malicious activity goes undetected
a security incident that isn't detected or reported. as an example, occurs if an attack is active on the network but the nids does not raise an alert.
term for when a scan fails to find real vulnerabilities. leaves unidentified risk in the code.