Vendredi 16 Octobre 2026 22:22:57 GMT+02:00
Netcrook
WIKICROOK - T
TERMES TECHNIQUES
Tab captureA browser capability that can record or stream the visible contents of an active tab.TabStripThe browser UI component that manages tabs and tab-related interactions inside the Chrome window.TACOpenAI's Trusted Access for Cyber program.TACACS+A centralized protocol for device administration that separates authentication, authorization, and accounting functions.Tagged VPN SessionsVPN sessions marked with identifiers that can be treated differently by security appliances or policy logic.Tagging artifactA metadata clue that may help infer activity patterns.Tags blockA special Unicode range, U+E0000 to U+E007F, that can represent ASCII-like strings and is often relevant in obfuscation analysis.Tail latencyThe slowest response times in a system, usually measured at high percentiles such as p95 or p99.Tail riskThe danger linked to rare but extreme outcomes in a distribution.Taint trackingtracing how untrusted input moves through an application toward sensitive operations.Takdown workflowThe process a platform uses to receive complaints, review content, and remove material quickly.Take-private transactionA deal that moves a publicly traded company into private ownership.Takedown pressureEfforts by providers, investigators, or platforms to remove abusive services.Takeover claiman allegation that one actor gained control of another actor’s online property.Takeover flawA vulnerability that may let an attacker gain unauthorized control of a device, account, or service.Takeover requestA prompt telling a human operator to resume control immediately.Talent densitya management idea focused on how much value each employee can produce, especially when paired with AI tools.Tamagotchi-style deviceA digital pet concept that depends on user care or interaction.Tamper alarmA sensor or alert system that signals unauthorized physical access to equipment.Tamper controlA security feature that detects or responds to unauthorized opening or handling of a device.Tamper evidencesigns or seals intended to reveal whether a device was opened or altered.Tamper-evidenceA property that makes unauthorized changes visible or detectable.Tamper-evident logginglogs designed to reveal unauthorized changes after the fact.Tamper-resistant meterA meter designed to make interference, bypass, or manipulation harder to carry out unnoticed.Tangible benefitsmeasurable security improvements that can be linked to a control or program.TanStack QueryA data-fetching library that helps applications manage server state with reusable hooks.TapjackingA trick that misleads users into tapping hidden or deceptive interface elements.Tar archiveA file format that bundles multiple files and metadata into a single container.TarballA packaged archive file, often ending in .tar or .tar.gz, used to distribute software.tarfileA Python standard-library module used to read and write tar archives.Target domainThe website address linked to the alleged victim.Target identificationThe stage of research that selects biological targets a potential drug may act on.Target resolutionThe process of mapping a label, name, or identifier to a specific host, account, domain, or service.Target selectionChoosing which users or organizations to attack based on perceived value or likelihood of success.Target stringthe domain or label named in the claim, not proof of compromise.Target surfacethe exposed system or website named in a threat claim.Targeted activityAdversary attention directed at a system or organization, which may include scanning, probing, or attempted access.Targeted attackAn intrusion attempt aimed at a specific person, device, or organization instead of random victims.Targeted phishingA message crafted for a specific victim or organization to increase the chance of compromise.Targeted surveillanceMalware activity focused on specific people or groups rather than broad, indiscriminate infection.Targeted threatsattacks aimed at a specific person or group rather than random victims.Targetingdirecting an intervention at a specific molecule or sequence.Targeting signalA data point used to select a device or audience for delivery of content or payloads.TARIIn Italy, the municipal tax linked to waste collection and disposal financing.Tariff calculationthe method used to turn consumption and pricing rules into a bill.Tariff documentationcommercial records that can reveal pricing and trade relationships.Tariff locka fixed-price period that limits price changes for a set time.Tariff structurethe full set of pricing rules, fees, and duration terms that determine what a customer pays.Tariffa a fascepricing changes by time band, often separating peak and off-peak use.Tariffa monorariaa single-rate electricity tariff with one pricing structure.Task AllocationThe division of work between humans and machines, which determines what AI automates, assists, or leaves unchanged.Task appSoftware used to organize reminders, to-dos, and daily planning.Task augmentationWhen technology helps a person work faster or better without fully replacing them.Task decompositionBreaking a job into smaller steps so teams can decide which parts may be automated and which should stay human-led.Task delegationAssigning a specific job or thinking step to a tool instead of a person.Task dependencyA relationship where one project task must happen before another can begin or finish.Task listA written list of items to do, often ordered by priority or deadline.Task mappingIdentifying how specific activities inside a job change when new technology is introduced.Task MiningCollection of desktop activity traces to understand how people perform tasks in practice.Task planningThe process of turning a goal into a sequence of executable steps, often used in robotics.Task recompositionThe reshaping of a job into new mixes of human and machine work.Task SchedulerThe Windows subsystem used to create, manage, and run scheduled jobs on local or remote systems.Task substitutionWhen technology replaces specific activities once performed by people.TaskflowA repeatable security workflow that breaks research into structured steps.TaskingThe assignment of missions or priorities to teams, units, or operators.Tax baseThe pool of economic activity or assets a government can tax.Tax incidenceThe economic burden of a tax, which may fall differently from who formally pays it.Tax instrumentA fiscal measure used to influence business behavior through deductions, credits, or relief.Tax ManagerA budgeting aid that helps estimate tax obligations and plan reserves.Tax wedgeThe gap between what an employer pays for labor and what a worker takes home after tax and contributions.TBOMTrusted Bill of Materials, a proposed evidence-bearing record that aims to show both composition and verification.TCCApple’s Transparency, Consent, and Control framework, which governs access to sensitive macOS resources.TCPA connection-oriented transport protocol that depends on stable session state for reliable communication.TCP 19009A documented Check Point management port used by SmartConsole and related administration traffic.TCP 2375The non-TLS port commonly associated with Docker remote API access.TCP 6379The default network port used by Redis for client connections.TCP port 102The network port commonly used for S7 communication and a key exposure point to monitor or restrict.TCP port 23The network port assigned to Telnet services and a common indicator for Telnet-targeted probing.TCP session hijackingTaking over an established TCP conversation by interfering with its state or packets.TCP/102A network port commonly associated with Siemens S7 communication paths in industrial settings.TCP/4307A network port associated with the TrueConf Server service path and relevant to exposure review.TD04The electronic invoicing code commonly used for a credit note.TDMText and data mining, the automated analysis