SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/tech-zero-day-unknown

What makes an attack a zero-day attack?

It exploits a previously unknown vulnerability.

Start playing free

  1. It lasts exactly one day
  2. It targets a new computer
  3. It exploits an unknown flaw ✔

Why: A zero-day attack uses a flaw that defenders or the vendor did not previously know about. Existing patches cannot remove a vulnerability that has not yet been discovered and fixed.

Huh, didn't know that: Behavior monitoring and isolation can reduce risk even when no patch exists yet.

The dad joke
The zero-day flaw arrived before its calendar invitation.
Like this card?
Play the game

References

Answer: It exploits an unknown flaw. A zero-day attack uses a flaw that defenders or the vendor did not previously know about. Existing patches cannot remove a vulnerability that has not yet been discovered and fixed.

  1. NIST CSRC Zero-Day Attack Glossary csrc.nist.gov/glossary/term/zero_day_attack
    An attack that exploits a previously unknown hardware, firmware, or software vulnerability.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhich three goals form the CIA triad?Security & PrivacyWhich password property most directly increases resistance to guessing?Security & PrivacyWhat does current NIST guidance say about password composition rules?

That's stuff everyone should know.