A zero-day vulnerability is a flaw unknown to the vendor, meaning defenders have zero days to fix it before it’s exploited. Attackers use them to stay one step ahead of security systems.
Why It Matters
- Gives attackers the advantage of surprise.
- Often sold for millions on underground markets.
- Widely used in state-sponsored cyber operations.
Real Example
The WhatsApp flaw patched in August 2025 was a zero-day actively being exploited.
Ratings
- ⚠️ Risk: ⭐⭐⭐⭐⭐
- 🛠 Exploitation Uses: ⭐⭐⭐⭐
- 💻 Technical Difficulty: ⭐⭐⭐⭐⭐
