Security Glossary

Keylogging is a shady tactic where software or hardware tracks every single tap on a keyboard. It senses what you are writing and opening. Hackers lean on keyloggers to swipe passwords, PINs, banking info, and private messages. On mobile, this typically happens if a phone is compromised or if someone exploits accessibility settings. Modern mobile security can now spot this suspicious behaviour and block sensitive actions the moment it detects someone is watching your keystrokes. Preventing keyloggers require a mix of real-time protections, secure typing interfaces, and constant checks to ensure the device hasn't been tampered with. These defences are non-negotiable for banking or work apps that handle high-stakes data.

Key management is a process of generating, storing, distributing, and rotating cryptographic keys. Cryptographic keys are a string of data used to lock (encrypt) or unlock (decrypt) data. Data is encrypted to protect information from being accessed by unauthorised people and attackers. Encryption only becomes strong when its keys are protected. Improper key storage can lead to data exposure even if strong algorithms are used. Key management includes key generation using secure and unpredictable letters, and protecting keys from unauthorised access by using HSMs (Hardware Security Modules). It updates keys regularly to reduce potential compromise and safely retire and destroy keys that are not in use.

Kernel-level root in Android is when attackers gain access to the kernel (core component of the operating system responsible for managing hardware, memory, and system operations). Gaining access to the kernel level means the highest level of control over the device. This level of compromise is extremely dangerous, and attackers can bypass system security controls, hide their malicious activities and manipulate system behaviour without detection. Kernel-level root generally happens when there is a security vulnerability in the OS level or firmware. It affects device integrity and OS integrity. Security-sensitive apps (banking or fintech) should detect this and restrict app functionality immediately in such cases.