A zero-day is a security flaw in software that attackers already know about or are already using before the company that makes the software has a fix ready. The name comes from the defenders’ side: they have had no days at all to patch it. Think of a burglar who finds a faulty lock on a shop’s back door before the lock maker knows that model is broken. Once the maker releases a fix, the flaw stops being a zero-day. Any computer or service that has not installed the update is still open to attack.
Why it matters
You cannot patch a zero-day before a fix exists, so your protection comes from the habits around it. Install updates quickly once they arrive. That includes your computers and phones, and also the AI tools and add-ons your staff use. Keep as little as possible reachable from the internet, such as old websites, test servers or admin pages nobody watches. When you choose an AI vendor, ask how fast they ship security fixes and how they warn customers about urgent ones. Security advisories often mention a CVE number or a listing in CISA KEV. Take either one as a signal to update right away.
Published Updated