In short
A zero-day vulnerability is a software flaw unknown to the vendor or without an available fix, so attackers can exploit it before a patch exists.
Key takeaways
- Signature-based defenses can't detect exploits that haven't been seen before.
- Layered defenses, behavior-based detection and segmentation limit the damage.
- Once a patch is released, applying it quickly is critical.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
To send a confidential message that only the intended recipient can read, which key should the sender use to encrypt it?