C

• Cryptographic attacks (5 C, 114 P)

D

• Denial-of-service attacks (2 C, 80 P)

I

• Injection exploits (21 P)

M

• Malware (5 C, 54 P)

P

• Privilege escalation exploits (2 C, 18 P)

R

• Redirects from Common Vulnerabilities and Exposures (127 P)

S

• Swatting (4 P)

T

• Transient execution CPU vulnerabilities (15 P)

W

• Web security exploits (2 C, 45 P)
• Web shells (2 P)

• Exploit (computer security)

*

• Coordinated vulnerability disclosure
• Market for zero-day exploits
• Vulnerability management

0–9

• 2012 LinkedIn hack
• 2014 Russian hacker password theft
• 2021 Microsoft Exchange Server data breach
• 2023 MOVEit data breach

A

• Account pre-hijacking

B

• Badlock
• BadUSB
• Blended threat
• Blind return-oriented programming
• BlueBorne (security vulnerability)
• BlueKeep
• Operation: Bot Roast
• Out-of-bounds read
• Buffer overflow
• Buffer overflow protection

C

• Cable Haunt
• Cache poisoning
• Clear channel assessment attack
• Cloudbleed
• Common Vulnerabilities and Exposures
• Copy attack
• Coruna (exploit kit)
• Covert channel
• Cross-application scripting
• Cyber Insider Threat

D

• Dangling pointer
• Default password
• Dirty COW
• DirtyTooth
• DNS leak
• DNS spoofing
• DoublePulsar
• Drive-by download
• DROWN attack
• Dynamic linker

E

• EFAIL
• EgotisticalGiraffe
• EternalBlue
• Evasion (network security)
• Evil maid attack
• Exploit kit

F

• Uncontrolled format string
• FragAttacks

G

• GoFetch
• Goto fail

H

• Hardware security bug
• Heap feng shui
• Heap overflow
• Heap spraying
• Heartbleed
• Hertzbleed
• Hochulization
• HTTP parameter pollution
• Hyperjacking

I

• Idle scan
• Improper input validation
• In-session phishing
• Integer overflow
• Intrusion detection system evasion techniques
• Ivanti Pulse Connect Secure data breach

J

• JIT spraying

K

• KARMA attack
• Keystroke inference attack
• Kr00k
• KRACK

L

• Laptop theft
• Log4Shell
• Login spoofing
• LogoFAIL
• Lorcon

M

• Memory corruption
• Memory safety
• Mimikatz
• Misfortune Cookie (software vulnerability)
• Mixed threat attack

N

• Network Investigative Technique
• NOP slide
• Null character
• Null session

O

• Open Bug Bounty
• Open Threat Exchange

P

• Pass the hash
• Payload (computing)
• Pharming
• POODLE
• Phillip Porras
• Port scanner
• Predictable serial number attack
• PrintNightmare
• Project 25
• Prompt injection
• Proof of concept

R

• Race condition
• Racetrack problem
• Ramsay (malware)
• Reflection attack
• Register spring
• Relay attack
• Reptar (vulnerability)
• Return-oriented programming
• Return-to-libc attack
• Ripple20
• Row hammer

S

• Server-side request forgery
• Shatter attack
• Shellshock (software bug)
• SIGRed
• Sigreturn-oriented programming
• SigSpoof
• Silver Sparrow (malware)
• Simjacker
• Sinkclose
• SMBRelay
• SMS spoofing
• Smudge attack
• Spoiler (security vulnerability)
• Stack buffer overflow
• Stagefright (bug)
• Structural vulnerability (computing)
• Swatting
• Symlink race
• System reconfiguration attacks

T

• TCP reset attack
• Terrapin attack
• Threat (computer security)
• Threat model
• Time-of-check to time-of-use
• Transient execution CPU vulnerability
• TRESOR

V

• Vault 7
• VENOM
• Virtual machine escape
• Computer virus
• Source code virus
• Virus hoax
• Voice phishing
• VoIP vulnerabilities
• Vulnerability database

W

• WannaCry ransomware attack
• WAP billing
• Warchalking
• Wardialing
• Wardriving
• Warshipping
• Webattacker
• Weird machine
• Windows Metafile vulnerability
• WinShock
• WooYun

X

• XZ Utils backdoor

Z

• Zero-click attack
• Zeroday Emergency Response Team
• Zerodium
• Zerologon