A one-time password (OTP) is a password that can only be used once. It is different from your regular password because it will not work if re-used, even if you input it correctly on the login page. This means that if someone were ...
Magecart is a form of malware that infects online stores and eCommerce platforms.It is one of the most commonly used ways for hackers to steal credit card information from customers by adding unique scripts into the source code on...
What is card cracking and how can you protect your customers?Brute force attacks are increasingly used to gain access to online accounts. Hackers and cybercriminals use bots to perform automated attacks on websites, mobile apps, A...
Automated fraud: How it works and how to prevent itOnline fraud is a widespread problem. Automated fraud attacks like phishing, card cracking, and account takeover are now pervasive, with businesses and individuals alike being sub...
The OSI Model (Open Systems Interconnection Model) is a conceptual model that represents how information from a webpage is transmitted throughout a network and displayed by your browser.The 7 layers of the OSI modelPhysical layer...
Penetration testing is a valuable form of vulnerability analysis that finds and identifies security problems on a site by simulating an attack from the same sorts of cybercriminals who might try to break into a business online.How...
An anti-malware scanner is a software application that performs detection, identification, cleaning, and scheduling maintenance operations on computer systems infected with malware. These scanners are capable of identifying known ...
An automated traffic bot is a program that generates traffic for websites by performing automated activities such as creating affiliate links and exposure in search engines. It is called “automated” and “robot” because it interact...
A network firewall is a system that is designed to thwart unauthorized access to or from a private network. Firewalls are very common on networks where security is critical, such as banks and corporate offices.
The PCI Security Standards Council defines PCI DSS (Payment Card Industry Data Security Standard) as the security standard for anyone who handles any of your credit card information.
Network Address Translation is a process that allows an entire network consisting of computers and devices to communicate safely even if they're using private IP addresses, which aren't unique since they only identify the home net...
Spear phishing is a type of cyber-attack which involves hackers using information collected on specific individuals to make their email scams seem more legitimate.
A Network Intrusion Detection System (NIDS) is a computer software application that can detect and report network security problems by monitoring network or...
A whaling attack is a cyber-attack that targets high-profile corporate executives, wealthy businessmen, or individuals in the public sector. This type of attack can also target prominent members of organizations that are responsib...
A watering hole attack is a targeted attack where an individual or group gains access to a particular site and infects the computers of visitors with malware. The attackers exploit vulnerabilities in commonly used applications suc...
Pwned websites are websites which have been compromised by hackers to use for their own purposes. They can be used to send out spam or to host malicious code.The danger is that the user visits the website and their computer become...
A rootkit is a type of computer malware that has the capability to hide the presence of other malicious software, including additional malware and processes. It is typically installed on a computer through a computer virus, trojan...
The User Datagram Protocol (UDP) is one of the core members of the Internet Protocol Suite, the set of network protocols used for the internet. With UDP, computer applications can send messages, in this case, referred to as datagr...
SQL injection is an attack carried out on a website by which hackers insert SQL code directly into the application’s data entry fields using various hacking tools to access sensitive information or take control of the database.How...
A buffer overflow is a type of cyber-attack which exploits software bugs to swallow up memory and overwrite data with instructions that allow the attacker to take control of the system.How it worksHackers attach malicious code ont...
A reverse proxy is a proxy server that retrieves resources on behalf of a client from one or more servers. Browsers, corporate firewalls, and Network Address Translation (NAT) devices typically implement a limited form of reverse ...
Malicious file uploading is a type of attack that involves placing files onto a server or computer in such a way that they contain some form of backdoor code that will allow the attacker to gain access afterward. These types of at...
Malware, short for malicious software, is a term used to describe programs or scripts created with the intent of causing harm to a user's computer.
The primary purpose of a Security Operations Center (SOC) is to provide oversight and incident response services in the area of information technology (IT). SOCs were developed to address cybersecurity issues and to counter the ev...
A backdoor attack is a type of hack that takes advantage of vulnerabilities in computer security systems. These vulnerabilities can be intentional or unintentional, and can be caused by poor design, coding errors, or malware.
A DNS sinkhole is a method of redirecting traffic from one DNS server to another. It can be used for security purposes, such as malware detection, or for research purposes.
A credential stuffing attack is a type of cyber-attack where hackers use stolen or leaked username and password pairs in an attempt to gain access to user accounts.
To make a list of web crawlers, you need to know the 3 main types of web crawlers. In-house web crawlers are developed in-house by a company...
A phishing email is a targeted attempt to acquire sensitive information such as usernames, passwords, and credit card details through lures sent to specific individuals. Such emails appear legitimate because they’ll often include ...
Anti-bot verification helps prevent automated spam posts, which are posts created by scripts or programs instead of people.