Risks, threats, and vulnerabilities found in the Workstation Domain

What are some risks, threats, and vulnerabilities commonly found in the Workstation Domain that must be mitigated through a layered security strategy?