Cybersecurity Essentials: Protecting Systems and Data

Types of Attacks and Threats

• Cyberattack: An attempt to damage or gain unauthorized access to systems.
• Phishing: Fraudulent messages used to steal user credentials.
• Malware: Malicious software designed to harm systems.
• Ransomware: Malware that encrypts data and demands payment.

Common Attacker Techniques

• Lateral movement: Moving through a network to access other systems.
• Credential theft / harvesting: Stealing usernames and passwords.
• Unauthorized access: Entering a system without permission.
• Social engineering: Manipulating people to reveal confidential information.

Systems and Networks

• Internal network: A company’s private network.
• Database: Structured storage of data.
• Servers: Computers that provide services or resources.
• Website: An online platform accessible via the internet.

Data and Information Security

• Customer data: Personal information about clients.
• Credentials: Login details (username and password).
• Payment information: Financial data used for transactions.
• Encrypted files: Data protected using encryption.
• Backups: Copies of data stored for recovery.

Vulnerabilities and Weaknesses

• Weak passwords: Easily guessable passwords.
• Lack of multi-factor authentication (MFA): The absence of extra login verification.
• Insufficient training: A lack of user awareness or education.
• Vulnerabilities: Weaknesses in a system’s security.

Response and Defense Strategies

• Ethical hacking: Authorized testing of systems for security flaws.
• Security testing: Evaluating system security.
• System administrators: IT professionals managing systems.
• Disconnecting servers: Isolating infected systems.
• Incident response: Actions taken after a cyberattack.
• Security measures: Protections implemented to prevent attacks.

Financial and Attack Impact

• Cryptocurrency: Digital currency used for transactions.
• Ransom payment: Money demanded by attackers.
• Financial loss: Economic damage caused by the attack.

Key Useful Expressions

• “Gain access to a system”
• “Install malware”
• “Move through the network”
• “Encrypt files”
• “Restore backups”
• “Recognize phishing attacks”