of large volumes of digital content.Teacher agencyThe educator’s ability to guide, override, and interpret the learning process.Teacher competenciesthe skills educators need to use tools effectively in practice.Teacher modelThe larger model whose outputs are used to train a smaller model.Teaching process indicatorsmetrics that track what happens during instruction, not only final results.Team spiritShared commitment that helps groups work together under pressure.TeamFiltrationA cross-platform framework used for Microsoft 365 and Entra ID account enumeration, credential spraying, and related identity operations.Tech riskThe chance that technology-related weaknesses affect business operations or strategy.Tech sovereignty packagea European policy framework focused on strengthening control over technology capacity and strategic digital assets.Tech support scamFraud that uses fake warnings or support identities to coerce victims into calls, payments, or remote access.Tech-support impersonationA tactic where attackers pose as help desk staff or support agents to gain trust and pressure victims.Tech-support scamA fraud scheme that impersonates technical help to push victims into paying money, granting access, or revealing information.Technical capability noticeA UK legal tool that can require an operator to maintain or support certain access capabilities.Technical constrainta design limit that shapes how a system looks, behaves, or is delivered.Technical credibilityTrusted expertise built through hands-on work and demonstrated skill.Technical curiosityThe habit of asking how systems function and what happens when they change.Technical drawingsdesign files that can reveal intellectual property and operational details.Technical fileThe documentation package that records design, testing, risk controls, and related evidence for a regulated AI system.Technical fluencyEnough understanding of systems and controls to ask informed security questions.Technical folkloreRepeated stories about technology that persist without solid proof.Technical markingA machine- or system-level signal used to help identify AI-related content.Technical monitoran oversight mechanism used to check whether required rules are being followed.Technical skills gapthe shortage of people with the expertise needed to build, secure, and maintain complex systems.Technical surfacethe parts of a system that can be used, tested, or stressed by software.Technical-support scamFraud that tricks victims into contacting fake support agents or call centers.Technological dependenceReliance on external suppliers for critical hardware, software, or infrastructure components.Technological safeguardsSecurity and compliance controls built into digital systems and workflows.Technology stewardship and digital judgmentThe capacity to make durable decisions about platforms, architecture, and technical risk.TechshoringA policy idea focused on anchoring high-value technology activities within a country’s industrial ecosystem.Teen AccountsPlatform account settings designed to apply stricter defaults and limits for adolescent users.Telco cloudA telecom-oriented cloud architecture used to run network and service functions with software-defined controls.Telco sensingusing telecom infrastructure as a distributed system for detecting events in the physical world.TelecomA communications provider that carries voice, data, and messaging traffic.Telecom connectionA communications link used to move data or voice traffic between networks.Telecom datainformation held by phone and wireless providers, often connected to customer identity and service control.Telecom databasesdata stores connected to communications operations and often highly sensitive.Telecom dependencyA service relationship where an organization relies on a carrier or communications provider for connectivity.Telecom fraudScam activity that abuses voice or phone systems to deceive targets.Telecom intrusionunauthorized access to communications providers’ systems or data environments.Telecom metadataservice and account details tied to communications records.Telecom netblocksLarge IP address ranges assigned to telecommunications providers and their infrastructure.Telecom security baselineA common minimum set of controls used to compare and improve carrier defenses.Telecommunicationsthe networks and services that carry voice, data, and internet traffic.TelecomsCommunications networks and providers that carry voice, data, and other essential traffic.Telegram botA third-party automated account on Telegram that can handle messages and, if abused, collect sensitive data.Telegram bot channelA messaging path that can be abused to send tasks or receive results from compromised systems.Telegram command channelA messaging-based route that can be used to send instructions to malware.Telegram StarsTelegram’s in-app payment layer for digital goods and services.TelegraphAn early electrical messaging system that sends short signals over distance.Telehealth recordsDigital files tied to remote care workflows, sometimes containing sensitive health information.Telemarketingdirect marketing by phone, often governed by specific rules on contact and privacy.Telemarketing abuseunsolicited or deceptive phone-based sales activity that can cross legal or ethical boundaries.Telemarketing complianceThe set of controls used to make sales calls lawful.Telematic cash registerFiscal register that sends sales data electronically to tax systems.Telematic meetinga meeting conducted through digital communication tools.Telematic registerA certified fiscal device that records and transmits sales data electronically.Telemedicine platforma healthcare system that delivers services remotely through software and networks.Telemetry pathThe route security data takes from collection to alerting; if that path is altered, detection can go dark.Telemetry platformSoftware that gathers operational data for monitoring, investigation, and security analysis.TeleoperationRemote control of a machine by a human operator from a safer location.TeleoperatorA remote human who can interact with or assist a connected system.Teleradiologyremote review of imaging studies by clinicians.TelevisitA remote medical consultation, often by video or phone.Temp directoryA temporary file location often used for staging installers, scripts, and other transient files.TemperatureA generation setting that changes how random or consistent model output can be.Temperature ExcursionA period when stored goods move outside the safe temperature range and may need to be discarded.Temperature regulationControlling nozzle or bed heat so the filament stays within a usable printing range.Temperature-sensitive paperPaper coated to darken when heated by a print head.Temperature-sensitive planningPlanning that changes with heat or seasonal conditions.TemplateA reusable format that helps teams collect information in a consistent way.Template catalogA collection of prebuilt page designs that can be reused to impersonate different organizations.Template escapingReplacing dangerous characters so user input is rendered as text instead of executable code.Template HierarchyThe order WordPress uses to choose which theme file renders a page.Template injectiona flaw where crafted input changes how a template is processed.Template renderingThe process an application uses to turn stored or submitted data into an email or webpage.Template ResolutionThe process a web app uses to choose which template file to load for a page.Template runtimeThe part of an application that turns templates and data into web pages.Templating engineSoftware that turns template text and variables into a rendered page or output.Temporal Data ProblemA mismatch caused when events happen late, out of order, or not at all during disruption.Temporal resolutionThe ability of an imaging system to distinguish events that occur close together in time.Temporary ChatsSessions designed