- improper database validation
- older component not tested against configuration change
- uncontrolled automation DOS
- incompletely distributed secrets