home

Zero day

Zero day

(also zero-day vulnerability)

Zero day definition

Zero day is a broad term that includes both vulnerabilities and exploits. A zero-day vulnerability is a flaw in software or hardware which is yet to be discovered by its developers. A zero-day exploit is when cybercriminals discover the vulnerability and abuse it for their own means.

Real zero day examples

• In 2010, a powerful computer worm called Stuxnet started exploiting the previously unknown Windows zero-day vulnerabilities. The worm caused enormous damage to the nuclear program of Iran and later was modified to target other facilities such as power plants and gas pipes.
• In 2014, criminals utilized a zero-day vulnerability to break into Sony’s network and steal data. They released incredibly sensitive information, like copies of upcoming movies, business deals, and Sony’s top management emails.

Stopping zero-day attacks

• Update your software.
• Stay informed about potential flaws in your software through vulnerability databases and bug bounty programs.
• Be wary of phishing scams.

Further reading

What is zero day?

Google Chrome zero-day 2022

Are governments using zero-day exploits?