An unattended system is a process or machine that runs without constant human supervision. It may be headless, automated, or remote-only, with no one watching its screen or actively approving each action. In cybersecurity, that matters because systems that are left alone often become invisible: operators may miss failures, unusual commands, stale credentials, or unexpected network activity.
Attackers often target unattended systems because they can be easier to manipulate than interactive ones. Examples include backup jobs, scheduled tasks, IoT devices, build servers, and kiosks. If an attacker gains access to one, they may persist quietly, change settings, or use it as a foothold into other systems. Defenders treat unattended systems carefully by limiting privileges, logging actions, patching regularly, and monitoring for changes. The key idea is simple: if no one is watching, the system still needs controls that assume it might be.