Vocabulary · Free lesson
Suspicious or confirmed? Report security evidence clearly
A fictional alert shows twelve failed login attempts. That is evidence of failed attempts, not proof that someone successfully entered the account.
Professor Scott MendozaThe short answer
Suspicious means there is a reason to investigate. Confirmed means the specific fact has been established. “Unauthorized access has not been confirmed” does not mean “No unauthorized access occurred.”
Confirm the observation; qualify the interpretation.
You can report the count directly: “The log shows twelve failed attempts.” Use possible or may for an interpretation that is still being checked. Name exactly what is confirmed: confirmed failed attempts and confirmed unauthorized access are different claims.
Keep the evidence and conclusion separate
The log shows twelve failed login attempts.
These attempts may indicate suspicious activity. Unauthorized access has not been confirmed.
Not confirmed leaves a question open. It does not establish the opposite.
Build an accurate update
State the evidence
We detected repeated failed login attempts.
State the limit
We have not yet confirmed unauthorized access.
Try it now
Match the wording to the evidence
Read all answers and explanations
The only evidence is twelve failed login attempts. Which update is supported?
The log shows twelve failed login attempts.The log establishes failed attempts. It does not establish successful access or prove that the account is safe.
What does “Unauthorized access has not been confirmed” tell the reader?
The available evidence has not established unauthorized access.Not confirmed describes the current evidence status. It is not the same as disproved.
The investigation has now established that an unauthorized person accessed the account. Which wording fits?
We have confirmed unauthorized access.The new evidence supports confirmed access. Update the wording when the evidence changes.
Put it into practice
Repair an overconfident alert summary
The log confirms six failed attempts. The team is investigating; successful unauthorized access has not been established. Choose an accurate internal update.
We have confirmed a successful break-in, so the account must be compromised.
See a model answer
The log shows six failed login attempts. We are investigating; unauthorized access has not been confirmed.
Other wording can work if it preserves the known fact and the open question.
A little more clarity
Common questions
A few useful details before you move on.
Can I say suspected unauthorized access?
Yes, when there is a basis for that suspicion. Suspected labels an interpretation being investigated; it does not confirm it. State the supporting observation too.
We are investigating suspected unauthorized access after an unusual alert.
What should I name after “confirmed”?
Name the exact fact that has been verified. Confirming that an alert occurred is different from confirming unauthorized access. Avoid a broad “confirmed incident” claim if only the alert itself has been checked.
Take it into your day
A suspicious sign can be real even while the explanation remains unconfirmed.
English for Careers · Coming Soon
Practice clear security-team communication.
English for Cybersecurity Analysts: Career Simulation is coming soon, with planned scenarios involving alert reviews, incident updates and team handoffs.
Get launch updatesCybersecurity Analysts · Career Simulation
Your next step · Available on Udemy
Build clearer sentences for work.
The available English Grammar and English Speaking Master Course develops sentence-building, vocabulary and business-communication foundations. It is a broader English course, not this specialist career simulation.
Explore the course English Master Course: English Grammar and English Speaking