What is a Zero-day?
Zero-days, told as a story about a crack in the wall that even the builder doesn't know about.
The wall was built by a builder.Any big wall has small cracks even the builder doesn't know about.
The thief found the crack first.The builder and the guards have no idea. Only the thief knows — and sometimes sells it to other thieves for a lot.
A zero-day is a crack the builder had zero days to fix.Count from the day the crack becomes known. Used before that, there's no patch to nail on.
You may not know the crack, but you can see what comes through it.With the dog barking, the hallway split, and one-room keys, one crack can't open the whole castle.
A patch nobody nails on fixes nothing.Zero-days are rare. Most break-ins come through cracks that already had a patch. Set a day to nail them on.
A zero-day = a crack the builder doesn't know about, found first by the thief and used before any patch exists.
Zero-day: the crack (vulnerability) + the way through (exploit) + the patch. Every crack gets a CVE number. They're rare and expensive — most incidents come through unpatched cracks (N-days).
When grown-ups say it
- Vulnerability
- The crack. A hole the builder left by mistake. Every big wall has some.
- Exploit
- How to get through the crack. A crack alone isn't enough — the thief needs the way through.
- Patch
- The patch board. The builder's fix; nailing it on is the castle's job. → fixing the open door
- CVE
- The crack's number. A name like CVE-2024-1234 for every crack, so the whole world says the same thing.
- N-day
- A crack with a patch nobody nailed on. Known for N days. Far more common than zero-days.
- Bug bounty
- A reward for finding cracks. So the good folks find them before the thieves do.
- Virtual patch
- A guard at the crack until the board arrives. The note checker or the poster-watcher covers that one crack.
- Defense in depth
- Many layers. So one crack never opens everything. → the castle that always asks