Browse Definitions :
Definition

weaponized information

Weaponized information is a message or content piece that is designed to affect the recipient's perception about something or someone in a way that is not warranted. The term implies a target and the intention to cause harm.  

The goal of weaponized information is bringing about a change in beliefs and attitudes and, as a result, promote behavior that serves the attacker's purpose. Attacks involving weaponized information are sometimes referred to as cognitive hacking.  

Weaponized information often consists of intentional falsehoods, known as disinformation. It can also be true but taken out of context, like a comment carefully selected from a longer statement so that it does not reflect what the speaker said. It may be a mixture of truth and lies, so that the known facts lend credence to the untruths. In other cases, the information may be true but its significance overblown or the timing of release calculated to cause the most harm possible. 

Propaganda is an example of weaponized information: misleading or biased information of a political nature that is usually spread by governments. In contrast, weaponized information is also used in the marketplace to gain a competitive advantage. It might be used to tarnish a competitor's reputation, for example, or spread fear, uncertainty and doubt (FUD) about a product or technology. 

Weaponized information is one form of social engineering. The presentation of the information may be skillfully crafted to exploit common cognitive biases and errors. People can protect themselves from being affected by weaponized information by strengthening their capacity for critical thinking.  

In the enterprise, weaponized data may enter through automated channels and can impact security without being seen by a human. To protect organizations from malicious information, security experts are exploring the potential of cognitive security technologies to automatically detect and deal with weaponized information. 

This was last updated in August 2017

Continue Reading About weaponized information

SearchCompliance
  • ISO 31000 Risk Management

    The ISO 31000 Risk Management framework is an international standard that provides businesses with guidelines and principles for ...

  • pure risk

    Pure risk refers to risks that are beyond human control and result in a loss or no loss with no possibility of financial gain.

  • risk reporting

    Risk reporting is a method of identifying risks tied to or potentially impacting an organization's business processes.

SearchSecurity
  • Pretty Good Privacy (PGP)

    Pretty Good Privacy or PGP was a popular program used to encrypt and decrypt email over the internet, as well as authenticate ...

  • email security

    Email security is the process of ensuring the availability, integrity and authenticity of email communications by protecting ...

  • cyberterrorism

    Cyberterrorism is often defined as any premeditated, politically motivated attack against information systems, programs and data ...

SearchHealthIT
SearchDisasterRecovery
  • What is risk mitigation?

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • fault-tolerant

    Fault-tolerant technology is a capability of a computer system, electronic system or network to deliver uninterrupted service, ...

  • synchronous replication

    Synchronous replication is the process of copying data over a storage area network, local area network or wide area network so ...

SearchStorage
Close