not to create new memories, useful for more sensitive drafting.Temporary circuita circuit-like state that exists only while a triggering condition remains active.Temporary clausea limited-term condition that may expire or be revised later.Temporary fixA short-term mitigation that reduces impact before a permanent repair is available.Temporary IAM credentialsShort-lived AWS credentials tied to an IAM role and used to access AWS APIs.Temporary mitigationA short-term control that reduces exposure before a permanent fix is applied.Temporary restraining orderA fast court order that can temporarily block access to assets or domains while a case proceeds.Temporary security credentialsShort-lived AWS credentials that expire automatically and reduce secret lifetime.Temporary-file handlingThe way software creates and manages short-lived files during setup or updates.Tenancy modelThe way resources are isolated or shared between customers in a hosted environment.Tenant recordsOperational data tied to leasing, billing, and property management.Tenant separationControls that keep one customer’s data, logs, and operations isolated from another’s.Tenant TelemetrySecurity and audit data generated by a cloud tenant, useful for spotting unusual activity.Tenant-Bound SupportRemote support that stays inside a managed organizational identity environment instead of relying on cross-tenant trust.TenderA competitive process for assigning public contracts or assets.Tender databid and sales information that can reveal commercial priorities.Terabit per second (Tbps)A bandwidth unit used to describe extremely large traffic volumes.Term lengthThe duration for which funds remain committed before maturity.Terminal agentAn AI tool that can interact with files, commands, and system output from a shell-like interface.Terminal commandA text instruction run in a command-line interface to perform actions on a system.Terminal emulatorSoftware that displays a text-based session on a modern computer.Terminal interfacea text-based interface controlled through commands.Terminal Operating System (TOS)Software that helps manage terminal activities such as cargo flow, yard operations, and intermodal coordination.Terminal systemsOperational platforms that coordinate cargo handling and port workflows.Terminal workflowCommands and tools used directly from a developer’s command-line environment.Terminal-side validationA local check performed by the payment reader before or during transaction processing.Termine finalethe point at which a procedure is clearly meant to end.Terminology updateA revision to the words used in a standard or guideline.Terms and conditionsThe rules that define how a financial product works in practice.Terms of Service (TOS)The usage rules that define what customers may and may not do with a service.TerraformInfrastructure-as-code software used to define and provision cloud resources with declarative configuration.Terraform moduleA reusable infrastructure-as-code component that helps define and provision cloud resources.Terraform providerA plugin that lets Terraform connect to external services and is commonly installed during infrastructure setup.Terraform stateA file that records infrastructure state and can contain sensitive cloud metadata or secrets.Terrain adaptationthe ability of a machine to adjust its motion to changing surface conditions.Territorial careA service model that brings healthcare closer to patients through local and community-based pathways.Territorial cooperationcollaboration between neighboring cities or regions to align planning and action.Territorial inequalityUneven access to services across different geographic areas.Territorythe country or region where a patent may have legal effect.Test environmentA non-production system used to validate code, configurations, or deployments.Test fixturea controlled setup that makes troubleshooting more repeatable.Test isolationSeparation between evaluation systems and production environments to prevent unintended impact.Test ringA small group of devices used to validate updates before broad rollout.Test servera non-production system used to validate software or settings before deployment.Test standA controlled setup used to evaluate a machine before broader use.Test-before-investA staged approach that lets organizations evaluate a technology on a limited basis before full deployment.Test-data platformA system that creates safe copies for development and QA.Test, Evaluation, Verification, and Validation (TEVV)A structured process for checking whether a system behaves as intended and meets safety requirements.TestbedA controlled environment used to evaluate how a technology behaves before wider deployment.TestbenchA simulation environment used to check whether hardware logic behaves as intended.Tethered exploitAn exploit that depends on an external connection or tool during the attack process.Tethered jailbreaka jailbreak that depends on a computer or similar trigger after restart.Text adventureAn interactive fiction format driven by reading, choices, and player input.Text and Data Mining (TDM)Automated analysis of digital works to extract patterns or correlations, subject to legal limits.Text editorSoftware used to create and edit plain text, code, and configuration files.Text extractionThe process of pulling key information out of longer written material.Text-rendered QR codeA QR-like pattern built from characters in the email body rather than a normal image file.Text-to-SQLA workflow that turns natural language questions into SQL database queries.Texture mappingApplying 2D images to 3D surfaces to make them appear detailed.Theft-first ransomwareattacks that prioritize data theft for leverage.Themea visual style that changes the appearance of an application without changing its core functions.Theme PreviewA WordPress feature that shows how a theme will look before it is activated.Theme preview flowThe WordPress path used to inspect or test a theme before activation.Theorem proverSoftware that helps construct and verify mathematical proofs under strict logical rules.ThereminAn electronic instrument controlled without touch, usually by hand movement near sensors or antennas.Thermal creepSlow deformation of a material over time when heat and stress act together.Thermal densityThe concentration of heat generated in a rack or space, often measured in kW per rack.Thermal energyHeat energy that can be directed into warming or drying tasks.Thermal envelopeThe range of temperatures and cooling conditions a device can tolerate while operating correctly.Thermal paththe route by which electrical energy becomes heat in a component or material.Thermal printerA printer that uses heat to mark special paper instead of liquid ink.Thermal ProsumerA user that both consumes heat and can return surplus heat to the network.Thermal-management applicationsSystems and equipment designed to control heat in industrial or automotive use.ThermodynamicsThe branch of physics that explains how heat moves and how energy changes form.ThermometerAn instrument that measures temperature and often serves as a basic reference point.ThermopolymerA plastic material that softens when heated and hardens when cooled.Thin provisioningA storage method that allocates disk space only when it is needed, rather than reserving the full volume in advance.ThinkslopA descriptive label for using AI to simulate thought or reasoning rather than support it.Third Party Risk ManagementA broader discipline for governing risk from external providers, contractors, and service partners.Third-party actionAn action maintained outside your own repository, so its code must be trusted and monitored.Third-party applicationan outside service or integration connected to an organization’s systems.Third-party assessmentAn external review used to test whether a system’s safety or security claims hold up under scrutiny.Third-party auditAn external assessment that