Comment on Google, Microsoft say Chinese hackers are exploiting SharePoint zero-day

• overload@sopuli.xyz ⁨3⁩ ⁨days⁩ ago

  I did… It looks like the bug has been exploited for a couple of weeks now, with a patch only being released today? That makes it zero-day

  source

  • SkyeStarfall@lemmy.blahaj.zone ⁨3⁩ ⁨days⁩ ago

    Zero day is typically defined as there being zero days since the vulnerability is known to the developer, in other words, it being unknown at the time of the exploit.

    en.wikipedia.org/wiki/Zero-day_vulnerability?wpro…

    source

    • overload@sopuli.xyz ⁨3⁩ ⁨days⁩ ago

      Ah thank you. I thought zero day and 1 day vulnerabilities were: 0-day = vulnerability is not known to the vendor and so there is no patch. If exploited, it is a 0-day attack. 1-day = vulnerability is known and patch is available, but not all systems are patched.

      source