Zero-day
Undisclosed, exploitable vulnerabilities prioritised by active exploitation.
Short answer: A zero-day is a vulnerability unknown to the vendor, leaving no patch at exploit time. Defenders prioritise by exploitation evidence, exploitability and asset exposure.
Evidence: CISA KEV · NVD · Vendor advisories · Human reviewed
Definition
A zero-day is a vulnerability unknown to the vendor, leaving no patch at exploit time. Defenders prioritise by exploitation evidence, exploitability and asset exposure.
Major Entities
- CVE — CVE-2023-34362 (MOVEit)
- CVE CVE-2021-44228 — CVE-2021-44228 (Log4Shell)
Timeline
- — Rise in edge-device zero-day chains
- — CISA KEV drives patch cadence
Latest Intelligence
- KEV additions for active exploits
- In-the-wild exploit reporting
Evidence & Sources
CISA KEV · NVD · Vendor advisories · NVD · CISA KEV · MITRE ATT&CK
Related Intelligence
- Threat actor: State Backed exploit brokers
- Threat actor: Commodity exploit kits
- Campaign: Edge Device zero Day chains
- Campaign: Email gateway exploitation
- Research: KEV prioritisation frameworks
- Research: Weaponisation timelines
Next Actions
Part of the OpenTrojan Security Knowledge Hub 2.0: Ransomware · Malware · Threat Intelligence · Vulnerability Management · Cloud Security · Identity Security · Supply Chain · Incident Response · Nation State Threats