Cybersecurity Glossary

An attack targeting GraphQL APIs where malicious queries are crafted to extract unauthorized data, perform denial of service, or bypass access controls.

A forged Kerberos ticket-granting ticket that provides an attacker with unlimited access to any resource in an Active Directory domain for an extended period.

A fast directory and DNS brute-forcing tool written in Go, used during penetration testing to discover hidden content on web servers.

General Data Protection Regulation. European Union regulation governing data protection and privacy that gives individuals control over their personal data.

A curated list of Unix binaries that can be exploited by attackers to bypass local security restrictions and escalate privileges on Linux systems.

GIAC Penetration Tester. A SANS certification validating the ability to properly conduct penetration tests using best practice techniques and methodologies.

Generic Routing Encapsulation. A tunneling protocol that encapsulates a wide variety of network layer protocols inside virtual point-to-point links.

The use of generative AI models to automate and scale cyberattack components like writing malware, generating phishing content, and discovering vulnerabilities.

A high-performance remote procedure call framework that uses Protocol Buffers and HTTP/2, requiring security review for authentication and data protection.

Security practices specific to GraphQL APIs including query depth limiting, introspection control, and authorization enforcement.

A free software reverse engineering framework developed by the NSA that provides binary analysis, disassembly, and decompilation capabilities.

Google Cloud comprehensive security management and data risk platform for identifying vulnerabilities and threats.

Emerging security risks from generative AI including automated malware creation, phishing at scale, and synthetic identity fraud.

Security practices for GitOps workflows including branch protection, signed commits, and automated security scanning in pull requests.

GIAC Security Essentials. A SANS certification validating knowledge of information security concepts and hands-on security skills.

GIAC Certified Intrusion Analyst. A certification validating skills in network traffic analysis, intrusion detection, and incident handling.

Career path in Governance, Risk, and Compliance covering policy development, risk assessment, and regulatory compliance.

Exploiting enabled GraphQL introspection to discover the complete API schema including hidden queries and sensitive fields.

A cryptographic protocol enabling secure two-party computation where a boolean circuit is encrypted to hide the inputs and computation.