// THREAT DETECTION AND DATA PRIVACY TERM

Compromise

In cybersecurity, a compromise refers to a situation where a system, network, or data has been breached or exposed to an unauthorized party, leading to a loss of confidentiality, integrity, or availability. It means security controls have failed, and an attacker has gained access or control.

Compromise — illustration from Wikipedia
Image via Wikipedia

TECHNICAL DEFINITION

A cybersecurity compromise denotes an unauthorized breach event where threat actors successfully exploit vulnerabilities, leading to a loss of confidentiality, integrity, or availability (CIA triad) of an information system, network, or data asset. This state signifies the successful subversion of security controls and unauthorized access or control by an adversary.

BACKGROUND

Computer security is a subdiscipline within the field of information security. It focuses on protecting computer software, systems, and networks from threats that can lead to unauthorized information disclosure, theft, or damage to hardware, software, or data, as well as to the disruption or misdirection of the services they provide.

READ MORE ON WIKIPEDIA

SYNONYMS & ALIASES

  • Breach
  • Infiltration
  • Exploitation
  • Hack
  • Security incident
  • Exposure
  • Penetration

USAGE NOTE

The term 'compromise' is frequently used to describe the state of a system or network after a successful attack, often requiring incident response and remediation efforts.

DEVELOPERS

Organizations developing technology related to Compromise.

  • Mandiant (Google Cloud)

    Specializes in incident response, threat intelligence, and security validation, helping organizations detect, investigate, and remediate cyber compromises.

  • CrowdStrike

    Offers endpoint and cloud security, threat intelligence, and incident response services, focusing on preventing breaches and responding to compromises with its Falcon platform.

  • Palo Alto Networks

    Provides a comprehensive suite of cybersecurity products including firewalls, cloud security, and threat detection, aimed at preventing and mitigating network and system compromises.

  • Microsoft Security

    Develops a wide range of security solutions including Microsoft Defender XDR, Azure Security, and identity protection, designed to prevent, detect, and respond to cyber compromises across hybrid environments.

  • Splunk

    Offers a leading Security Information and Event Management (SIEM) platform and security orchestration, automation, and response (SOAR) solutions to help organizations detect, investigate, and respond to security compromises.

  • SentinelOne

    Provides AI-powered endpoint, cloud, and identity security solutions for autonomous threat prevention, detection, and response, actively working to prevent and mitigate compromises.

  • IBM Security

    Offers a broad portfolio of security services and products, including QRadar SIEM, threat intelligence, and incident response, to help clients manage and respond to security compromises.

  • Trellix

    Delivers an extended detection and response (XDR) platform designed to unify security operations, enabling faster detection and remediation of advanced threats and compromises.

RELATED TERMS IN INCIDENT RESPONSE