A vulnerability in software that is unpatched by the developer or an attack that exploits such a vulnerability is called?

A vulnerability in software that is unpatched by the developer or an attack that exploits such a vulnerability is called?

• A. Malware
• B. Phishing
• C. Backdoor
• D. Zero-day

Answer: (D)

A zero-day refers to a vulnerability that is unknown to the vendor and has no patch available yet. Because the flaw is undiscovered, there’s no fix to apply, and attackers can weaponize an exploit before defenders know to look for it or release a patch. That window—from discovery to patch availability—is what makes zero-day vulnerabilities so dangerous. Malware is any malicious software, phishing is social engineering to steal information, and a backdoor is an hidden method to bypass normal authentication. None of those specifically capture the idea of an unpatched, undisclosed flaw and the exploit designed to take advantage of it, which is what a zero-day describes.

A zero-day refers to a vulnerability that is unknown to the vendor and has no patch available yet. Because the flaw is undiscovered, there’s no fix to apply, and attackers can weaponize an exploit before defenders know to look for it or release a patch. That window—from discovery to patch availability—is what makes zero-day vulnerabilities so dangerous.

Malware is any malicious software, phishing is social engineering to steal information, and a backdoor is an hidden method to bypass normal authentication. None of those specifically capture the idea of an unpatched, undisclosed flaw and the exploit designed to take advantage of it, which is what a zero-day describes.