netsec eds

The fundamental rules for addressing and routing data over the Internet

A cyberattack where fake ARP messages link an attacker’s MAC address to a trusted IP

Another name for ARP spoofing where false ARP entries are stored in a device

To enable spying, man-in-the-middle attacks, or denial-of-service attacks

Hackers, ethical hackers, and developers for attacks, testing, or debugging

It can allow attackers to intercept, modify, or block network traffic

It has no authentication, no encryption, and blindly trusts ARP replies

An attack where the intruder secretly intercepts communication between two parties

A security feature that blocks fake or malicious ARP replies

Separating networks to limit the impact of attacks like ARP spoofing

A DDoS attack that amplifies traffic using publicly accessible DNS servers

Low-level malicious DNS activity designed to look legitimate

Hijacking a legitimate domain to create hidden subdomains for malicious use

Hiding data inside DNS queries and responses to bypass security controls

The QNAME field

DNS traffic is usually allowed through firewalls

A DNS infrastructure failure due to misconfiguration

DNS is critical infrastructure and a single point of failure

An attack where a rogue DHCP server gives false network configurations

It enables man-in-the-middle attacks

Users are redirected to malicious websites

A switch feature that blocks DHCP responses from untrusted ports

It allows unauthenticated DNS updates

The practice of protecting systems, networks, and data from cyber threats

Anything of value that needs protection

A weakness that can be exploited

A potential danger to systems or data

The likelihood that a threat exploits a vulnerability and causes harm

Paths or methods attackers use to enter a system

When information is stolen, leaked, or destroyed

Malicious software designed to damage systems or steal data

Human error, weak protection, and exploited security gaps

Malware that requires user action to spread

Self-replicating malware that spreads without user interaction

Malware disguised as legitimate software

Malware that encrypts data and demands payment

Malware that secretly monitors and collects user information

Software that delivers intrusive advertisements and tracks behavior

Malware that hides itself while maintaining administrator-level access

A worm that spread via email and caused massive global damage

Data exfiltration and remote control

Layered security and user awareness

Regular data backups

An individual or group that conducts cyberattacks to exploit systems

A hacker who illegally accesses systems but usually reports vulnerabilities without malicious intent

A gray-hat hacker known for breaching major organizations to expose security flaws

Exploiting weak security configurations and unprotected networks

A gray-hat attack exposing outdated code without leaking student data

System shutdown, updates, and migration to AWS

Hackers who attack systems to promote social or political causes

Personal data of about 55 million voters was exposed

A hacktivist group protesting weak cybersecurity

A ransomware attack that leaked sensitive medical data

It was financially motivated and demanded ransom

Hackers acting on behalf of governments for espionage or sabotage

Chinese state-sponsored cyber espionage against Philippine government systems

By compromising a cloud service provider targeting system administrators

Shamoon malware

35,000 computers destroyed and global oil supply threatened

Tools used to test system security by simulating attacks

To recover or crack passwords through repeated guessing

Scanning networks for open ports and devices

Capture and analyze network traffic

Exploiting known system vulnerabilities

An attack that disrupts services by overwhelming systems

Intercepting and controlling communication between two parties

Poor network segmentation discovered via Nmap

\$81 million stolen using MITM and packet sniffing

Apache Struts vulnerability (CVE-2017-5638)

Unsalted SHA-1 hashes allowed mass password cracking

The practice of securing communication and data against threats

Assurance that data was not altered during transmission

Verification that a message comes from the claimed sender

Ensuring only authorized users can read data

Preventing a sender from denying a sent message

A one-way function that produces a fixed-size message digest

It is more secure and resistant to attacks

A hash function combined with a secret key for integrity and authentication

Uses the same secret key for encryption and decryption

Uses public and private key pairs

Securely generating a shared secret key over an insecure channel

An email virus that infected millions of computers worldwide

Vance Joshua Tamayo accused of large-scale crypto fraud