Comment on Google, Microsoft say Chinese hackers are exploiting SharePoint zero-day
overload@sopuli.xyz 6 days agoI did… It looks like the bug has been exploited for a couple of weeks now, with a patch only being released today? That makes it zero-day
SkyeStarfall@lemmy.blahaj.zone 6 days ago
Zero day is typically defined as there being zero days since the vulnerability is known to the developer, in other words, it being unknown at the time of the exploit.
en.wikipedia.org/wiki/Zero-day_vulnerability?wpro…
overload@sopuli.xyz 6 days ago
Ah thank you. I thought zero day and 1 day vulnerabilities were: 0-day = vulnerability is not known to the vendor and so there is no patch. If exploited, it is a 0-day attack. 1-day = vulnerability is known and patch is available, but not all systems are patched.