In cyber security, a false positive refers to an alarm or vulnerability that has been wrongly identified, usually as a result of unforeseen behavior prompted by a test scenario.