A risk hotspot is any asset, path, or control point where exposure, weak protection, or high business value makes compromise more likely than elsewhere. It is not the same as a vulnerability alone: a hotspot combines technical weakness with context, such as internet reachability, privileged access, poor monitoring, or an important service that attackers would especially want to reach.
In cyber security, identifying hotspots helps teams prioritize limited defensive effort. Attackers often look for these places because they offer the best return on effort: a forgotten login portal, a public API with broad permissions, an unreviewed cloud bucket, or a vendor connection that extends trust too far. Defenders use risk-hotspot analysis to guide continuous discovery, access review, segmentation, and hardening. The goal is to reduce the number of attractive targets and close the gaps that are easiest to probe but hardest to notice.