Zero-Day Attack Glossary Definition

A zero-day (or zero-hour or day zero) attack is a computer threat that attempts to manipulate the computer application vulnerabilities that are undisclosed to the software developer. Zero-day exploits is the actual code that can use a security hole to carry out an attack. These exploits are used or shared by attackers before the software developer knows about the vulnerability.

See also: Zero-day.

In security and compliance work, this term helps teams describe controls, risks, identity practices, standards, audits, or protective technologies. It is relevant when managing access, reducing exposure, documenting safeguards, or demonstrating accountability.