# Zero-day vulnerability

Concept · [Cloud, hosting and security](https://ecosystem.samcarlton.com/cloud)

Also called: zero-day, zero day, 0-day, zero-day exploit

A security flaw that attackers know about before the software's maker has a fix, so defenders have had zero days to patch it.

**For example:** A zero-day in a popular file-sharing tool lets attackers in until the vendor [releases](https://ecosystem.samcarlton.com/deployment) an emergency patch.

## Connects to (5)

- [Encryption](https://ecosystem.samcarlton.com/encryption): Scrambling data with a key so only someone with the right key can read it.
- [SOC 2](https://ecosystem.samcarlton.com/soc-2): An examination of how a service company protects customer data.
- [Cyber liability insurance](https://ecosystem.samcarlton.com/cyber-liability-insurance): Insurance that helps pay the costs of a data breach or cyberattack, such as investigation, customer notification, legal costs and recovery.
- [Key rotation](https://ecosystem.samcarlton.com/key-rotation): Replacing passwords, API keys and other secrets on a schedule or after a possible leak, so an old stolen key stops working.
- [Palo Alto Networks](https://ecosystem.samcarlton.com/palo-alto-networks): A cybersecurity company that sells firewalls and security software to businesses, schools and governments.

Map view: https://ecosystem.samcarlton.com/zero-day-vulnerability