2.5 Cybersecurity Threats

Types of Threats

A threat is any circumstance that could cause harm to a system. Malware (viruses, worms, ransomware, spyware) damages or exploits systems. Social engineering manipulates people into revealing information (phishing, pretexting). Denial-of-service (DoS) attacks overwhelm systems to disrupt availability. Threats can come from insiders, hackers, or even natural disasters.

Threat Actors & Motives

Threat actors are individuals or groups who carry out attacks — including hackers, hacktivists, script kiddies, insider threats, and state-sponsored actors. Motives vary: financial gain, political activism, revenge, curiosity, or espionage. Understanding actor motives helps predict likely targets and attack methods.

Vulnerabilities vs. Exploits vs. Risk

A vulnerability is a weakness in a system (e.g., unpatched software). An exploit is the method used to take advantage of that vulnerability. Risk is the potential for loss when a threat exploits a vulnerability, often expressed as risk = likelihood × impact. Reducing any of these factors lowers overall security risk.

Key terms

Threat

Any circumstance or event with the potential to cause harm to a system or data.

Vulnerability

A weakness in a system that could be exploited by a threat actor.

Exploit

The specific method or code used to take advantage of a vulnerability.

Social engineering

Manipulating people psychologically to gain confidential information or access.

Risk

The potential for loss or damage, often calculated as likelihood × impact.

Try an AP-style question

Which is a natural (environmental) threat to IT systems?

1. A SQL injection
2. A disgruntled employee
3. A flood in the data center
4. A phishing email