Cybersecurity Resource Center
Everything you need to know about cybersecurity basics.

Malwarebytes Labs Threat Center
Top 10 Protection Lists of August 2026.
How AI is reshaping trust, identity, and scams
A counterfeit world is coming online. AI powers it.
U.S. Army Cyber Command
Help keep you and your family safe from cyber threats and criminals, secure from real-world physical threats, and knowledgeable about the Army and DoD cyber forces.
FBI Common Frauds and Scams
Learn about some of the most common frauds and scams that the FBI encounters—as well as tips to help you stay safe and what to do if you're a victim.
Phishing Defenses: Top Cybersecurity Strategies
Learn how to recognise Phishing attacks.
IBM Technologies YouTube Presentation 

Definitions:

Phishing is a widespread type of cyberattack where criminals impersonate trusted entities—such as banks, government agencies, employers, or popular brands—to deceive individuals into revealing sensitive information.

Spear phishing is a highly targeted cyberattack where a hacker customizes a deceptive message for a specific individual or organization. [1] 

MFA (Multi-Factor Authentication) is a security mechanism that requires you to provide two or more distinct pieces of evidence to verify your identity before gaining access to an account or system. 

Passkeys are a modern, passwordless login technology that allows you to sign into websites and apps using your device's built-in biometrics (like Face ID or fingerprint scans) or hardware security keys. 

Juice jacking is a hardware-focused cyberattack where criminals use compromised public USB charging ports to steal data or inject malware into your mobile devices.

Automatic updates are an operating system or software feature that automatically downloads and installs software patches, bug fixes, and security upgrades without requiring manual user intervention. 

Ransomware: A form of malware that encrypts a victim's files and demands a financial payment (usually in cryptocurrency) in exchange for the decryption key. Modern variants also include "double extortion," where attackers threaten to leak sensitive stolen data if the ransom is not paid.

Malware (Malicious Software): An umbrella term for any software intentionally designed to cause disruption, damage, or unauthorized access to a computer, server, client, or computer network. It includes viruses, worms, trojans, spyware, and adware.

Man-in-the-Middle (MitM) Attack: An attack where a cybercriminal secretly intercepts and alters communications between two parties who believe they are directly talking to each other. This frequently happens on unencrypted public Wi-Fi networks.

Social Engineering: The psychological manipulation of people into performing actions or divulging confidential information. Phishing is the most common digital form, but it can also happen over the phone or in person (e.g., tailgating into a secure building).

Zero-Day Vulnerability: A software security flaw that is completely unknown to the software vendor or developers. Because the creator has had "zero days" to fix it, hackers can exploit the security hole until an emergency patch is engineered and deployed.

Firewall: A network security device that monitors and filters incoming and outgoing network traffic based on an organization's previously established security policies. It acts as a barrier between a trusted internal network and an untrusted external network (like the internet).

Encryption: The process of scrambling plaintext data into unreadable ciphertext using complex mathematical algorithms. Only authorized parties holding the correct cryptographic key can decrypt and read the information.

VPN (Virtual Private Network): A service that establishes a protected, encrypted network connection when using public networks. It masks your internet protocol (IP) address and encrypts your data traffic, shielding your online activities from eavesdroppers.

Least Privilege (Principle of): An information security concept maintaining that a user, program, or process should have only the bare minimum access privileges necessary to perform its specific function. This restricts the potential damage if an account is compromised.

Endpoint Detection and Response (EDR): Advanced security software that continuously monitors end-user devices (like aptops, desktops, and mobile devices) in real time to detect, investigate, and automatically mitigate complex cyber threats.