A cyberattack that targets a software vulnerability before the developer is aware of it or has released a fix is called a _____-day exploit.

### Why this is right A zero-day exploit uses a software weakness before a vendor has released a patch to correct it. The term emphasizes that users have had no days of protection from a vendor fix. ### The concept A vulnerability is a weakness; an exploit is a method that takes advantage of it. A zero-day may be difficult to detect with signature-based tools because a known pattern may not yet exist. Behavioral monitoring, network segmentation, threat intelligence, and compensating controls can reduce exposure while a fix is unavailable. Once a patch is released, organizations still need to deploy and verify it. ### Terms - **Vulnerability**: A weakness in design, implementation, configuration, operation, or use. - **Exploit**: Code or a method that takes advantage of a vulnerability. - **Patch**: A software update that fixes a defect or security weakness. ### Remember A zero-day describes exploitation before a vendor fix is available, not simply any old unpatched system.