A high-blast-radius change is a code, configuration, or infrastructure modification that can affect many users, services, or systems if it fails. The “blast radius” is the scope of damage a mistake can cause, so a larger radius means a higher-risk change. Examples include authentication logic, deployment pipelines, shared libraries, permission models, and core network settings.
In cyber security, these changes matter because a single defect can become an outage, a data exposure, or a path for attackers to widen access. Defenders treat them with extra controls: stricter human review, limited automation, staged rollout, testing in isolated environments, and faster rollback options. Attackers also target high-blast-radius areas because compromising one shared component can give them broad reach across many systems. That is why review workflows often separate routine edits from critical changes that need deeper security and operational scrutiny.