When attackers find a software vulnerability before ethical hackers or the software provider's own security team, the entire installed base of users is in danger. National governments, hacker collectives, and private contractors devote enormous resources to discovering and developing these “zero days.”

Additionally, they often work very hard to use zero days in a subtle and judicious way so that they can do damage with them for as long as possible before providers are alerted and develop a patch.

In this Expert Series session, security expert Evgeniy Kharam will walk through a brief history of major zero-day incidents, discuss the realities of the shadow market for zero days, and discuss different techniques that organizations can use to defend themselves the best they can against these especially pernicious vulnerabilities.