A possible danger that might exploit a vulnerability to breach security and thus cause possible harm. The term is ambiguous, as it can refer to a threatening circumstance, an entity capable of causing harm (threat entity), or the actual event that may cause harm (threat event). Therefore, we also introduce the more specific concepts: