🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 765 of them. This is page 6 of 8, the most named first.

• GraphQL2 items
• GraphQL attacks2 items
• Grover search against hash functions2 items
• Hardcoded credential detection2 items
• Hardware supply chain tampering2 items
• Hashing2 items
• Heap-based Buffer Overflow2 items
• Helm template injection via GitOps controller2 items
• Hidden context exposure2 items
• HITL Dialog Forging2 items
• HTML rendering race condition2 items
• HTTP desync attacks2 items
• Human-in-the-Loop Bypass2 items
• Image signing and verification2 items
• Impair Defenses2 items
• Implicit node-gyp rebuild via binding.gyp2 items
• Import-time execution2 items
• Impossible travel detection2 items
• Improper input validation2 items
• Improper sanitization2 items
• Improper verification of cryptographic signature2 items
• In-memory payload execution2 items
• In-memory/fileless execution2 items
• Insecure AI-generated code2 items
• Insecure transport2 items
• Install-time script execution2 items
• Integer truncation2 items
• IOC enrichment2 items
• Java deserialization2 items
• JavaScript2 items
• JavaScript obfuscation2 items
• Jinja2 Server-Side Template Injection2 items
• kASLR bypass2 items
• Kerberos delegation abuse2 items
• Kernel exploitation2 items
• Kernel-level enforcement2 items
• Lateral movement via poor segmentation2 items
• Laundering of stolen funds2 items
• LDAP injection2 items
• Learning With Errors2 items
• Linear cryptanalysis2 items
• Living off Trusted Sites2 items
• Living-off-the-land techniques2 items
• LLM API poisoning detection2 items
• LLM Jailbreak2 items
• LLM Prompt Crafting2 items
• Long-horizon agentic engineering2 items
• LoRA fine-tuning2 items
• LSASS dumping2 items
• Malicious Groovy plugin deployment2 items
• Malicious package publishing2 items
• Malicious preinstall script2 items
• Malvertising via sponsored search results2 items
• Manipulation of automatic quality metrics2 items
• Markdown exfiltration2 items
• Match Legitimate Name or Location2 items
• MCP command injection2 items
• MCP Configuration Poisoning2 items
• MCP tool abuse2 items
• Membership Inference2 items
• Membership inference attack2 items
• Memorization detection2 items
• Memory zeroization2 items
• Memory-safety flaws2 items
• Micro-inspiration prompting2 items
• Misinformation2 items
• Missing authentication for a critical function2 items
• Missing Origin Validation in WebSockets2 items
• MITRE ATT&CK mapping2 items
• MITRE ATT&CK technique mapping2 items
• Model checking2 items
• Model poisoning2 items
• Monomial prediction2 items
• Multi-agent orchestration2 items
• Multi-channel exfiltration2 items
• Multi-factor authentication bypass2 items
• Multi-hop redirect chains2 items
• Multi-layer JavaScript obfuscation2 items
• Multi-layer obfuscation2 items
• Multi-turn jailbreak attacks2 items
• Mutation testing2 items
• Mutex-based execution marker2 items
• Network reconnaissance2 items
• NFC relay attack2 items
• npm supply chain compromise2 items
• ntdll.dll unhooking2 items
• NTLM relay attack2 items
• Null-pointer dereference2 items
• OAuth application abuse2 items
• OAuth consent phishing2 items
• OAuth token theft2 items
• Obfuscated payload2 items
• Onchain fund tracing2 items
• OSINT2 items
• Out-of-band data exfiltration2 items
• Over-optimisation2 items
• Package hallucination attack2 items
• Parameter mining2 items
• Password spraying and OAuth application abuse2 items
• Payload execution2 items