For example, last year, Internet-facing Microsoft Exchange servers were the target of an attack by a threat group Hafnium. According to Microsoft<\/a>, the group took advantage of four zero-day vulnerabilities:<\/p>\n The four vulnerabilities are the zero-day vulnerabilities, Hafnium\u2019s methods of taking advantage of these are the zero-day exploits, and the Hafnium attack overall is a zero-day attack.<\/p>\n Zero-day vulnerabilities have been around as long as there have been modern-day computers. The issue isn\u2019t the presence of the vulnerability, but the existence of threat actors intent on discovering and misusing these vulnerabilities as part of cyberattacks. Modern-day ransomware gangs<\/a> are now soliciting zero-day exploits from the dark web<\/a> to the tune of millions of dollars \u2013 turning the finding of zero-day vulnerabilities into a viable business practice.<\/p>\n So, why should MSPs be concerned?<\/p>\n Think about the problem these vulnerabilities create: a zero-day exploit that takes advantage of a zero-day vulnerability uses a specific method that has never been seen before. Assuming you have some form of endpoint security in place, depending on how the solution detects malicious code and\/or behaviors, a zero-day exploit may run undetected, providing the threat actor with access in stealth.<\/p>\n\n
![\"CTA\"](\"https:\/\/no-cache.hubspot.com\/cta\/default\/5442029\/e6824cd7-ceb3-465a-9f93-4509b71ce559.png\")
<\/a><\/span><\/span><\/div>\nWhy Be Concerned About Zero-Day Vulnerabilities?<\/h2>\n