3 ms·
> as most vulns are exploited before ever being reported. I don't think that's even remotely true. And given that it's not true, it's still a useful distincti
by jedberg 5y ago
> as most vulns are exploited before ever being reported.
I don't think that's even remotely true.
And given that it's not true, it's still a useful distinction. 0-day means an exploit that is being exploited before it was reported to the vendor, which is different than most exploits, which are reported to the vendor first.
- creeble 5y agoI guess it's true that most vulns are either reported to (or originate from) a vendor, and that these dominate the CVE db. But naturally, unless you are the vendor, you will likely not have heard of these. Otherwise, by definition, they would be zero-day vulns.