[fred_is_fred]

Is the word zero-day here superfluous? If they were previously unknown doesn't that make them zero-day by definition?

[tptacek]

It's a term of art. In print media, the connotation is "vulnerabilities embedded into shipping software", as opposed to things like misconfigurations.

[jfyi]

I think it's a fairly common trope in communication to explain in simple terms any language that the wider part of an audience doesn't understand.

[limagnolia]

I though zero-day meant actively being exploited in the wild before a patch is available?

[rcxdude]

Zero day means that there is zero days between a patch being available and the vulnerability being disclosed (as opposed to the patch being available before disclosure).

[bink]

Yes. As a security researcher this always annoys me.