.svg)
Threat Intelligence
Actionable information about cyber threats, threat actors, and their tactics, techniques, and procedures, used to inform and improve defensive security decisions.
Threat Intelligence is evidence-based knowledge about existing or emerging threats that can be used to make informed security decisions. Strategic intelligence informs executive decision-making. Operational intelligence provides information about specific upcoming attacks. Technical intelligence includes specific indicators of compromise (IoCs) such as malicious IP addresses and file hashes. CyberUp24's Incident Response and SOC Optimization services leverage threat intelligence to improve detection coverage and accelerate response.
Related terms
Web Application Firewall (WAF)
A security solution that monitors, filters, and blocks HTTP traffic to and from web applications, protecting against application-layer attacks.
Read full description
%201.svg)
W
w
Vulnerability Management
The continuous practice of identifying, classifying, prioritizing, remediating, and mitigating vulnerabilities across an organization's technology environment.
Read full description
V
v
Threat Intelligence
Actionable information about cyber threats, threat actors, and their tactics, techniques, and procedures, used to inform and improve defensive security decisions.
Read full description
T
t
Supply Chain Security
The practice of identifying and mitigating cybersecurity risks introduced through an organization's vendors, suppliers, software dependencies, and third-party services.
Read full description
S
s
Security Operations Center (SOC)
A centralized team and facility that continuously monitors, detects, analyzes, and responds to cybersecurity incidents across an organization's environment.
Read full description
S
s
Security Awareness Training
Educational programs designed to help employees recognize, avoid, and report cybersecurity threats including phishing, social engineering, and policy violations.
Read full description
S
s
Ransomware
Malicious software that encrypts a victim's data or locks systems and demands payment for restoration, representing one of the most damaging cyber threats today.
Read full description
R
r
Privileged Access Management (PAM)
Security solutions that manage, monitor, and control elevated access rights for users, accounts, and systems across an IT environment.
Read full description
P
p
Phishing
A social engineering attack that uses deceptive emails, messages, or websites to trick users into revealing credentials, downloading malware, or transferring funds.
Read full description
P
p
Patch Management
The systematic process of identifying, acquiring, testing, and applying software updates to fix vulnerabilities and improve system security and stability.
Read full description
P
p
OSINT (Open Source Intelligence)
The collection and analysis of information from publicly available sources to support threat intelligence, investigations, and security assessments.
Read full description
O
o
Network Segmentation
The practice of dividing a computer network into smaller subnetworks to improve security and limit the spread of breaches within an organization's environment.
Read full description
N
n
Multi-Factor Authentication (MFA)
A security mechanism requiring users to verify their identity using two or more independent factors before gaining access to a system or application.
Read full description
M
m
Lateral Movement
The techniques attackers use to progressively move through a network after initial compromise, seeking higher-value targets and expanding their access.
Read full description
L
l
Malware
Malicious software designed to disrupt, damage, or gain unauthorized access to computer systems, including viruses, ransomware, trojans, and spyware.
Read full description
M
m
FISMA (Federal Information Security Management Act)
U.S. federal legislation that defines a comprehensive framework for protecting government information, operations, and assets against natural and man-made threats.
Read full description
F
f
Firewall
A network security device or software that monitors and controls incoming and outgoing network traffic based on predetermined security rules.
Read full description
F
f
Identity and Access Management (IAM)
The framework of policies and technologies that ensures the right individuals access the right resources at the right times and for the right reasons.
Read full description
I
i
Honeypot
A decoy system or network designed to attract and detect unauthorized access attempts, providing intelligence on attacker techniques and behavior.
Read full description
H
h
Exploit
A piece of software or technique that takes advantage of a vulnerability in a system to cause unintended behavior or gain unauthorized access.
Read full description
E
e
Cyber Kill Chain
A framework developed by Lockheed Martin that describes the stages of a cyberattack from reconnaissance through actions on objectives, used to identify and disrupt attacks.
Read full description
C
c
