ACARA Digital Technologies Years 9–10 Word Scramble: Cyber Security Threats and Vulnerabilities (Modules 810–827)
Name:
Date:
Class:
🔤
Word scramble
Unscramble the letters and write each key term on the line.
1
OYAZ-ERD
A ______ is a software flaw that attackers know about before the maker has released a fix, so there is no patch yet. Defenders use workarounds and monitoring until one arrives.
2
UTODDEAT AEWFTORS
Software that is missing the latest security patches, so its known flaws stay open for attackers to exploit.
3
EFLUDAT ANDRLTCIESE
The factory username and password a device or app ships with. If they are never changed, anyone who knows or guesses them can log in and take control.
4
EVC
A public vulnerability report with a unique ID that names the affected software and versions, explains how the flaw is exploited, gives a severity score and links to a fix.
5
VGIRAHRENSO
Posting personal details online, like pet or school names, which attackers use to guess passwords and write convincing targeted messages.
6
OERTSAWF UYPPSL ANCIH
Everything used to make and deliver software: code libraries, tools, build systems, suppliers and updates. Most of an app is other people's code, so every link must be trusted.
7
YDTAI-RPRTH EDEEDNPNCY
A library written by someone else that your program imports and relies on. A flaw in it affects every app that uses it, and it may pull in its own dependencies too.
8
IYPQSTATNUTOG
Publishing a malicious package or site with a name almost the same as a trusted one, like reqeusts for requests, hoping people use it by mistake.
Answer Key
ACARA Digital Technologies Years 9–10 · Modules 810–827
1OYAZ-ERD → zero-day — A zero-day is a software flaw that attackers know about before the maker has released a fix, so there is no patch yet. Defenders use workarounds and monitoring until one arrives.
2UTODDEAT AEWFTORS → outdated software — Software that is missing the latest security patches, so its known flaws stay open for attackers to exploit.
3EFLUDAT ANDRLTCIESE → default credentials — The factory username and password a device or app ships with. If they are never changed, anyone who knows or guesses them can log in and take control.
4EVC → CVE — A public vulnerability report with a unique ID that names the affected software and versions, explains how the flaw is exploited, gives a severity score and links to a fix.
5VGIRAHRENSO → oversharing — Posting personal details online, like pet or school names, which attackers use to guess passwords and write convincing targeted messages.
6OERTSAWF UYPPSL ANCIH → software supply chain — Everything used to make and deliver software: code libraries, tools, build systems, suppliers and updates. Most of an app is other people's code, so every link must be trusted.
7YDTAI-RPRTH EDEEDNPNCY → third-party dependency — A library written by someone else that your program imports and relies on. A flaw in it affects every app that uses it, and it may pull in its own dependencies too.
8IYPQSTATNUTOG → typosquatting — Publishing a malicious package or site with a name almost the same as a trusted one, like reqeusts for requests, hoping people use it by mistake.