security//zero-day

A zero-day is a vulnerability for which defenders do not yet have an effective fix available, commonly because the responsible vendor or operator did not know about it before disclosure or exploitation.

A zero-day is a vulnerability for which defenders do not yet have an effective fix available, commonly because the responsible vendor or operator did not know about it before disclosure or exploitation.

The label describes defender readiness, not supernatural technical difficulty. A simple bug can be a zero-day; an intricate exploit against a long-patched vulnerability is not. Once a patch and detection knowledge spread, the strategic advantage decays even though unpatched systems may remain exposed.

Its value comes from asymmetry: the attacker has a map before the defender knows there is terrain.