The DMZ

« first day (3871 days earlier) ← previous day next day → last day (1168 days later) »

nobody

9:01 AM

We're only 7 months into 2021 and already 37 zero days have been found in the wild. The previous high (since 2014) was 28 zero days caught in all of 2015. Are we getting more efficient at catching the zero days, or are attackers using zero days more liberally?

A. Hersean

Or are we using the term "0-day" more easily?

Before this term was cool, they were just "undisclosed vulnerabilities".

But "0-day" looks more 1337.

nobody

Nah, I'm looking at project zero's data. I'm pretty sure they use a consistent definition

A. Hersean

They might be more efficient and threat actors more numerous.

djsmiley2kStaysInside

10:04 AM

0-day in the wild, meaning (I hope) active exploitation of a hereby unknown vuln.

3 hours later…

Fire Quacker

1:11 PM

Did covid lockdowns give people more time to sit around at home and discover vulnerabilities?

nobody

Most in the wild zero days found are used by APTs. Those groups have people that already devoted all their time to finding vulnerabilities. Why would the lockdown make a difference?

Fire Quacker

1:32 PM

Good point

nobody

Well, maybe independent researchers that find vulns in their spare time and sell on the black market found lots of them and drove the prices down. So APTs just started buying zero days.

3 hours later…