You now know what we protect. This lesson introduces what we protect it from: cyber threats.
What is it?
A cyber threat is any possible event that could harm your devices, data, networks, or identity. A threat is a possibility of harm — it has not happened yet, but it could.
Why is it important?
If you understand the threats you face, you can prepare for them. Defenders who know how attacks happen can put the right protections in the right places, instead of guessing.
How does it work?
Threats come from different sources and take different forms. It helps to separate the who from the what.
Select any component in the diagram to read what it does.
Text description of this diagram
A cyber threat is anything that could cause harm to your digital assets — from criminals to simple mistakes.
Who is behind threats?
- Cybercriminals — after money.
- Hacktivists — pushing a political or social cause.
- Nation-states — governments conducting spying or sabotage.
- Insiders — employees who misuse their access, sometimes by accident.
What forms do threats take?
- Malware (harmful software).
- Phishing (deceptive messages).
- Attacks that overload a service to knock it offline.
- Human mistakes, like a lost laptop or a weak password.
Not every threat is a hacker in a hoodie. A spilled coffee, a lost phone, or a mistyped command can also harm your data. Security plans for accidents too.
A real-world example
A company might face the threat that an employee clicks a fake invoice email. The threat is just a possibility — but because they recognised it, they trained staff and added email filtering. When the fake invoice finally arrived, it was caught.
Check what you learned
What is the difference between a threat and an actual attack?
A threat is a possibility of harm that has not happened yet; an attack is a threat that has been carried out.
Are all threats caused by hackers?
No. Threats also include accidents and mistakes, such as a lost device or a weak password.
Key takeaways
- A threat is a possible event that could cause harm.
- Threats come from criminals, activists, governments, and insiders.
- They take many forms — including simple human mistakes.