---
id: 2258
title: "[Guest Blog] The Difference Between Threats, Threat Actors, Vulnerabilities, and Risks"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/guest-blog-the-difference-between-threats-threat-actors-vulnerabilities-and-risks/"
published_at: "2019-02-07T00:00:00Z"
tags: ["appsec", "risk-management", "bugcrowd", "terminology", "threat-modeling", "daniel-miessler"]
phying_url: "https://phying.com/item/2258"
lang: en
---

# [Guest Blog] The Difference Between Threats, Threat Actors, Vulnerabilities, and Risks

## Summary

Daniel Miessler untangles threat modeling terms: threats are negative events, threat actors their initiators, vulnerabilities system weaknesses, and risk a function of likelihood and impact.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2019-02-07T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/guest-blog-the-difference-between-threats-threat-actors-vulnerabilities-and-risks/
- **Phying News:** https://phying.com/item/2258