Cybersecurity and Account Protection
Common Vulnerabilities and Exposures
Common Vulnerabilities and Exposures is a public catalog that assigns CVE IDs to publicly known cybersecurity vulnerabilities.
Read full definitionShouldEye Trust Intelligence Glossary
Cybersecurity and Account Protection Terms
Threats, malware, vulnerabilities, MFA fatigue, passkeys, and detection/response vocabulary — not a security certification.
Educational information only. ShouldEye does not provide legal, banking, or individualized financial advice. Dispute rights, deadlines, and outcomes depend on your payment method, card network, issuer, processor, jurisdiction, and the facts of your case. Legal Disclaimers
15 published definitions in this topic.
Cybersecurity and Account Protection
Credential Stuffing
Credential stuffing is automated login attempts using username/password pairs stolen from other breaches.
Read full definitionCybersecurity and Account Protection
Cross-Site Scripting
Cross-site scripting is a web vulnerability where attackers inject scripts that run in victims’ browsers in the context of a trusted site.
Read full definitionCybersecurity and Account Protection
Cybersecurity
Cybersecurity is the practice of protecting systems, networks, accounts, and data from unauthorized access, disruption, or misuse.
Read full definitionCybersecurity and Account Protection
Distributed Denial of Service
A distributed denial-of-service attack floods a target with traffic from many sources to degrade or block legitimate access.
Read full definitionCybersecurity and Account Protection
Malware
Malware is malicious software designed to disrupt systems, steal data, gain unauthorized access, or otherwise harm users.
Read full definitionCybersecurity and Account Protection
Passkey
A passkey is a phishing-resistant authenticator credential based on public-key cryptography, often synced or device-bound via platform standards.
Read full definitionCybersecurity and Account Protection
Phishing-Resistant MFA
Phishing-resistant MFA refers to authenticators—such as passkeys/FIDO—that are designed not to yield reusable secrets to fake sites.
Read full definitionCybersecurity and Account Protection
Ransomware
Ransomware is malware that encrypts or locks access to data or systems and demands payment for restoration or non-disclosure.
Read full definitionCybersecurity and Account Protection
Security Key
A security key is a hardware authenticator that approves sign-ins using cryptographic challenge-response, often via FIDO protocols.
Read full definitionCybersecurity and Account Protection
Session Hijacking
Session hijacking is taking over an authenticated session token to impersonate a logged-in user without knowing the password.
Read full definitionCybersecurity and Account Protection
SQL Injection
SQL injection is a vulnerability where untrusted input is interpreted as database commands, potentially exposing or altering data.
Read full definitionCybersecurity and Account Protection
Supply-Chain Attack
A supply-chain attack compromises trusted software, vendors, or update channels to reach downstream victims.
Read full definitionCybersecurity and Account Protection
Vulnerability
A vulnerability is a weakness in software, hardware, or process that an attacker could exploit to violate security properties.
Read full definitionCybersecurity and Account Protection
Zero-Day Exploit
A zero-day exploit takes advantage of a vulnerability that the vendor or public defenders do not yet have a patch or full awareness for.
Read full definition