checks whether required safeguards are in place.Third-party catalogThe list of non-operating-system applications a patch platform can update.Third-party certificationIndependent verification that an organization meets defined security requirements.Third-party claimAn allegation that remains unverified until independently confirmed.Third-party concentration riskThe danger created when many institutions depend on the same cloud, AI, or technology provider.Third-party connectoran integration that can widen operational exposure.Third-party control systemA control environment operated or supported by an external organization rather than the asset owner alone.Third-party detectionA security model where an external provider analyzes content and returns a result to the platform.Third-party email providerAn external service that handles email delivery or related infrastructure for an organization.Third-party endpointAn external server or service that receives data outside the original user-facing platform.Third-party IT provideran external service relationship that can widen trust boundaries.Third-party logistics (3PL)An outside company that handles shipping, warehousing, and delivery operations for another business.Third-Party Managed PlatformA system operated by an external provider rather than by the organization that owns the data.Third-party modelAn AI model developed outside the organization that is used for inference or other tasks.Third-party notification platforman external service used to send customer messages or app alerts.Third-party platformAn external service that stores or processes data on behalf of another organization.Third-party processingoutside vendors that handle user data on behalf of a service.Third-party processorAn external service that handles a specific part of data processing on behalf of the main product.Third-party rightsRights held by others that may affect whether a generated image can be used publicly or commercially.Third-party security productExternal security software or service that becomes part of an organization’s trust boundary.Third-party software applicationExternal software used by an organization that can expand exposure if trust or access controls are weak.Third-party supportMaintenance and technical support provided by a vendor other than the original software maker.Third-party trackerCode or request from a domain other than the site a user is visiting, often used for measurement or profiling.Third-party vulnerabilityA security weakness in software, services, or systems provided by an external supplier.Thread hijackingAbuse of an existing email conversation to make malicious messages look legitimate.Thread safetyA program property that prevents shared data from breaking when multiple threads run at once.ThreatAnything that could cause harm to an organization’s systems, data, or operations.Threat actor attributionthe process of linking activity to a group, which can remain uncertain.Threat Actor BrandA name used by researchers to group related criminal activity, which may include multiple tactics and shifting methods.Threat Actor LinkageAttribution that connects observed activity to a known intrusion set, often with some uncertainty.Threat classificationThe process of identifying what kind of attack is occurring and how to respond.Threat coverageThe range of malicious activity a security control can detect, block, or help investigate.Threat detection and responseSecurity workflows for spotting suspicious activity and reacting to it.Threat intel triagethe process of checking claims against internal evidence before drawing conclusions.Threat intelligence platform (TIP)A system used to collect, organize, and operationalize threat data for defenders.Threat intelligence sharingThe exchange of structured defensive information so other organizations can detect or respond faster.Threat landscapethe current mix of risks, actors, and attack methods facing defenders.Threat localizationThe process of identifying where suspicious or malicious activity is occurring within a network or system.Threat monitoringthe process of tracking hostile chatter for early warning signals.Threat postureThe overall state of risk and defense as seen by a user or organization.Threat predictionSecurity analysis that aims to estimate likely hostile activity before it fully unfolds.Threat pressureThe sustained intensity of hostile activity facing a system, organization, or sector.Threat prioritizationThe process of deciding which security risks deserve attention first based on impact, likelihood, and active exploitation.Threat profileThe specific risks a user wants protection against, such as phishing or malware.Threat researchanalysis of attacker behavior, tools, and methods used to improve defenses.Threat Screening CenterAn FBI unit focused on screening and threat-related information handling.Threat sharingThe exchange of cyber threat indicators or warnings so organizations can defend faster.Threat signalsIndicators that help organizations recognize related malicious activity.Threat surfaceThe combined points where a device or service can be targeted.Threat techniqueA repeatable method used by an actor to carry out hostile activity.Threat triagethe first-pass review used to separate a real security signal from noise.Threat validationthe review of evidence to see whether a security claim is credible.Threat visibilityThe ability to observe, classify, and track hostile activity before it becomes a larger problem.Threat volumethe scale of hostile or suspicious activity a security team must process.Three Lines of DefenceA governance model that separates operational ownership, risk oversight, and independent assurance.Three-way matchingAn accounts payable control that compares a purchase order, invoice, and goods receipt to confirm a transaction.Threshold cryptographyA method that splits cryptographic trust or key control across several parties so no single holder can act alone.ThresholdingA confidence cutoff used to decide when automation should act or escalate.ThrottleTo reduce the rate or scope of an AI system’s actions without fully stopping it.ThrottlingThe intentional slowing of network traffic until a service becomes hard or impossible to use in practice.ThrustThe force that drives a rocket forward.ThrusterA device that creates force to move an object in a chosen direction.ThunderbirdMozilla’s open-source email client, covered by Mozilla security advisories and patch releases.Thunderbolt 3A high-speed interface for connecting external devices such as storage arrays.TiBA data-size unit that can signal volume, but not necessarily confirmed theft or compromise.Ticket-granting ticket (TGT)A Kerberos ticket used to request access tickets for specific services.Tied deposit accountA savings product that locks money for a set period in exchange for interest.Tier 0The highest-trust administrative layer in Microsoft identity architectures, usually covering domain controllers and other crown-jewel systems.Tier 1 IT supportFrontline help desk work for routine, repeatable user requests.Tier 1 tournamentA top-level competition with the highest visibility and commercial value.Tiered controlsA staged security model that increases safeguards as capability or risk rises.Tiered disclosurestaged publication of material in phases to increase leverage.Tiered regulationA graduated enforcement model that can escalate from lighter engagement to more formal compliance action.Tiered-ratea pricing model that changes by usage band or time slot.Time DepositA fixed-term savings product where money is placed for a set period under agreed conditions.Time horizonA benchmark measure that links model success to the human time needed for a task of similar difficulty.Time referenceThe baseline a system uses to judge when events occur.Time-limited accessAccess that expires automatically after a defined period instead of remaining permanent.Time-of-Check to