Enrich knowledge base with edoardottt's Security+ notes

Integrate technical details from github.com/edoardottt/CompTIA-Security-notes
(SY0-601, passed 788) into existing topic pages and glossary:

- Glossary: +225 acronym entries (563 → 788 total)
- Domain 1: credential harvesting, juice jacking, FM-200, PDS, Bluetooth attacks
- Domain 2: XML/LDAP/DLL injection, pass-the-hash, adware, cryptojacking, VM sprawl
- Domain 3: key stretching, PFS, NTRU, edge/fog computing, EAP variants, RAID, cert formats
- Domain 4: forensic tools (FTK/Autopsy/dd), PICERL, MITRE ATT&CK, Diamond Model,
  Kill Chain, syslog levels, biometric FAR/FRR/CER, nmap, Wireshark, tcpdump
- Domain 5: ISO 27701/31000, NIST RMF steps, RTO/RPO/MTTR/MTBF, EOL/EOSL,
  job rotation, mandatory vacations, MOU/MSA/BPA, COOP

All additions are surgical inserts into existing Key Concepts sections.
46 files changed, ~150 new bullet points, 225 new glossary entries.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: htlin222

content/domain-1-general-security/attack-vectors.md

@@ -46,6 +46,9 @@ An attack vector is the path or method a threat actor uses to gain unauthorized
   - SolarWinds-style attacks through trusted update mechanisms
 - **[[human-vectors|Human vectors]]** — social engineering exploiting human psychology
 - **[[attack-surface-management|Attack surface management]]** — continuously identifying and reducing exposure across all vectors
+- **Bluetooth-based vectors**
+  - **Bluejacking** — sending unsolicited messages to Bluetooth-enabled devices (annoying, not data theft)
+  - **Bluesnarfing** — unauthorized access to data on Bluetooth devices (contacts, emails, calendars)
 
 ## Exam Tips
 

content/domain-1-general-security/physical-security.md

@@ -39,6 +39,12 @@ Physical security encompasses the tangible controls that protect an organization
 - **[[secure-areas|Secure areas]]** — server rooms, data centers, wiring closets; require restricted access
 - **[[environmental-controls|Environmental controls]]** — fire suppression (wet pipe, dry pipe, clean agent), HVAC, humidity control
 - **[[faraday-cage|Faraday cage]]** — blocks electromagnetic signals; prevents eavesdropping and signal leakage
+- **USB data blocker** — device that blocks data pins on USB connections, allowing only power (prevents juice jacking)
+- **Juice jacking** — attack using compromised USB charging stations to steal data or install malware
+- **FM-200** — clean agent fire suppression system safe for use around electronic equipment; replaces older Halon systems
+- **Protected Distribution System (PDS)** — hardened conduit system for securing network cabling against tapping or interception
+- **Data destruction methods** — overwriting, degaussing (using magnetic fields to erase), physical destruction (shredding, incineration)
+- **Purging vs. sanitization** — purging removes data so it cannot be reconstructed; sanitization makes media suitable for reuse
 
 ## Exam Tips
 

content/domain-1-general-security/social-engineering.md

@@ -31,9 +31,10 @@ Social engineering is the art of manipulating people into performing actions or
 - **[[tailgatingpiggybacking|Tailgating/Piggybacking]]** — following an authorized person through a secured door
   - Tailgating = without their knowledge; Piggybacking = with their consent
 - **[[watering-hole-attack|Watering hole attack]]** — compromising a website frequently visited by the target group
-- **[[typosquatting|Typosquatting]]** — registering domains similar to legitimate ones to capture mistyped URLs
+- **[[typosquatting|Typosquatting]]** — also known as **URL hijacking**; registering domains similar to legitimate ones to capture mistyped URLs; relies on common typing errors
 - **[[brand-impersonation|Brand impersonation]]** — creating fake websites, emails, or social media profiles mimicking trusted brands
-- **[[influence-campaigns|Influence campaigns]]** — large-scale disinformation operations to manipulate public opinion
+- **[[influence-campaigns|Influence campaigns]]** — large-scale disinformation operations to manipulate public opinion; may include **hybrid warfare** combining cyber operations with disinformation
+- **Credential harvesting** — collecting usernames and passwords via fake login pages or forms, often delivered through phishing campaigns
 - **Psychological principles exploited**:
   - Authority, urgency, scarcity, social proof, likability, fear, intimidation, consensus
 

content/domain-1-general-security/threat-actors.md

@@ -45,6 +45,7 @@ Threat actors are individuals or groups that pose a risk to an organization's se
   - **Resources/Funding** — determines tools, persistence, and capabilities
   - **Intent/Motivation** — financial gain, espionage, disruption, ideology, revenge
 - **Attack surface** — the totality of points where an attacker can try to enter (see [[attack-vectors]])
+- **Wardriving** / **Warflying** — scanning for wireless networks from a moving vehicle or drone to identify vulnerable access points
 
