Zero-day vulnerabilities: Zero-day vulnerabilities are security flaws or weaknesses discovered by hackers that have not been thoroughly addressed by the security community.
There are two major reasons systems are affected by these types of vulnerabilities:
- The necessary delay between the discovery of a new type of malicious code and the issuance of patches and antivirus updates. This is known as the window of vulnerability.
- Slowness in applying updates on the part of system administrators.
The existence of zero-day vulnerabilities makes it critical that you have a defense-in-depth approach to cybersecurity that incorporates a varied set of overlapping security controls. These could include a strong patch management programs, current anti-malware and antivirus software, configuration management systems, application control systems, web and content filtering systems, and other related protections mechanism.