John, a security analyst working for an organization, found a critical vulnerability on the organization's...

In CEH v13 Module 01: Introduction to Ethical Hacking, Gray Hat hackers are described as those who operate between ethical and unethical lines:

Gray Hat Characteristics:

Discover vulnerabilities without permission.

May explore or exploit them without malicious intent, but also without authorization.

May or may not disclose them after exploration.

Not fully black hat (malicious), nor white hat (authorized and ethical).

In this case, John explored sensitive employee data without authorization, even though he worked for the organization. That behavior places him in the gray hat category.

Option Clarification:

A. Cybercriminal: Generally linked to criminal activities for gain.

B. Black hat: Unauthorized access with malicious or financial intent.

C. White hat: Authorized ethical hackers.

D. Gray hat: Correct – Unauthorized, curious access without immediate harm.