 ## Exam Tips
 

content/domain-2-threats-vulnerabilities/application-attacks.md

@@ -31,6 +31,10 @@ Application attacks exploit vulnerabilities in software applications — particu
 - **[[resource-exhaustion|Resource exhaustion]]**: Consuming all available memory, CPU, disk, or connections to cause denial of service
 - **Injection attacks**: Inserting malicious input into application commands — covered in detail in [[injection-attacks]]
 - **[[server-side-request-forgery-ssrf|Server-Side Request Forgery (SSRF)]]**: Tricking the server into making requests to internal resources on behalf of the attacker
+- **[[xml-injection-xxe|XML injection]]** — inserting malicious XML content to manipulate XML parsers and data processing
+- **[[ldap-injection|LDAP injection]]** — exploiting web applications that construct LDAP queries from user input
+- **[[dll-injection|DLL injection]]** — injecting malicious Dynamic Link Libraries into running processes to execute arbitrary code
+- **[[pass-the-hash|Pass the hash]]** — using captured password hashes to authenticate without knowing the plaintext password
 
 ## Exam Tips
 

content/domain-2-threats-vulnerabilities/malware-types.md

@@ -32,6 +32,8 @@ Malware (malicious software) is any software intentionally designed to cause dam
 - **[[potentially-unwanted-programs-pups|Potentially Unwanted Programs (PUPs)]]**: Adware, toolbars, and bundled software that may not be strictly malicious but degrades security
 - **[[polymorphic-malware|Polymorphic malware]]**: Changes its code signature with each infection to evade signature-based detection
 - **[[metamorphic-malware|Metamorphic malware]]**: Completely rewrites its own code while maintaining functionality
+- **Adware** — software that automatically displays or downloads advertisements; may track browsing habits
+- **Cryptojacking** — unauthorized use of computing resources to mine cryptocurrency
 
 ## Exam Tips
 

content/domain-2-threats-vulnerabilities/network-attacks.md

@@ -30,6 +30,9 @@ Network attacks target the infrastructure, protocols, and communications that co
 - **[[amplification-attack|Amplification attack]]**: Using protocols like DNS, NTP, or memcached to amplify a small request into a massive response directed at the victim
 - **[[ip-spoofing|IP spoofing]]**: Forging the source IP address of packets to impersonate another system or hide the attacker's identity
 - **[[port-scanning|Port scanning]]**: Enumerating open ports and services on target systems (reconnaissance phase)
+- **[[bluetooth-attacks|Bluejacking]]** — sending unsolicited messages via Bluetooth (nuisance, not data theft)
+- **[[bluetooth-attacks|Bluesnarfing]]** — unauthorized access to data through Bluetooth connections (more serious than bluejacking)
+- **Broadcast storm** — excessive broadcast traffic overwhelming a network segment
 
 ## Exam Tips
 

content/domain-2-threats-vulnerabilities/vulnerability-types.md

@@ -31,6 +31,7 @@ Vulnerabilities are weaknesses in systems, software, processes, or configuration
 - **[[third-partysupply-chain-risks|Third-party/supply chain risks]]**: Vulnerabilities in vendor software, libraries, or dependencies (e.g., Log4Shell)
 - **[[human-factors|Human factors]]**: Lack of training, social engineering susceptibility, insider threats
 - **[[hardware-vulnerabilities|Hardware vulnerabilities]]**: Side-channel attacks, firmware flaws (Spectre, Meltdown), end-of-life hardware
+- **VM sprawl** — uncontrolled proliferation of virtual machines, increasing attack surface and management complexity
 
 ## Exam Tips
 

content/domain-3-security-architecture/cloud-security.md

@@ -35,6 +35,12 @@ Cloud security addresses the unique risks and shared responsibilities of deployi
 - **[[multitenancy-risks|Multitenancy risks]]** — data isolation between tenants; side-channel attacks; resource contention
 - **[[api-security|API security]]** — cloud services are API-driven; securing APIs is critical to cloud security
 - **[[secrets-management|Secrets management]]** — storing credentials, keys, and tokens securely in cloud environments
+- **Edge computing** — processing data near the source rather than in a centralized cloud data center
+- **Fog computing** — extends cloud computing to the network edge, providing local processing and storage
+- **VPC (Virtual Private Cloud)** — isolated virtual network within a public cloud provider
+- **Transit gateway** — centralized hub connecting multiple VPCs and on-premises networks
+- **Availability zones** — physically separate data centers within a cloud region for redundancy
+- **SWG (Secure Web Gateway)** — filters unwanted software and enforces corporate policy for web traffic
 
 ## Exam Tips
 

content/domain-3-security-architecture/data-protection.md

@@ -37,6 +37,7 @@ Data protection involves implementing controls to ensure that data remains confi
   - **Degaussing** — magnetic field destroys data on magnetic media; does not work on SSDs
   - **Physical destruction** — shredding, incineration, pulverizing
   - **Cryptographic erasure** — destroying the encryption key renders encrypted data unrecoverable
+- **Data minimization** — collecting and retaining only the minimum data necessary for the stated purpose
 
 ## Exam Tips