Caching is the local storage of data or state so a system can reuse it quickly instead of recalculating or fetching it again. Caches improve performance, reduce network traffic, and lower load on servers, clients, and security tools. But if cached data is not refreshed or invalidated at the right time, the system may act on stale information.
In cybersecurity, stale cache can create blind spots. A browser, proxy, endpoint agent, or update client may reuse outdated trust decisions, permissions, or configuration state. That can lead to policy drift, missed revocations, or unexpected software installs, as seen when update systems rely on old local state. Attackers also target caches through poisoning or manipulation to serve malicious content, bypass controls, or hide changes. Defenders reduce this risk by setting short lifetimes, forcing invalidation, comparing cached state with authoritative sources, and auditing behavior that does not match current policy.