A security vulnerability the vendor does not yet know about or has not yet fixed, and the attack that uses it.
NIST defines a zero-day attack as one that uses a vulnerability the vendor does not yet know about or for which no patch has been released. NIST CSRC
The vulnerability remains dangerous after a patch is released: exploit code spreads quickly for systems that are not updated. CISA lists actively exploited vulnerabilities in a separate catalog. CISA
The attacker finds it themselves or buys it. MITRE ATT&CK
Exploit code that uses the vulnerability is prepared. MITRE ATT&CK
It is used in targeted attacks, then in broader campaigns. MITRE ATT&CK
Fortinet reported that CVE-2024-21412, which bypasses the Windows SmartScreen warning, was used by Water Hydra, Lumma Stealer and Meduza Stealer, and that the campaign targeted North America, Spain and Thailand. Fortinet
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.
We use cookies to ensure proper operation of our website, analyze usage, and deliver relevant content and advertisements. You can manage your preferences at any time. Cookie Policy