2:40 I would argue the threat is the vulnerability, and the threat actor is the attacker. Also, a threat could be an attacker or govt entity historically known to possess and make use of zero days. Meaning my answer would be all, the action of exploiting a vulnerability is a threat to our service, the vulnerability itself is the biggest threat as it is the weakness itself, but also advocate for the monitoring and understanding of adversaries themselves 🎉 hire meeeee
