A security message can be difficult to understand even when its individual words look familiar. Does “unusual activity” mean your account has been hacked? Is permission the same as authentication? This guide explains everyday cybersecurity vocabulary so you can read warnings carefully and describe a suspicious event clearly in English.
Learn phishing, malware, breach, authentication, and permissions first. Phishing describes deceptive attempts to obtain information or make you act; authentication checks who is signing in, while permissions control what an account or app may do. When reporting a concern, state what you observed and what you did, without presenting a suspicion as a confirmed breach.
What's your English level?
Take the test and get your certificate!
Common Cybersecurity Threat Vocabulary
Cybersecurity concerns protecting digital systems, accounts, and information. A threat is something that could cause harm; a vulnerability is a weakness that could be exploited. You might hear “a security update fixes a vulnerability,” meaning that the update addresses a weakness.
| Term | Meaning and example |
|---|---|
| Phishing | A deceptive attempt to obtain information or persuade someone to act, often through messages that impersonate a trusted sender. “I reported a suspected phishing email.” |
| Scam | A dishonest scheme intended to trick someone. “The message about a prize was a scam.” |
| Malware | Software designed to cause harm or perform unwanted malicious actions. “The security tool detected malware.” |
| Ransomware | Malware associated with extortion, often by blocking access to files or encrypting them. “The report describes a ransomware attack.” |
| Data breach | An incident in which protected information is accessed or disclosed without authorization. “The company notified customers about a data breach.” |
| Compromised | No longer secure because unauthorized access or interference has occurred. “The account may have been compromised.” |
Do not use these terms as interchangeable labels. A suspicious email is not proof of malware on your device, and receiving a phishing message does not by itself mean your account is compromised. The FTC’s malware guide explains malicious software and common warning signs.
Impersonate means pretend to be someone else. Spoof can describe falsifying a sender identity or other identifying information. A familiar display name is therefore not enough to establish who really sent a message.
Accounts, Authentication and Permissions
Authentication checks that the person signing in controls the required means of access to an account. Authorization concerns what that person is allowed to do. You can be successfully authenticated yet still lack permission to open a particular file.
| Expression | Plain-English meaning |
|---|---|
| Credentials | Information or means used to establish identity or access. In everyday support messages, “login credentials” often means a username and password. |
| Multi-factor authentication (MFA) | Signing in using more than one distinct type of factor, such as a password and a security device. |
| Verification code | A code used as part of checking an action or sign-in. “The verification code has expired.” |
| Permissions | Rules allowing particular actions or access. “This app is requesting permission to use my camera.” |
| Grant / revoke access | Allow access / remove previously allowed access. “The administrator revoked the old account’s access.” |
| Session | A period of interaction with a service, often after signing in. “Your session has expired” means that session is no longer valid. |
The word factor matters. NIST’s digital identity guidance distinguishes something you know, something you have, and something you are. A password plus another memorized PIN does not become two-factor authentication simply because two questions were asked.
Learn the verbs with their usual objects: enable MFA, enter a code, grant permission, and revoke access. Say “The app has access to my contacts,” but “The app can access my contacts.” The verb access does not take to.
Understand Security Warnings Without Jumping to Conclusions
A warning reports a condition that needs attention. Its wording does not always establish what caused that condition. Read the full message, and distinguish what it claims from what you know independently.
“Unusual sign-in activity detected”
Unusual means different from the expected pattern; detected means noticed by a system. An alert can refer to a legitimate new device or to unauthorized activity. A message claiming to be a security alert can also be fraudulent, so verify through the service’s known app or website.
“Your account will be suspended”
Suspended usually means temporarily prevented from operating or being used. Scammers may use urgent language to pressure someone into acting. FTC phishing guidance recommends contacting the company through a phone number or website you already know is genuine instead of relying on contact details in the suspicious message.
“This application is requesting access”
Requesting means asking; it does not mean you must agree. Check which application is asking and what permission it wants. A useful question is “Why does this app need access to my location?”
“A security update is available”
An update is a newer version or set of changes. A patch is a change intended to fix a specific problem, sometimes a security weakness. Use the device’s or application’s trusted update mechanism, rather than downloading a supposed fix from an unexpected message.
A backup is a separate copy used to recover information. As a verb, write back up: “I back up my files.” As a noun, write “I have a backup.” Encryption, another common term, transforms readable information into a protected form that requires the appropriate key to read.
Report a Suspicious Event in Clear English
Give the support or security team a factual sequence: what arrived, when it arrived, and what you did next. Use suspected, appears to, or may have when you are not certain. The following is a fictional example, not a report of a real incident.
Subject: Suspected phishing message received at 09:20
I received an email that claimed to be from our IT team. It asked me to verify my account through a link. The sender’s address did not match the address I normally see from IT.
I opened the email, but I did not click the link, open an attachment, or enter any information. Could you check whether the message is genuine? Please let me know how to submit it through our approved reporting channel.
If you did click or enter information, state that clearly instead of using the example unchanged. “I clicked the link and entered my password” communicates a different situation from “I opened the email.” Contact your organization’s security team promptly through a known channel and follow its response process.
Do not include passwords, verification codes, or recovery codes in the report. Describe the type of information you entered without reproducing the secret itself. A recovery code is a code that can help restore account access when the usual sign-in method is unavailable.
A short clarification dialogue
User: I received a sign-in approval request that I did not initiate.
Support: Did you approve it?
User: No. I denied it and contacted you through the staff portal.
Support: Thank you. Please tell us when the request appeared and which account it concerned.
Initiate means start; approve means accept; deny means refuse. “I did not initiate this request” is a useful sentence when an unexpected sign-in approval appears. For general error reporting, see our IT support vocabulary guide.
Practise the Vocabulary
Choose the correct word for each sentence: permissions, phishing, revoke, backup, suspected. Then practise reading the complete sentences aloud.
- The message impersonates a bank and asks for account details. It may be ______.
- The app’s ______ determine whether it can use the microphone.
- Please ______ access for the account that is no longer used.
- We restored the missing file from a ______.
- I reported a ______ incident because the cause had not yet been confirmed.
Answers: 1. phishing; 2. permissions; 3. revoke; 4. backup; 5. suspected.
Make this more precise: “I was hacked.”
One possible rewrite: “I received three sign-in alerts this morning that I do not recognize. I have not approved any requests. Could you help me check the account?”
The rewrite communicates evidence without inventing a diagnosis. Write a second version for someone who clicked a suspicious link but did not enter information. Keep the actions separate so the reader can understand exactly what happened.
Frequently Asked Questions
Is spam the same as phishing?
No. Spam is unwanted bulk messaging. Phishing involves deception intended to obtain information or induce an action; some spam is phishing, but the terms describe different things.
Does “secure connection” prove a website is trustworthy?
No. A protected connection concerns communication with a site, not whether its operator is honest. A fraudulent site can also use an encrypted connection, so the phrase alone is not proof of legitimacy.
How do I pronounce “phishing”?
It is pronounced like “fishing.” The spelling differs, but the sound is the same. A useful phrase to practise is “I reported a phishing attempt.”
What should I learn after these terms?
Practise explaining one warning in plain English and writing a short factual report. For broader digital vocabulary, read our technology and internet vocabulary guide. Aim to understand the message and describe your actions accurately, rather than memorize a long list without context.
