The other is, what qualifies a threat as 'credible'?
Anyone who knows the answer to that question will not be explaining it to you on a public website.
There are people who specialise in assessing security threats. You won't hear about most of them because the vast majority are determined to be hoaxes.