An attack vector describes the way in, not the target. Knowing your own vectors lets you close them one by one; not knowing them means defending blind.<\/p>\n
Technical vectors come from software, configuration and exposed services. Human vectors exploit trust, time pressure and routine. The third route runs through partners and suppliers \u2013 an entry the organisation does not control itself.<\/p>\n","protected":false},"featured_media":0,"template":"","glossary_intl_set":[],"glossary_intl_cluster":[392],"glossary_intl_theme":[],"class_list":["post-29151","glossary_intl","type-glossary_intl","status-publish","hentry","glossary_intl_cluster-cybersecurity"],"acf":{"card_description":"The route an attacker takes into a system.","nav_theme":"","nav_subtheme":"","dataset_version":"","term_inline":"","term_plural":false,"heading_overrides":null,"synonyms":null,"lead_definition":"An attack vector is the concrete route an attacker takes into a system \u2013 an exposed interface, unpatched software, a convincing email or a stolen password. The sum of all attack vectors makes up an organisation's attack surface.","at_a_glance":[{"bullet":"An attack vector is the route<\/b> in, not the target."},{"bullet":"The sum of all vectors is the attack surface<\/b>."},{"bullet":"The most common vector is still a person, not a machine."}],"intro_answer":"","steps_answer":"","steps":null,"examples":[{"example":"An unpatched VPN gateway allows entry without the victim clicking anything at all."},{"example":"A compromised library in the supply chain carries malicious code into your own application."}],"misconception":[{"myth":"\u201cWe have a firewall, so the vectors are closed.\u201d","reality":"A firewall closes network vectors. Phishing, the supply chain and misconfiguration walk straight past it."}],"faq":[{"q":"What is the difference between an attack vector and an attack surface?","a":"An attack vector is a single route in; the attack surface is the sum of all such routes. ENISA<\/a> maintains an overview of typical vectors."},{"q":"Can every attack vector be closed?","a":"No. The goal is to reduce the number of vectors and monitor what remains \u2013 which is how the BSI IT-Grundschutz<\/a> frames it too."}],"compare_answer":"","compare":null,"variants":null,"signals_answer":"","signals":null,"protect_answer":"","prevent":null,"incident":null,"related_terms":null,"pillar_link":null,"sources":[{"publisher":"","name":"ENISA Threat Landscape","url":"https:\/\/www.enisa.europa.eu\/publications\/enisa-threat-landscape-2024","doc_type":"","group":"used"},{"publisher":"","name":"BSI IT-Grundschutz","url":"https:\/\/www.bsi.bund.de\/DE\/Themen\/Unternehmen-und-Organisationen\/Standards-und-Zertifizierung\/IT-Grundschutz\/it-grundschutz_node.html","doc_type":"","group":"used"}],"reviewer":{"name":"Jakub Novak","qualification":"IT security","date":"2026-06-01"},"disclaimer":""},"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t