a real person’s experience.Synthetic video callA fabricated video interaction that can imitate a real speaker or executive.SyslogA logging mechanism used to collect and forward system and application events.Syslog serverA service that collects and stores log messages from systems and applications.SYSTEM / LocalSystemA highly privileged Windows account used by core services and system components.SYSTEM accessThe highest local Windows privilege level, above standard administrative rights.System characterizationMeasuring how a system behaves under different conditions so its limits are better understood.System classificationthe act of assigning a system to a regulatory or oversight category.System componentA core Android software area that helps define how the platform handles trusted operations.System compromiseunauthorized access to or control of a device, account, or service.System failurea breakdown that prevents normal digital operations from continuing.SYSTEM hiveA Windows registry hive that can hold keys needed to decrypt protected directory data offline.System imageThe packaged operating system and preinstalled software that ships on a device; if it is altered, the compromise can survive ordinary app removal.System Information DiscoveryAttacker activity that gathers host details to guide follow-on actions.System integrityconfidence that a device and its software are operating as intended.System interdependencethe way separate services rely on one another to function as intended.System isolationSeparating affected machines or services to limit further spread of compromise.System language checkA malware behavior that inspects the host language and may stop or alter execution in some campaigns.System Management Mode (SMM)A highly privileged CPU mode used for low-level firmware tasks and isolated from normal operating-system control.System of actionA workflow layer that can trigger business operations instead of only displaying information.System OneTypeSafe AI’s framing for fast, intuitive decision-making, borrowing the idea of rapid thinking.System outagea period when services or internal tools are unavailable.System partitiona protected storage area that holds core operating system files and privileged applications.System Prompt LeakageThe unintended exposure of hidden instructions that shape how an AI behaves.System reconnaissanceEarly-stage collection of host details used to tailor later attack steps.System resilienceThe ability of a service to keep operating and recover quickly after an incident or failure.System restarta forced reboot that interrupts normal use after a serious fault or crash.System Security PlanA document that describes how security controls are implemented and managed in a specific environment.System shutdowna containment response that can limit damage while reducing availability.System terminationA condition where software forces the operating system or a service to stop running.SYSTEM-level privilegesThe highest practical privilege level on Windows, giving a process broad control of the host.System-level securityA cybersecurity approach that covers the full deployment environment, not just the model or app itself.System-of-modelsAn architecture that combines multiple AI models instead of relying on one model for every task.System-of-SystemsA mission architecture where spacecraft, ground stations, communications, and support services function as one linked whole.System-on-chipA processor that combines multiple computing functions into one package.System.UserA special Mendix platform entity for user management with built-in access behavior.SYSTEM/LocalSystemA highly privileged Windows security context with broad local access to operating-system resources.systemd-journaldA Linux logging service that collects and stores system logs in journal files.Systemic effectsharms or consequences that arise from the behavior of an entire system.Systemic levela broad view that looks for patterns across many decisions rather than one isolated case.Systemic-risk GPAIGeneral-purpose AI that may create broader risks because of its scale, capability, or deployment context.Systems integrationThe process of making separate components work together as one functioning setup.Systems of National SignificanceA higher-criticality subset of infrastructure that can face enhanced security obligations.Systems of systemsA design made of multiple interacting systems whose combined behavior creates the overall mission capability.Systems resiliencethe ability of a design to keep functioning under stress or partial failure.SYSVOLDomain share used to distribute files and scripts across Windows domain controllers.