A party, including an insider, who acts with malicious intent to compromise a system.
Sources:
NIST SP 800-63-3
under Attacker
A person who seeks to exploit potential vulnerabilities of a system.
Sources:
NIST SP 800-188
person seeking to exploit potential vulnerabilities of a system
Sources:
NISTIR 8053