Explain the difference between a threat and a vulnerability.

Share with the class any first$-$hand experience$($s$)$ where you or your organization encountered an online threat. What was vulnerable? Was the threat mitigated?