3 ms·

So then every exploit is a zero day?

• verroq 6y ago
  They all begin as a zero day.
  • tremon 6y ago
    Not true, some exploits are written by examining the holes fixed by a vendor security patch, then writing an exploit to target the systems that haven't been patched yet. Those are not zero-day exploits.
    • verroq 6y ago
      Usually we say vulnerabilities are 0-days instead of 0-day exploits.
• albntomat0 6y ago
  Every one that is initially found and used by an attacker, up until it is detected. The exploit was a 0-day at one point in time. Furthermore, I'd argue that the perspective of the one talking also matters. If Microsoft etc know about it, but haven't patched it or made anything public, it's definitely a 0-day if used against me, as I haven't had any opportunity to defend against it.