Security Mindset
Vulnerability
Also: security flaw
A weakness in code, configuration or process that could be used to cause harm.
In more detail
A vulnerability exists whether or not anyone knows about it. It becomes an incident only if someone can build an exploit, reach the system and find something valuable. Some weaknesses are design-level, like the way a model treats text it reads, and cannot be patched in the usual way.
