Concept
Zero-day
A flaw attackers exploit before the vendor has a fix: defenders have had zero days to patch.
Zero-days are valuable because nothing stops them yet except other layers of defence. Once the vendor ships a patch, the race shifts: attackers reverse-engineer the fix to hit everyone who has not updated, so the days right after a patch are often the most dangerous.
Zero-day in the news
Recent stories that mention it.
Related
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
- ConceptKEV · Known Exploited Vulnerabilities catalogCISA's list of vulnerabilities with evidence of real-world exploitation.
- ConceptPatch TuesdayMicrosoft's monthly security update day, the second Tuesday of every month.
Plain-language explainers written by SecurityTabs, matched to stories by name. All terms