Caught first by researchers
An outside researcher found and disclosed the path to harm before anyone exploited it. The operator's own controls did not catch it.
Glossary group: Outcome statesAnchor:
/glossary/#caught-first-by-researchersSee also · Outcome states
- Ended in harm
- A consequential action completed and caused loss: injury, death, data destroyed or exfiltrated, money moved, service lost.
- Stopped by the operator's control
- A control the operator had in place stopped the action before harm: a fail-safe, a halt and handoff, a kill switch.
- Blocked
- An adversary attempted the action and a control defeated it.
- Pending
- The outcome is not yet known: a case in court, an investigation open, a dispute unresolved.
How to cite. Terms in the Register's vocabulary have a stable address: this page, or the anchor /glossary/#caught-first-by-researchers on the full glossary. Control definitions are the canonical ones in the controls file; everything else follows schema v0.4.
The full glossary · Methodology · Check a deployment ranks every control against the cases that match your profile.