A threat is anything that could cause harm to an organization’s systems, data, or operations. In cybersecurity, a threat may be a malicious actor, malware, an insider, a misconfiguration, or even an accidental event such as human error or power loss. A threat becomes important when it has a path to exploit a weakness and create real damage.
Threats matter because they help defenders decide what to protect first. During risk assessment, teams map threats to assets and vulnerabilities to estimate likelihood and business impact. For example, ransomware is a threat to file servers, phishing is a threat to user accounts, and credential stuffing is a threat to public-facing logins. Defenses such as patching, segmentation, monitoring, and multi-factor authentication are designed to reduce the chance that threats succeed or to limit the harm if they do.