Sitting Duck
Noun · Slang & Abbreviations
Definitions
Something left exposed, undefended, or easy to hit. In engineering slang, a sitting duck is usually a service, credential, or process left vulnerable by weak controls or obvious predictability.
In plain English: An easy target because it is exposed or poorly protected.
Example: "The public admin endpoint with no rate limiting was a sitting duck once the team looked at it through an attacker mindset."