zero-day exploit
Unknown software weakness
A zero-day exploit is an attack that takes advantage of a software vulnerability before developers know it exists or have released a fix.
The "zero days" refers to the time available to patch the flaw—none.
These exploits are prized by hackers and intelligence agencies because targets have no defense: The breach used a zero-day exploit in the browser.
Also called simply a zero-day.
Malicious digital intrusion
- malwareHarmful computer programs
- intrusionUnauthorized entry into space
- breachBreaking of agreement
- backdoorHidden bypass mechanism
rootkit · spyware · cyberespionage · black hat · cybercrime · payload · privilege escalation · remote access
Missing corrective updates
- security holeSoftware flaw enabling unauthorized access
- buffer overflowExceeding allocated memory bounds
- race conditionOutcome depends on timing
- proof of conceptDemonstration of feasibility
weaponization · disclosure · bug bounty · fuzzing · reverse engineering
Below ground or countercultural
- dark webEncrypted, unindexed online networks
- brokerTransaction intermediary for hire
- auctionCompetitive public sale
- priceMonetary value assigned
arms dealer · stockpiling · hoarding · gray market · cyber weapons · trade · valuation · exclusive
Material covering damage
- mitigationReduction of severity
- detectionAct of finding something
- signatureHandwritten name for verification
- heuristicsPractical problem-solving shortcuts
behavioral analysis · sandboxing · forensics · containment · remediation · workaround · access control · monitoring
cyberattack
Malicious digital intrusion
backdoor · rootkit · spyware · cyberespionage · black hat · cybercrime · payload · privilege escalation · remote access · nation-state
unpatched
Missing corrective updates
- security holeSoftware flaw enabling unauthorized access
- buffer overflowExceeding allocated memory bounds
- race conditionOutcome depends on timing
proof of concept · weaponization · disclosure · bug bounty · fuzzing · reverse engineering
underground
Below ground or countercultural
- dark webEncrypted, unindexed online networks
- brokerTransaction intermediary for hire
- auctionCompetitive public sale
price · arms dealer · stockpiling · hoarding · gray market · cyber weapons · trade · valuation · exclusive · premium
patch
Material covering damage
- mitigationReduction of severity
- detectionAct of finding something
- signatureHandwritten name for verification
heuristics · behavioral analysis · sandboxing · forensics · containment · remediation · workaround · access control · monitoring