Attacks are the actions taken by hackers to take advantage of security holes in an application. People often mix up “attacks” with “vulnerabilities,” but there is a key difference: a vulnerability is a weakness (a bug or a flaw), whereas an attack is the actual step an intruder takes to exploit it.