Zero-day Vulnerabilities

What is a key characteristic of vulnerabilities in applications and operating systems?

• They are always immediately patched upon discovery.

• They are typically well-documented before being found.

• They often exist but haven't been identified yet.

• They only affect outdated software versions.

Who are the two main groups that actively search for vulnerabilities in software and systems?

• Software developers and end-users.

• Researchers (good guys) and attackers.

• Government agencies and antivirus companies.

• Hardware manufacturers and network administrators.

Are you enjoying the video lesson?

• Yes

• No

What is a "zero-day attack"?

• An attack that occurs on the same day a patch is released.

• An attack that exploits a known vulnerability for which a patch is available.

• An attack that exploits an unknown vulnerability for which no patch or mitigation exists.

• An attack that targets systems with zero security measures in place.

Why are zero-day attacks particularly difficult to defend against?

• They are always launched from untraceable locations.

• The vendor is unaware of the vulnerability, so no fix exists.

• They require specialized hardware to detect.

• They only affect systems that are offline.

What is the purpose of the Common Vulnerabilities and Exposures (CVE) website?

• To provide software downloads for patching vulnerabilities.

• To list and track publicly known cybersecurity vulnerabilities.

• To offer training courses on ethical hacking.

• To sell cybersecurity insurance policies.