We are independent & ad-supported. We may earn a commission for purchases made through our links.
Advertiser Disclosure
Our website is an independent, advertising-supported platform. We provide our content free of charge to our readers, and to keep it that way, we rely on revenue generated through advertisements and affiliate partnerships. This means that when you click on certain links on our site and make a purchase, we may earn a commission. Learn more.
How We Make Money
We sustain our operations through affiliate commissions and advertising. If you click on an affiliate link and make a purchase, we may receive a commission from the merchant at no additional cost to you. We also display advertisements on our website, which help generate revenue to support our work and keep our content free for readers. Our editorial team operates independently of our advertising and affiliate partnerships to ensure that our content remains unbiased and focused on providing you with the best information and recommendations based on thorough research and honest evaluations. To remain transparent, we’ve provided a list of our current affiliate partners here.
Security

Our Promise to you

Founded in 2002, our company has been a trusted resource for readers seeking informative and engaging content. Our dedication to quality remains unwavering—and will never change. We follow a strict editorial policy, ensuring that our content is authored by highly qualified professionals and edited by subject matter experts. This guarantees that everything we publish is objective, accurate, and trustworthy.

Over the years, we've refined our approach to cover a wide range of topics, providing readers with reliable and practical advice to enhance their knowledge and skills. That's why millions of readers turn to us each year. Join us in celebrating the joy of learning, guided by standards you can trust.

What is a Zero Day Attack?

By Thursday Bram
Updated: May 16, 2024
Views: 44,388
Share

A zero day attack, also known as a zero hour attack, takes advantage of computer vulnerabilities that do not currently have a solution. Typically, a software company will discover a bug or problem with a piece of software after it has been released, and it will offer a patch — another piece of software meant to fix the original issue. A zero day attack will take advantage of that problem before a patch has been created. It is named zero day because it occurs before the first day the vulnerability is known.

In most cases, this type of attack will take advantage of a bug that neither the software’s creators nor users are aware of. In fact, this is precisely what malicious programmers hope to find. By finding software vulnerabilities before the software’s makers find them, a programmer can create a virus or worm that exploits that vulnerability and harms computer systems in a variety of ways.

Not every zero day attack truly occurs before software producers are aware of the vulnerability. Sometimes, producers learn of the vulnerability, but developing a patch can take time. Alternatively, software producers may sometimes hold off on releasing the patch because they do not want to inundate customers with numerous individual updates and, if the vulnerability is not particularly dangerous, multiple updates may be collected and released together as a package. Still, this approach can potentially expose users to an attack.

A zero day attack can be harmful to specific computers long after a patch has been created and the vulnerability has been closed. This is because many computer owners do not regularly update their software with patches made available by the software makers. Software companies recommend that users regularly check their sites for software patches, or bug fixes.

Many computer experts recommend two techniques to protect a computer system against a zero day attack. The first is enabling heuristic virus scanning, an option in anti-virus software to block currently unknown viruses and worms, because the typical attack is unknown until a large number of computers have been infected. The second is to use a firewall to protect a computer against online exploits.

Share
EasyTechJunkie is dedicated to providing accurate and trustworthy information. We carefully select reputable sources and employ a rigorous fact-checking process to maintain the highest standards. To learn more about our commitment to accuracy, read our editorial process.
Discussion Comments
By anon19401 — On Oct 12, 2008

To what extent can zero-day attacks be detected / prevented by existing approaches to network security?

Share
https://www.easytechjunkie.com/what-is-a-zero-day-attack.htm
Copy this link
EasyTechJunkie, in your inbox

Our latest articles, guides, and more, delivered daily.

EasyTechJunkie, in your inbox

Our latest articles, guides, and more, delivered daily.