Feedback exposure is repeated contact with responses, reactions, or signals from other users or from a digital system. In cyber security, those signals can become an information channel: a login error, a read receipt, a “like,” a rejection, or a ranking change may reveal whether an account exists, whether a guess was correct, or how a user behaved. Even small signals matter when they are repeated many times.
Attackers use feedback exposure to refine phishing, credential stuffing, and account enumeration. For example, different error messages or timing patterns can confirm valid usernames or password guesses. Social platforms and messaging apps can also expose behavioral feedback that helps attackers profile targets. Defenders reduce this risk by making responses consistent, limiting retries, rate limiting, hiding sensitive status signals, and avoiding overly detailed error messages. In short, feedback exposure is about controlling what the system tells users and what it accidentally tells adversaries.