A broad class of attack vectors, where an attacker supplies input to an applications command interpreter that results in unanticipated functionality. 

CyberWire Glossary link: https://thecyberwire.com/glossary/owasp-injection

Audio reference link: “APPSEC Cali 2018 - Taking on the King: Killing Injection Vulnerabilities” YouTube Video. YouTube, March 19, 2018.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Code that fails to protect sensitive information. 

CyberWire Glossary link: https://thecyberwire.com/glossary/owasp-cryptographic-failure

Audio reference link: Vandana Verma. “OWASP Spotlight - Project 10 - Top10.” YouTube Video. YouTube, January 4, 2021.

Learn more about your ad choices. Visit megaphone.fm/adchoices

The prevention of the first part of an intrusion kill chain model exploitation technique, where the hacker steals valid logging credentials from a targeted victim. 

CyberWire Glossary link: https://thecyberwire.com/glossary/account-takeover-prevention

Learn more about your ad choices. Visit megaphone.fm/adchoices

The process of proactively searching through networks to detect and isolate security threats, rather than relying on security solutions or services to detect those threats. 

CyberWire Glossary link: https://thecyberwire.com/glossary/threat-hunting

Audio reference link: “My ‘Aha!" Moment - Methods, Tips, & Lessons Learned in Threat Hunting - sans Thir Summit 2019.” YouTube, YouTube, 25 Feb. 2020.

Learn more about your ad choices. Visit megaphone.fm/adchoices

The continuous practice of identifying classifying, prioritizing, remediating, and mitigating software vulnerabilities within this.

CyberWire Glossary link: https://thecyberwire.com/glossary/vulnerability-management

Audio reference link: “Vulnerability Scanning - Comptia Security+ sy0-501 - 1.5.” YouTube, YouTube, 11 Nov. 2017,

Learn more about your ad choices. Visit megaphone.fm/adchoices

A formal record containing the details and supply chain relationships of various components used in building software. 

Learn more about your ad choices. Visit megaphone.fm/adchoices

A security philosophy that assumes adversaries have already penetrated the digital environment and tries to reduce the potential impact by limiting access by people, devices, and software to only the resources essential to perform their function and nothing more. 

Learn more about your ad choices. Visit megaphone.fm/adchoices

Hardware and software designed to detect and prevent cyber adversary campaigns that target industrial operations. 

Learn more about your ad choices. Visit megaphone.fm/adchoices

The difference between organizational employee job requirements and the available skillsets in the potential employee pool.

Learn more about your ad choices. Visit megaphone.fm/adchoices

The use of technology to radically improve the performance or reach of the business. 

Learn more about your ad choices. Visit megaphone.fm/adchoices