Time-of-Use (TOCTOU)A bug class where something is checked as safe, then changes before it is actually used.Time-of-click inspectionA defense that checks a link when it is opened, not only when the email first arrives.Time-of-click protectionA security control that checks a link when a user opens it, not only when the email arrives.Time-series databaseA database designed to store and query data points ordered by time, often used for telemetry.Time-to-bypassThe time it takes for an attacker to defeat a protection or guardrail during testing.Time-to-exploitThe interval between vulnerability discovery and practical attack use.Time-to-outcomeA measure of how long it takes to reach a business result, not just to complete a task.Timed disclosurea phased release tactic that uses deadlines to increase pressure.TimekeepingThe act of measuring and displaying elapsed time.Timing bugA flaw where the order or timing of operations creates a security problem, often by breaking assumptions about when checks occur.Timing constraintA limit created by how quickly a system can complete its update cycle.Timing fidelityHow closely a replacement matches the original device’s response timing.TinkeringInformal experimentation with a device to understand or improve how it works.Tiny TapeoutA project associated with making chip fabrication more approachable for smaller designs.Tipping pointA threshold where small changes in context can produce a sudden shift in model behavior.Tissue culture laba controlled plant-production setting that can be sensitive to workflow interruption.Title barThe top strip of a window that usually shows the app name and window controls.Title companya firm that manages title-related records and insurance for property transactions.TitolareThe data controller responsible for deciding why and how personal data is processed.TLB invalidationThe process of clearing stale address-translation entries so memory mappings stay correct.TLS 1.3A modern encryption protocol that protects data in transit with stronger confidentiality and integrity.TLS certificatesSecurity credentials for encrypted connections that can also help cluster related servers.TLS handshakeThe setup phase where a client and server negotiate cryptographic parameters before normal data exchange.TLS hostname verificationThe check that confirms a certificate belongs to the server name a client intended to reach.TLS receive pathThe code path that handles incoming TLS traffic before it reaches the application.TLS session ticketA mechanism for resuming encrypted sessions; if mishandled, it can create security problems during session reuse or key rotation.TLS TerminationThe point where encrypted connections are decrypted so traffic can be processed by the proxy or application.TLS validationThe process of checking certificates and connection parameters in encrypted sessions.tls-cryptAn OpenVPN feature that encrypts and authenticates control-channel packets to reduce exposure to unauthenticated traffic.TLS/SSL decryptionThe process of inspecting encrypted traffic so security controls can evaluate hidden content.TMStransportation management system, software used to coordinate freight, carriers, and shipping records.TN Deckthe name of the tiny custom cyberdeck featured here.TOFU"Trust on first use," a policy where a client remembers the first server key it sees and trusts it later.Token AuthenticationA login method that requires a secret token before a service accepts requests.Token billingA pricing model where AI usage is measured by the number of tokens processed or generated.Token bindingSecurity control that ties a token or artifact to a specific session, user, or workflow.Token costsThe billable expense created when AI systems process input and generate output in token units.Token endpointThe server endpoint where an authorization code is exchanged for tokens.Token entropyA shorthand for token usage that produces little value, often because of repetition or inefficiency.Token exchangeA process that swaps one credential for another, usually to narrow or change delegation.Token exergyA management analogy for the useful business outcome extracted from AI work.Token lifecycleThe full management cycle of issuance, use, rotation, expiration, and revocation for a token.Token lifetimehow long an access token remains valid before expiring.Token limitThe maximum amount of text a model can generate or process, measured in tokens rather than words.Token limitsconstraints on the number of tokens a model or service will accept or generate in a session or over a period of time.Token misuseusing a valid access token in a way that was not intended or authorized.Token persistenceContinued access that survives password changes because an authentication token remains valid.Token priceThe per-unit cost charged for model usage, often used in AI budgeting.Token pricingThe cost charged for each unit of model input or output.Token scopingLimiting what an authentication token can do so it cannot be used beyond its intended purpose.Token throughputThe rate at which an AI system can generate or process tokens under real workload conditions.Token-audience validationChecking that a credential is meant for the specific server or service that receives it.Token-Based PricingA billing model that charges based on the amount of text processed by a system.Token-Based UsageA consumption model where AI services bill based on tokens or similar usage units.Token-biasingA generation method that subtly shifts the model toward certain word choices.Tokenized stockA digital representation tied to equity exposure or a related financial claim.TokensSmall consumption units used to measure how much model processing an AI system performs.TomcatA Java web server and servlet container often used to host server-side web applications.Tomcat NativeAn optional component that lets Tomcat use native libraries for TLS and connector functions.Tomcat RewriteValveAn Apache Tomcat feature that can rewrite or block requests using configurable rules.TONResolverA malware family reported to use TON blockchain lookups to help locate its command-and-control infrastructure.Tool access controlRestricting what external tools, APIs, or actions an AI system can reach during operation or testing.Tool AllowlistA security control that permits an agent to use only approved tools or actions.Tool authorityPermission for an AI system to use external tools, APIs, or services beyond text generation.Tool authorizationRules that define what an agent is allowed to do with connected tools and services.Tool callA model-generated request to invoke an external function or action through an application layer.Tool changeA switch between print heads, feed paths, or materials during fabrication.Tool consolidationReducing overlapping security products so operations are simpler and easier to manage.Tool executionThe ability of an AI system to invoke connected actions, such as API calls or service operations.Tool MisuseAbuse of an AI system's authorized tools or actions for unintended outcomes.Tool orchestrationThe coordination of multiple tools or actions by an automated system or agent.Tool PermissionThe level of access an AI agent has to APIs, files, or external services.Tool PermissioningThe practice of limiting what external actions an automated agent can perform.Tool proficiencyskill in using a tool accurately, efficiently, and with awareness of its limits.Tool RegenerationRecreating disposable tools or payloads after a blocked or failed attempt.Tool shadowingA workshop method that uses a tool's outline to show where it belongs.Tool triggeringThe act of initiating an external action, such as an API call or workflow step, from an agent system.Tool-aware fuzzingA testing method that checks whether tool inputs cause security violations, not just crashes.Tool-connected AIAn AI system that can call external services, APIs, or workflows instead of only generating text.Tool-using