// THREAT DETECTION AND DATA PRIVACY TERM

Zero-Day Exploit

A zero-day exploit is a cyberattack that takes advantage of a previously unknown software vulnerability that the vendor has not yet patched. This means there are "zero days" for the developer to create a fix before the attack occurs.

TECHNICAL DEFINITION

A zero-day exploit leverages a critical, unpatched software vulnerability (zero-day vulnerability) unknown to the vendor and security community, enabling attackers to compromise systems before a patch is available and often bypass traditional security defenses due to its novelty.

BACKGROUND

A zero-day is a vulnerability or security hole in a computer system unknown to its developers or anyone capable of mitigating it. Until the vulnerability is remedied, threat actors can exploit it in a zero-day exploit, or zero-day attack.

READ MORE ON WIKIPEDIA

SYNONYMS & ALIASES

  • 0-day exploit
  • unpatched vulnerability exploit
  • novel exploit
  • unknown exploit

USAGE NOTE

Zero-day exploits are highly prized by attackers and nation-state actors due to their effectiveness and stealth, making them a significant threat.

DEVELOPERS

Organizations developing technology related to Zero-Day Exploit.

  • Google Project Zero

    A team of security analysts employed by Google to find zero-day vulnerabilities in software and report them responsibly, contributing to overall internet security.

  • Mandiant (Google Cloud)

    A leading cybersecurity firm specializing in incident response, threat intelligence, and vulnerability analysis, often dealing with advanced persistent threats that leverage zero-day exploits.

  • CrowdStrike

    Offers cloud-native endpoint protection, threat intelligence, and proactively defends against sophisticated attacks, including those using zero-day exploits, through its Falcon platform.

  • Palo Alto Networks

    Provides advanced cybersecurity platforms that include next-generation firewalls and cloud security services designed to prevent unknown threats, including zero-day attacks, using machine learning.

  • Microsoft Security Response Center (MSRC)

    Responsible for investigating all security vulnerability reports concerning Microsoft products and services, coordinating the release of patches, and performing research to prevent zero-day exploits.

  • National Security Agency (NSA)

    A U.S. government intelligence agency involved in both offensive and defensive cybersecurity operations, including vulnerability research and developing countermeasures against zero-day exploits.

  • Cybersecurity and Infrastructure Security Agency (CISA)

    A U.S. federal agency focused on protecting critical infrastructure from cyber threats, including responding to and mitigating risks posed by zero-day vulnerabilities through threat intelligence and coordination.

  • Zerodium

    A company that acquires and brokers high-value zero-day exploits from security researchers for government clients, demonstrating the market for such vulnerabilities.

RELATED TERMS IN THREATS & ATTACKS