Year: 2024
Type: article
Abstract: A distinct challenge is posed by zero-day vulnerabilities to security teams within an organization. These types of vulnerabilities enable attackers to exploit software flaws before patches are available. In 2023, the number and complexity of Zero-Day exploits increased substantially. Nation-state actors, cybercriminal groups, and commercial surveillance vendors are taking advantage of these vulnerabilities more than ever. This paper provides a comprehensive analysis of the Zero-Day vulnerabilities discovered and exploited in 2023. Based on public data sources like Google's Threat Analysis Group (TAG), MITRE’s CVE database, and Zero-Day.cz, this study examines trends, attack vectors, and the most targeted software platforms. Through empirical analysis, trends and patterns are discovered to devise strategies to defend against them or mitigate them. The paper explores key defense strategies like Zero Trust Architecture, real-time threat intelligence integration, and mature Endpoint Detection and Response (EDR) solutions to prevent, detect, and respond to exploits using the zero-day vulnerability. By understanding the history of incidents and vulnerability disclosures, this paper aims to provide actionable insights for organizations looking to strengthen their cybersecurity defenses and prepare for future Zero-Day exploits.
Author: Varadharaj Varadhan Krishnan
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: bronze
OpenAlex ID: W4403514465