agentAn AI agent that can call APIs, browse the web, move files, or perform other actions.Toolchain trustConfidence that compilers and related tools process code as intended and without hidden surprises.Toolpaththe route a printer head follows while building a part layer by layer.ToolsetThe collection of malware, delivery methods, and infrastructure used in a campaign.TopicA named channel in MQTT that clients publish to or subscribe from.Topological insulatora material with unusual conducting behavior at its surfaces or edges.Tor BrowserA privacy-focused browser that routes its traffic through the Tor network and adds anti-tracking protections.Tor leak sitea hidden-service page used to publish extortion demands or stolen data.Tor-based leak portala hidden-service website used to host leak or pressure content anonymously.Tor-format keyCryptographic key material used in Tor onion-service identity and publication workflows.Toroidal propellerA propeller design with a ring-like form intended to alter flow behavior.Torrent distributionPeer-to-peer sharing that can spread alleged stolen data.Torrent poisoningThe abuse of torrent ecosystems to distribute malicious files or links.Total cost of creditThe full price of borrowing, including interest and any fees or add-ons.Total Cost of Ownership (TCO)A way to price software by its full lifecycle costs, not only the initial build.TOTPTime-based One-Time Password, a temporary code used in multi-factor authentication.Touch-sensitive surfaceA surface that can respond when touched by a finger or other input.Touchpad scroll speedA setting that changes how quickly content moves during touchpad scrolling.Touchscreena display that accepts input directly from a finger or stylus.ToxAn encrypted peer-to-peer messaging protocol that can be repurposed for resilient malware communications.TPM 2.0A hardware security module used to store keys and support trusted device operations.Trace-based evaluationReview of an AI agent’s step-by-step behavior to spot unsafe actions or policy violations.TracesRequest paths that show how a transaction moves through connected services.TracingLogs that record an agent’s steps, tool calls, and state changes for review.Tracker formatA music-file format used in tracker software, associated with early home-computer music scenes.Tracker protectiona privacy feature intended to reduce tracking activity while users browse.Tracker siteA torrent index that helps users find and exchange file metadata in peer-to-peer networks.Tracking parametersExtra URL components used to carry analytics or attribution data.Tracking serverThe MLflow component that receives run data and serves as the main interface for experiment tracking.Trade credit insuranceInsurance that helps protect businesses from losses caused by customer non-payment.Trade secretsConfidential business information that has value because it is not publicly known.TrademarkA protected sign, word, or phrase that indicates the commercial origin of goods or services.Traditional career patha familiar upward route built around steady promotions and corporate progression.Traditional softwarePrograms that follow fixed rules without inferential behavior.Traffic analysisExamining network patterns to spot coordination, reuse, or unusual behavior.Traffic baselinethe normal communication pattern of a network, used to spot unusual behavior.Traffic camouflageA technique that makes malicious network activity resemble ordinary web behavior.Traffic concealmenttechniques that make malicious network activity look routine or harder to trace.Traffic correlationMatching network flows with endpoint or DNS activity to infer what a connection is really doing.Traffic dataMetadata about communications, such as origin, destination, time, and routing.Traffic diversionThe rerouting of network traffic away from its intended destination.Traffic filteringDefensive controls that inspect, block, or reroute suspicious traffic before it reaches a service.Traffic interceptionThe capture or observation of data moving between a browser and a website.Traffic obfuscationTechniques that disguise network traffic so it is harder to identify as VPN traffic.Traffic processingThe amount of network data a firewall inspects or forwards, often a major driver of cloud firewall cost.Traffic qualityA measure of whether clicks, visits, or views appear genuine.Traffic relaya device or node that forwards network traffic for another party.Traffic shapingA network control method that limits or prioritizes certain data flows.Traffic SignalingHidden malware activation triggered by a special network packet or sequence.Traffic surgeA rapid increase in network requests or user activity over a short period.Traffic tunnelThe protected path used to carry internet data through a VPN service.Traffic-light policyA simple framework that uses colors to signal when a tool may be used.Training centera controlled setting where systems are exercised and refined before wider deployment.Training dataInformation used to teach an AI system patterns it can later apply to new tasks.Training data provenancethe record of where model inputs came from and how they were obtained.Training fidelityhow closely a learning tool reflects the real conditions of the task being taught.Training-Data PoisoningCorrupting or biasing the data used to train a model so it learns unsafe or misleading behavior.Trajectory monitoringWatching the full sequence of an agent’s actions, not just isolated steps.Trajectory-level monitoringWatching an AI system’s full sequence of actions over time, not only single outputs.Transaction alertA notification that flags account activity, helping users monitor movement quickly.Transaction anomaliesunusual payment or transfer behavior that can indicate abuse.Transaction anomaly detectionMonitoring that looks for unusual payment behavior, device changes, or session patterns.Transaction conditionsThe specific limits or triggers that affect payments, withdrawals, or fees.Transaction dataInformation recorded on a blockchain when a transaction is sent, sometimes abused to hide payload pointers.Transaction flowthe sequence of steps that moves a purchase from checkout to payment processing.Transaction frictionExtra steps that slow suspicious payments or transfers.Transaction historyA record of account activity that can expose behavior patterns, relationships, and financial context.Transaction IDA field used to match STUN requests and responses, which can be abused for covert signaling.Transaction limitsPre-set boundaries that cap how much a system can move, change, or approve.Transaction loggingRecorded activity that helps detect fraud, errors, and suspicious behavior.Transaction metadatasupporting information such as time, amount, and routing details.Transaction monitoringSystems that flag unusual payment activity for investigation.Transaction processingsystems that move or validate financial instructions and records.Transaction signingA cryptographic process that helps prove a transaction was authorized and unchanged.Transaction traceabilityThe ability to follow a payment or transfer through its processing path.Transaction trailthe path money follows as it moves between accounts or services.Transaction verificationThe practice of confirming that a payment request, amount, and recipient are legitimate.Transaction volumeThe total value moved through a system over a period of time.Transactional leadershipA leadership style centered on supervision, rewards, punishments, and routine control.TransceiverA device that can both transmit and receive signals.Transcoding PipelineAn automated media-processing workflow that converts files between formats, often using libraries like FFmpeg.Transcranial magnetic stimulationA medical technique that uses magnetic pulses in treatment.TranscriptThe written record of a spoken exchange, which can be searched, retained, or reviewed later.Transcription toolSoftware that