LearnViz CompSci
Home / Learn / Security & Cryptography / Threats and Vulnerabilities

Beginner Topic 2 of 51 Security & Cryptography

Threats and Vulnerabilities

Potential dangers and the weaknesses they exploit.

How it works

A vulnerability is a weakness in a system, such as a software bug, misconfiguration or weak process, and a threat is something that can exploit it, such as an attacker, malware or even a natural disaster. Risk combines the likelihood of exploitation and the impact. Attackers use an attack surface made of entry points, and defenders reduce it, patch known flaws tracked with CVE identifiers and scored with CVSS, and use layered controls.

Step-by-step walkthrough

  1. A vulnerability is a weakness, such as unpatched software.
  2. A threat is someone or something that could use it.
  3. The exploit turns the weakness into a breach.
  4. The impact is the damage, such as stolen data.
  5. Risk is likelihood times impact, so patch and reduce exposure.

Where it is used

Security teams run vulnerability scans, maintain asset inventories and prioritize patches based on exploitability and business impact.

Common pitfall

Treating every vulnerability as equally urgent overwhelms teams, while ignoring low-scored ones chained together can enable serious attacks. Unknown assets are unpatched assets. Zero-day flaws have no fix yet, so defense in depth matters. Prioritize by exposure and exploitation, and verify that fixes were actually applied.

Where it fits in the course

Threats and Vulnerabilities is topic 2 of 51 in Security & Cryptography, rated Beginner. It follows CIA Triad. The next topic is Passwords and Hashing.

Practice and explore

How to study this topic

  1. Read the explanation above and restate the definition in your own words.
  2. Open the interactive lesson and answer its mini quiz.
  3. Read the common pitfall, then write a short example that avoids it.
  4. Check your understanding in the Security & Cryptography quiz, and revisit the topic if you miss a question.

Frequently asked questions

What is Threats and Vulnerabilities?
Potential dangers and the weaknesses they exploit. It belongs to Security & Cryptography and is a beginner-level topic.
Where do people use Threats and Vulnerabilities?
Security teams run vulnerability scans, maintain asset inventories and prioritize patches based on exploitability and business impact.
What is the most common mistake with Threats and Vulnerabilities?
Treating every vulnerability as equally urgent overwhelms teams, while ignoring low-scored ones chained together can enable serious attacks.
What should I learn before this topic?
Start with CIA Triad, the topic just before it in Security & Cryptography.
How can I practice it?
Answer the mini quiz in the interactive lesson, then take the Security & Cryptography quiz.
Is Threats and Vulnerabilities hard to learn?
It is a Beginner topic, so it works as an entry point. If the terms are new, read the explanation twice and try the visualizer before the quiz.
How long does it take to learn Threats and Vulnerabilities?
Most learners can read the explanation and finish the interactive lesson in under an hour. Fluency comes from applying the idea, so plan a few short practice sessions with the quiz.
Which topics are related to Threats and Vulnerabilities?
CIA Triad, Passwords and Hashing, Salting are closely connected. The full list is in the related topics section of this page.
What should I study after Threats and Vulnerabilities?
Continue with Passwords and Hashing, the next topic in Security & Cryptography.

Related topics