Cybersecurity Glossary

Autonomous AI systems that can perceive their environment, make decisions, and take actions to achieve specific goals without constant human intervention.

An approach to phishing detection where agentic AI investigates suspicious URLs, gathers evidence, and explains why a destination is safe or risky.

Security platforms that use AI to analyze phishing threats and present results, evidence, and workflows through a dedicated analyst dashboard.

Advanced phishing attacks that intercept the communication between a user and a legitimate service to steal not just passwords, but MFA session tokens.

Set of protocols and tools that allow different software applications to communicate and share data.

The proactive, AI-driven search for cyber threats that have evaded existing security defenses, operating continuously without human prompts.

A sophisticated phishing technique that renders a fake, interactive browser window inside a legitimate webpage to steal Single Sign-On (SSO) credentials.

Sophisticated scam targeting businesses through compromised or spoofed email accounts to authorize fraudulent wire transfers or data theft.

A technique where attackers place a CAPTCHA in front of a phishing page to block automated security scanners from analyzing the malicious content.

A highly deceptive attack where a previously delivered, legitimate email is duplicated and resent with its safe links replaced by malicious ones.

The use of AI to analyze and understand visual information from digital images, crucial for detecting brand spoofing.

A modern phishing tactic that tricks users into granting malicious third-party applications persistent access to their cloud accounts, bypassing MFA entirely.

The process of collecting usernames, passwords, and other authentication credentials through phishing sites, malware, or data breaches.

An automated attack where stolen account credentials from one data breach are used to gain unauthorized access to other unrelated services.

Domain-based Message Authentication, Reporting, and Conformance. An email authentication protocol designed to protect domain names from misuse.

Creating fake domains that closely resemble legitimate ones to deceive users in phishing attacks.

Forging email headers to make messages appear to come from a different sender, often used in phishing and BEC attacks.

An alert that incorrectly indicates the presence of a vulnerability or an attack, leading to wasted time and alert fatigue for security teams.

A visual deception technique where attackers use characters from different alphabets that look identical to Latin characters to spoof trusted domains.

A highly evasive technique where attackers hide malicious payloads within seemingly benign HTML5 or JavaScript code to bypass network firewalls.

Structured approach to handling and managing security breaches or cyberattacks to minimize damage and recovery time.

Forensic evidence on a network or device that indicates a computer breach or malicious activity has occurred.

Phishing attacks originating from a compromised internal email account targeting other employees within the same organization.

The malicious use of Large Language Models (LLMs) to generate highly convincing, grammatically perfect phishing and social engineering campaigns at scale.

AI technique enabling systems to learn from data and improve performance without explicit programming.

The practice of identifying domains associated with phishing, impersonation, malware delivery, or other harmful activity.

The process of identifying URLs that lead to phishing pages, malware delivery, scams, or other malicious outcomes.

Multiple AI agents working together, each with specialized capabilities, to solve complex problems more effectively than a single agent.

AI technology that enables computers to understand, interpret, and generate human language.

A cyberattack method where attackers impersonate legitimate entities to steal sensitive information through deceptive emails, messages, or websites.

A general-purpose API used to analyze phishing-related risk in URLs, pages, emails, or domains and return results to other systems.

An API that allows other applications to submit URLs, emails, or related artifacts for phishing analysis and receive structured results.

A category of APIs designed to detect phishing activity, validate suspicious URLs, and return actionable results for security and product workflows.

A continuously updated stream of known suspicious or malicious domains used to support phishing detection, blocking, and threat intelligence workflows.

A tool or platform that inspects suspicious websites and URLs to determine whether they are phishing pages, impersonation sites, or otherwise malicious.

Highly adaptive phishing campaigns that automatically alter their email content, sender addresses, and URLs for every single target.

A form of phishing that uses malicious QR codes to bypass text-based email filters and redirect users to credential harvesting sites.

Malicious software that encrypts victim's data and demands payment for the decryption key.

An AI technique that maps and analyzes normal communication patterns and business relationships to detect anomalies indicative of fraud.

The process of checking a suspicious URL to determine whether it leads to a phishing page, impersonation site, or other malicious destination.

Centralized platform that collects, analyzes, and correlates security data from across an organization's infrastructure.

Phishing attacks delivered through SMS text messages, exploiting the trust people place in mobile communications.

A strategy where attackers distribute phishing emails across a vast array of IP addresses and domains in very low volumes to evade reputation-based security filters.

A stack of compatible software programs that enable organizations to collect data about security threats and automate responses.

Centralized team and facility responsible for monitoring, detecting, analyzing, and responding to cybersecurity incidents.

Psychological manipulation techniques used to trick people into divulging confidential information or performing actions that compromise security.

Highly targeted phishing attacks aimed at specific individuals or organizations, using personalized information to increase credibility.

The process of identifying potential security threats and malicious activities within systems, networks, or communications.

Evidence-based knowledge about existing or emerging threats, used to inform security decisions and defensive strategies.

A form of cybersquatting where attackers register domain names that are intentionally misspelled variations of popular or corporate brands.

A tool that inspects URLs and their destinations to identify phishing risk, malware delivery, suspicious redirects, or other unsafe behavior.

Phone-based phishing attacks where criminals use voice calls to manipulate victims into revealing sensitive information or performing actions.

Phishing attacks specifically targeting high-profile executives like CEOs, CFOs, or other C-level personnel with access to critical business information.

Cyberattacks exploiting previously unknown vulnerabilities before vendors can develop and deploy patches.

The ultimate capability to autonomously detect, validate, and completely neutralize a cyber threat at the exact moment of interaction.