converts speech into text, often creating a separate record of meeting content.TransferApplying what was learned in one setting to a new problem or context.Transfer stationAn intermediary service that can relay API traffic and obscure its origin.TransferabilityThe ability to move AI knowledge and controls across models or platforms without losing function.TransferFiles permissionA ScreenConnect role control that governs file transfer, and in some workflows tool execution.TransferListA mechanism for moving objects or buffers between execution contexts, which can become risky if validation is inconsistent.Transformation maturityThe ability of an organization to turn technology adoption into repeatable enterprise capability.Transformational leadershipA leadership style that seeks to inspire innovation, change, and commitment through vision and example.TransformerFactoryA Java XML API used to create XSLT transformers, which should be hardened for untrusted input.Transient errorA temporary failure that may succeed on retry once the service recovers.Transient executionA processor behavior where instructions run before their final outcome is known, sometimes leaving measurable traces.TransistorsElectronic components that control current and form the basis of many circuits.Transition riskFinancial risk linked to policy, market, or operational shifts during a move to a lower-carbon economy.Transition strategya practical plan for moving from one role to another with less disruption.Transitional intelligencethe ability to navigate change thoughtfully and adapt without losing direction.Translation compensationA limited reimbursement scheme that helps eligible applicants offset translation costs.Translation noiseSmall errors or distortions introduced during machine translation.Translucent plastica material that lets light pass through while still obscuring full detail.TransmissionThe act of sending data from one place to another through a communication channel.Transmission mediumThe physical path a signal uses to travel from sender to receiver.TransmitterThe ground-based radio unit that sends control commands to the drone.Transnational criminal organizationa criminal group that operates across national borders and jurisdictions.Transnational cyber-enabled crimeCriminal activity that crosses borders and uses digital systems or networks.Transnational fraudCriminal deception that operates across borders to make detection and enforcement harder.Transnational initiativeA coordinated effort that spans more than one country or jurisdiction.Transnational issueA matter that affects workers or operations in more than one country within a corporate group.Transnational repressionThe use of surveillance or intimidation across borders to silence critics abroad.Transonic flightFlight near the speed of sound, where airflow can change rapidly and unpredictably.Transparency disclosureA notice that tells users when content was generated, manipulated, or assisted by AI under policy or legal rules.Transparency obligationA requirement to disclose or label certain AI uses and outputs so users are not misled.Transparency summaryA public or regulator-facing overview of training content meant to support accountability and rights review.Transparency, Consent, and Control (TCC)macOS privacy framework that asks for user permission before apps access sensitive files and locations.Transparent conductive coatingA layer designed to remain visually clear while still supporting electrical behavior.Transport assuranceguarantees about delivery, integrity, or receipt during transmission.Transport authenticationVerification applied at the network layer before a service accepts requests.Transport Layer Security (TLS)A protocol that encrypts data in transit and uses certificates to authenticate endpoints.Transport privacyProtection that helps conceal traffic contents from local observers on an untrusted network.Transport-layer authenticationLogin controls enforced at the protocol or network layer before application features are reached.Transshipmentthe routing of goods through an intermediate country or company before final delivery.Trapped-ion quantum computerA quantum processor that uses electrically charged atoms held in electromagnetic traps to represent qubits.Trasformazione tecnologicaThe process of integrating digital systems into operations, products, and management.Trattamento infiltrativolocalized therapy in which a substance is injected into a targeted tissue area.Travel documentsrecords such as passports and visas that can carry high identity and fraud value.Travel recordData tied to a passenger trip, such as booking or itinerary details.TreasuryThe finance function that manages cash, liquidity, and outgoing payments.Treatment planA tracked set of actions used to reduce, transfer, or accept a security risk.TrebuchetA gravity-powered launcher that uses a counterweight and swinging arm to propel a projectile.Tree-of-Thoughts (ToT)A prompting approach that explores multiple reasoning paths before choosing an answer.Trend reversala change from sustained decline to renewed increase in a metric.Tri-camera setupA three-camera arrangement used to capture multiple views or channels.Triag ethe first-pass process of checking exposure, scope, and immediate risk.Triage cueA signal that prompts fast internal checking before conclusions are drawn.Triage triggeran event that prompts immediate verification and containment checks.Trial and errorA method of testing ideas by repeating attempts and learning from the outcomes.Trial periodA limited free window that lets a customer test a service before paying.TrickBotA modular Windows malware family known for persistence, modular payload delivery, and remote control.Triggered lightningLightning deliberately initiated under controlled conditions for study.TripwireA hidden trigger designed to generate an alert when someone interacts with something that should remain untouched.TRNGTrue Random Number Generator, a hardware source of randomness used in key creation.Trojanized DLLA dynamic link library altered to carry malicious logic while appearing normal.Trojanized downloadA legitimate-looking file that hides malicious code inside.Trojanized FileA legitimate-looking file that contains hidden malicious behavior.Trojanized forkA modified copy of a legitimate project that keeps expected functionality while hiding malicious code.Trojanized npm packageA package in the Node.js ecosystem that has been altered to include malicious code while still appearing useful.Trojanized packageA legitimate-looking software package that has been altered to include malicious code.Trojanized Wallet AppA fake or altered wallet application designed to steal recovery phrases or other sensitive data.TRONA blockchain network whose addresses can be used in transfers and screened in sanctions compliance.TroubleshootingThe process of identifying and fixing a technical problem.TRS-80a line of personal computers from the late 1970s and early 1980s.True-positiveA finding that is confirmed to be real rather than a false alarm.True-positive vulnerabilitya finding that is confirmed to be a real security issue, not a false alarm.TrueType (.ttf)A common font file extension that can be abused as camouflage in malicious email attachments.TrueType fontA common font format supported natively by Windows and other platforms.TrustThe confidence that helps teams accept guidance, follow process, and respond consistently.Trust and governance challengea security and policy problem where protection depends on clear rules, reliable reporting, and user confidence.Trust assessmentA process for judging whether a project or component meets expected security and reliability standards.Trust assuranceA security control that helps users confirm an identity or connection before relying on it.Trust channelA communication path people tend to believe, such as SMS or chat.Trust checkpointA place in a workflow