Cybersecurity discussions about attack vectors and attack surfaces sometimes use these two terms interchangeably - this article covers the subtle difference.