What is a "zero-day exploit"?

Question

Accepted Answer

An attack that exploits a previously unknown vulnerability for which no patch exists, giving defenders zero days to prepare. A zero-day exploit takes advantage of a previously unknown software vulnerability for which no security patch or fix exists. The term "zero-day" signifies that the software vendor has had zero days of awareness to develop and distribute a fix, leaving all users of the affected software vulnerable. Zero-day exploits are highly valued by cybercriminals, nation-state actors, and intelligence agencies because they can bypass all existing defenses. The discovery and responsible disclosure of zero-day vulnerabilities is a critical area of cybersecurity research.

A cyberattack that failed on day one describes an unsuccessful attack attempt, which bears no relation to the concept of exploiting an unpatched vulnerability - the "zero" in zero-day refers to the vendor's knowledge of the flaw, not the outcome of an attack. A security patch that must be applied within zero days of release describes an urgent patch management deadline, which reverses the meaning - patches are the solution to vulnerabilities, not the vulnerabilities themselves. Malware that deletes itself after zero days describes a self-destructing program, which is a different concept entirely from exploiting an unknown vulnerability.

Zero-day exploits are an advanced but essential topic on the Fundamentals of Cybersecurity exam. Students should understand the lifecycle of a zero-day (discovery, exploitation, disclosure, patching), the market for zero-day exploits (both legitimate bug bounty programs and illicit markets), the concept of the window of vulnerability, and defense strategies such as behavioral detection, application whitelisting, and defense in depth that can help mitigate unknown threats.

DSST Fundamentals of Cybersecurity: Question of the Day

Get a free DSST Fundamentals of Cybersecurity question every day

Ready for the full DSST Fundamentals of Cybersecurity? Earn 3 college credits.