A zero-day attack (also referred to as Day Zero) is an attack that exploits a potentially serious hardware, firmware, or software security weakness that the vendor or developer may be unaware of. Until mitigated, hackers can exploit the zero-day attack vulnerability to adversely affect programs, data, IoT devices or a network.
The term zero-day is applied to the vulnerabilities that allowed the hacking, and to the number of days the vendor has had to fix them. A zero-day attack gets its name from the number of days the software developer has known about the problem. Once the vendor learns of the vulnerability, they develop patches or advise workarounds to mitigate it.
Watch this Radware Minute episode with Radware’s Uri Dorot to learn what a Zero-Day Attack is, and why it is important to use application protection solutions that can detect anomalous behavior and block Zero-Day attacks.