Zero-Day Vulnerabilities: What They Are and How to Manage the Risk for Australian Enterprises

A zero-day vulnerability is a software flaw that is unknown to the vendor and has no available patch. Zero-days are valuable to attackers because they can be exploited without triggering signature-based detection. While organisations cannot prevent zero-days from existing, they can reduce exposure and impact: defence-in-depth means a single vulnerability doesn't grant full access, network segmentation limits lateral movement, application-layer security (WAF, input validation) may block exploitation of some zero-days, endpoint detection and response (EDR) can detect exploitation behaviour even without a signature, and regular penetration testing identifies the configuration weaknesses and exposed attack surface that make zero-day exploitation more impactful.