Breadth of blast radius describes how many devices, services, or accounts could be affected if one trusted control point is weakened. In cyber security, this matters because a single flaw in a centralized system can turn one compromise into many. A provisioning controller, identity service, update server, or admin console may have the power to change dozens or thousands of endpoints at once.
Attackers look for wide blast radius because it makes intrusion more efficient: one stolen key, abused session, or broken validation step can spread impact across an entire fleet. Defenders try to reduce that breadth with segmentation, least privilege, strong authentication, scoped credentials, and monitoring of high-impact actions. If a control point is compromised, limiting its reach can keep one failure from becoming a platform-wide incident.