where a system or user must verify that an interaction is legitimate.Trust controlA safeguard that checks whether a person, item, or message should be accepted.Trust cueA sign that makes someone seem legitimate, such as a profile, title, or mutual contact.Trust indicatorsVisual cues that show whether a participant is external, guest, or anonymous.Trust layera system that controls and verifies access between connected services or organizations.Trust metadataSecurity information attached to a file that helps the operating system decide how cautiously to treat it.Trust metricsIndicators used to measure whether people rely on AI appropriately and use it consistently.Trust misuseWhen a system’s apparent helpfulness causes users to over-rely on it.Trust pathA legitimate channel users rely on, such as a server-hosted download or update flow.Trust policyA rule set that helps decide which packages or signatures are accepted as trustworthy.Trust postureThe confidence others place in a company’s security and governance practices.Trust proxyA trusted service used as an intermediary to make a malicious path look benign.Trust reviewA reassessment of what a device should be allowed to access or do.Trust servicesDigital services that support identity, signatures, seals, and other forms of proof in electronic transactions.Trust zonea business area where sensitive systems, users, or partners intersect.trust_remote_codeA flag that allows a loader to execute custom Python code from a remote repository.Trust-based systemA service that depends heavily on user confidence and identity claims.Trust-chain abuseA tactic that exploits legitimate software, signatures, or system trust to conceal malicious execution.Trust-sensitive systemsservices such as account access and records handling that customers must rely on.Trusted access abuseAttack activity that relies on valid credentials, approved systems, or sanctioned pathways rather than obvious break-in noise.Trusted Access for CyberAn authorization framework that restricts advanced AI cyber capabilities to approved users and approved use cases.Trusted boundaryA security limit that separates data a program can safely accept from data that must be verified first.Trusted Client restrictionsAccess controls that limit administrative connections to approved IPs, subnets, or hosts.Trusted ClientsA restriction mechanism that limits which IPs can connect to management services.Trusted communication pathA channel that software assumes is safe, but which can be abused if an attacker can influence one endpoint.Trusted connectionA network relationship allowed by design, but one that can become a persistence path if abused.Trusted device enclaveA protected storage or execution area that keeps sensitive credentials isolated from normal software.Trusted domaina legitimate web address that users and systems are more likely to accept at face value.Trusted Execution EnvironmentA protected area inside hardware or firmware designed to isolate code and data from the rest of the system.Trusted hostsRestricted IP addresses allowed to reach an administrative interface, used to narrow who can attempt management access.Trusted Identity PropagationA mechanism that carries user identity across connected services so actions can be attributed and controlled.Trusted input pathA device or interface that a system treats as legitimate control input.Trusted Listan official registry of qualified trust service providers recognized for certain electronic trust services.Trusted mission dataSensitive mission-related information that must be handled under strict access and handling rules.Trusted onboardingA secure setup process that verifies a device before granting it network access and credentials.Trusted operator boundaryA security model that assumes one controlled user or operator, not an adversarial shared environment.Trusted originA web security boundary that determines which content can access the app’s same-origin data and permissions.Trusted proxyA reverse proxy that is allowed to add or forward identity information to a backend application.Trusted ResearchUK guidance for protecting sensitive research, data, and intellectual property from misuse or theft.Trusted signersA NuGet control that restricts package acceptance to approved signing identities.Trusted TypesA browser defense that helps prevent unsafe DOM injection paths.Trusted URL AllowlistingA control that limits outbound links or destinations to approved addresses only.Trusted Web ServiceA legitimate online service abused by malware to blend into normal traffic.Trusted workflow abuseThe misuse of normal business channels, such as platform inboxes or collaboration tools, to make malicious content look routine.Trusted-access programA controlled admission process that limits a sensitive capability to vetted users.Trusted-binary proxy executionA technique where attackers abuse a signed or built-in system tool to run malicious content.Trusted-Network DeploymentA setup where a service is meant to run behind network controls and only accept approved clients.Trusted-process exclusionA policy rule that reduces or removes monitoring for selected processes, which can create blind spots if overused.TrustOpsOperational workflows that turn governance commitments into day-to-day security action.Trustworthy AIAI designed to be reliable, secure, explainable, and suitable for its intended use.TrustZoneA hardware security architecture that separates trusted and non-trusted execution environments.TruthinessA programming behavior where a value is treated as true even when it represents an error state.TSCMTechnical Surveillance Countermeasures, the practice of detecting and reducing technical surveillance threats.TTL RGBAn older video standard that carries color and sync signals using TTL logic levels.TTYA traditional text terminal concept that began with physical teletype devices.Tube launchingA launch approach mentioned in the article as a way to improve model rocket performance; the supplied summary does not explain how it works.TumblingRotating or flipping in a repeated, unstable-looking motion.TUN/TAPVirtual network devices that let user space send and receive packets through the kernel.TunnelAn encapsulated path that can carry traffic through another trusted process or channel.Tunnel interfaceA logical interface that represents encapsulated traffic between endpoints.TunnelerTooling that forwards traffic through a compromised system to reach internal services.Tunneling implantmalware that relays traffic through the victim host to create covert remote access.TupleA structured permission fact, often used to represent a relationship such as user, relation, and resource.TurbopackA Next.js build tool and bundler involved in the vulnerable deployment pattern.Turbulenceirregular motion that can stir, distort, and mix a flowing medium.Turing completeA system able to express any computation in principle.Two-dimensional materialA material that is only one or a few atoms thick, often studied for unusual physical properties.Two-photon polymerizationA laser-based process that can create microscopic structures with very fine detail.Two-step verification (2SV)An extra account check that asks for a second secret after the main login step.Two-way dead-dropA covert exchange method where both commands and responses move through the same hidden channel.Type resolutionThe logic a parser uses to decide which class or object type should be created from input data.Type-confusionA memory-safety bug where software treats data as the wrong type, which can lead to corruption.TypefaceThe visual design of letters, numbers, and symbols.TypeScript SDKA software development kit for building applications and integrations in TypeScript.TZA Unix environment variable that influences timezone and time conversion behavior.TZ environment variableA process setting that influences timezone interpretation for time-related operations.