Tools / Cyber Security Interview Questions
What is a Zero-Day Vulnerability?
A zero-day vulnerability is a security flaw that's unknown to the vendor and has no available patch, meaning defenders have had zero days to fix it before it can be exploited.
Attackers who discover such a flaw can build a zero-day exploit and use it before anyone else even knows the weakness exists, which makes these attacks especially hard to detect with signature-based tools.
- Discovered by researchers, attackers, or accidentally by users
- Sold on underground markets or reported responsibly to vendors
- Patched once the vendor releases a fix, after which it's no longer a zero-day
Behavioral monitoring, network segmentation, and rapid patch management are the main mitigations since signature-based defenses can't catch what they've never seen.
Why are zero-day vulnerabilities hard to detect?
What happens to a flaw once the vendor releases a fix?
More Related questions...
