Glossary

Cybersecurity A-Z

Plain-language definitions of the terms you need to know.

F

Firewall

A network security system that monitors and controls incoming and outgoing traffic based on predefined rules, acting as a barrier between trusted and untrusted networks.

M

Malware

An umbrella term for any software intentionally designed to cause damage, steal data, or gain unauthorised access to computer systems.

N

NIST Cybersecurity Framework (CSF)

A voluntary framework developed by the US National Institute of Standards and Technology providing guidelines for organisations to manage and reduce cybersecurity risk.

P

PDPA (Personal Data Protection Act 2010)

Malaysia's primary legislation governing the processing of personal data in commercial transactions, requiring organisations to protect individuals' personal information.

Phishing

A social engineering attack where criminals impersonate trusted entities via email, SMS, or fake websites to trick victims into revealing sensitive information.

R

Ransomware

Malicious software that encrypts a victim's files or locks their systems, demanding payment (a ransom) to restore access.

S

Social Engineering

Psychological manipulation techniques used by attackers to deceive people into revealing confidential information, granting access, or performing actions that compromise security.

T

Two-Factor Authentication (2FA)

A security method requiring two different forms of verification — something you know (password) and something you have (phone, security key) — before granting access.

V

VPN (Virtual Private Network)

A technology that creates an encrypted tunnel between your device and a remote server, protecting your internet traffic from eavesdropping and masking your IP address.

Z

Zero-Day Vulnerability

A previously unknown security flaw in software that is exploited by attackers before the vendor has released a fix, giving defenders "zero days" to respond.