Security Operations · Foundational

Threat Vector

The path or means by which a threat actor gains access to a target, such as email, removable media or vulnerable software.

Definition

Also called an attack vector, the threat vector describes how an attack is delivered. Common vectors include message-based (email, SMS, instant messaging), image and file-based, voice calls, removable devices, vulnerable software, unsupported systems, unsecured networks, open service ports, default credentials and the supply chain. Reducing vectors shrinks the attack surface.

Related terms