Crossword - Cybersecurity 3

2. When an attacker inserts malicious database commands into a website's input fields to access, change, or delete data.
4. A set of rules that defines how users are allowed to use an organisation's computer systems, networks, and internet access.
8. A simple encryption method where each letter in a message is shifted a fixed number of places through the alphabet.
10. A method of gaining unauthorised access by repeatedly trying different username and password combinations until the correct one is found.
14. A security method that requires two forms of identification, usually something you know (a password) and something you have (a code sent to a phone or generated by an app).

1. A pre-set password provided by the manufacturer of a device or software, which should be changed to improve security.
3. An attack that floods a computer system or network with traffic, preventing legitimate users from accessing services.
5. A method of authentication that uses unique physical characteristics, such as fingerprints, facial recognition, or iris scans, to identify a user.
6. A collection of computers or devices infected with malware and controlled as a group, often to carry out attacks such as DDoS attacks.
7. An authorised attempt to test the security of a computer system by deliberately trying to find and exploit vulnerabilities.
9. Occurs when sensitive or confidential data is accessed, shared, or stolen by someone who is not authorised to see it.
11. Hardware or software that monitors and controls network traffic, blocking unauthorised access while allowing legitimate communications.
12. A secret combination of characters used to verify a user's identity and allow access to a computer system or account.
13. A type of DoS attack where multiple computers are used to flood a target system with traffic simultaneously.