What is a ‘zero day’ exploit? (Dave Taylor)

May 24, 2026 - 21:29

You have likely heard the term "zero day exploit" in news reports about cyberattacks and data breaches. It sounds alarming, and for good reason, but understanding what it actually means can help you put the risk in perspective.

A zero day exploit is a software vulnerability that hackers discover and use to attack systems before the software's developer even knows it exists. The name comes from the fact that the developer has had "zero days" to fix the problem. Once the flaw is found by security researchers or the company itself, they race to create a patch. Until that patch is released, any system running the vulnerable software is open to attack.

These exploits are especially dangerous because traditional antivirus programs and firewalls often cannot detect them. They are unknown threats. Hackers use them to install malware, steal data, or take control of a computer without the user knowing.

For someone using an older Windows 10 PC for basic email and web browsing, the risk is real but manageable. Microsoft regularly releases security updates for Windows 10, and those patches often fix zero day vulnerabilities. The biggest danger comes if you stop installing those updates. If your PC is no longer receiving patches, you are much more exposed. Also, using an outdated web browser or email client increases your risk.

You do not need to panic. Most zero day attacks target high-value organizations like governments, banks, or large companies. Casual home users are less likely to be specifically targeted. However, you should keep your system updated, use a modern browser that updates itself, and avoid clicking suspicious links or downloading unknown attachments. That simple caution goes a long way.