1.4 Cyber Threats: Core Terminology★
PYQs5
- Which of the following is defined as an attempt to harm, damage or cause threat to a system or network? a) Digital crime b) Threats c) System hijacking d) Cyber attack → d) Cyber attack 2025-26 1M recent
- An act to injure, corrupt or threaten a system or network is characterised as ______. → Cyber attack 2023-24 1M recent
- An attempt to steal, spy, damage or destroy computer systems, networks or their associated information is known as ______. → Cyber attack 2022-23 1M recent
- What is the existence of a weakness in a system or network known as? → Vulnerability 2023-24 2022-23 1M recent
- Which of the following actions compromise cyber security? a) Vulnerability b) Attack c) Threat d) Exploit → c) Threat 2024-25 1M recent
A Server Nobody Updated
- Your college's results server hasn't been updated in three years.
- Its old software has a known hole, and every student's marks sit inside.
- Tonight, someone is scanning the internet for exactly such servers.
- The hole, the scanner, the break-in: security has a precise word for each.
Asset, Threat, Vulnerability and Attack PYQ 1M
Six terms describe every security situation: asset, vulnerability, threat, exploit, attack and risk.
- Asset: anything of value that must be protected: data, hardware, software, services, reputation.
- Example: the marks database.
- Vulnerability: the existence of a weakness in a system or network that can be used to cause harm.
- Comes from software bugs, wrong settings, weak passwords or human error (→ 2.3).
- Example: the unpatched server software.
- Threat: any possible danger that may exploit a vulnerability and harm an asset. It can be a person, a program or an event such as a flood.
- Example: the criminal group scanning for weak servers.
- Exploit: a piece of code or a technique that takes advantage of a specific vulnerability.
- Example: a ready-made attack script for that software flaw.
- Cyber attack: an attempt or act to steal, spy on, damage, destroy or threaten a computer system, network or its information.
- Example: the group runs the script, gets in and changes marks.
- Risk: the chance that a threat will exploit a vulnerability, together with the harm that would follow.
- Risk = threat × vulnerability × impact: if any one is zero, the risk is zero (→ 4.9).
- Example: high, because the flaw is public, attackers are active and marks are valuable.
flowchart TD
A["<b>Threat</b><br>(criminal group)"]:::amber --> B["finds a <b>vulnerability</b><br>(unpatched software)"]:::blue
B --> C["uses an <b>exploit</b><br>(attack script)"]:::amber
C --> D["<b>Attack</b><br>(break in, change marks)"]:::red
D --> E["<b>Asset</b> harmed<br>(marks database)"]:::red
classDef blue fill:#5b84d424,stroke:#5b84d480
classDef amber fill:#d6a24424,stroke:#d6a24480
classDef red fill:#d0707024,stroke:#d0707080Threat, vulnerability and attack compared
| Basis | Threat | Vulnerability | Attack |
|---|---|---|---|
| What it is | a possible danger | a weakness | the harmful act itself |
| State | potential, may happen | exists now in the system | happening or done |
| Control | can't be removed, only reduced | can be fixed (patching, settings) | can be blocked and detected |
| Example | ransomware gang | outdated Windows | files encrypted |
What "compromises" security
- A threat is the danger or action that can compromise security: it is what breaks confidentiality, integrity or availability (→ 1.3).
- A vulnerability is only the weak point, and an exploit is only the tool.
- An attack is a threat that has actually been carried out.
Categories of Threats
By source
- Internal vs external: from employees and contractors, or from outsiders.
- Natural vs human-made: floods, fires and earthquakes, or people and programs.
- Intentional vs accidental: a planned attack, or a mistake such as deleting a file or emailing the wrong person.
By actor
- Cyber criminals: attack for money (fraud, ransomware).
- Hacktivists: attack for a political or social cause (website defacement, leaks).
- Nation-states: spy on or sabotage other countries, often through long hidden campaigns called APTs (advanced persistent threats) (→ 1.5).
- Insiders: employees who misuse access, on purpose or by mistake.
- Script kiddies: beginners who use ready-made tools without understanding them (→ 2.1).
- Terrorists: attack to create fear.
By type
- Malware · social engineering and phishing · DoS/DDoS · data breaches · man-in-the-middle · APTs (each in Unit 2).
Current trends
- Ransomware sold as a service to anyone who pays.
- AI-written phishing messages and deepfake voice calls.
- Attacks through trusted software suppliers (supply-chain attacks).
- Attacks on cloud accounts, IoT devices and UPI users.
⚡ Quick recall
- Six terms? → asset · vulnerability · threat · exploit · attack · risk
- Vulnerability? → existence of a weakness in a system or network
- Threat? → possible danger that may exploit a vulnerability
- Exploit? → code or technique that uses a specific vulnerability
- Cyber attack? → attempt or act to steal, spy, damage, destroy or threaten a system or network
- Risk? → threat × vulnerability × impact
- Threat categories? → internal/external · natural/human · intentional/accidental · criminals, hacktivists, nation-states, insiders, script kiddies, terrorists
- 1M: weakness → vulnerability · attempt to harm → cyber attack · compromises security → threat