{"id":1467,"date":"2022-02-03T13:40:00","date_gmt":"2022-02-03T20:40:00","guid":{"rendered":"https:\/\/wpsites.ucalgary.ca\/isec-601-f21\/?p=1467"},"modified":"2022-02-03T13:37:02","modified_gmt":"2022-02-03T20:37:02","slug":"the-dangers-of-zero-days","status":"publish","type":"post","link":"https:\/\/wpsites.ucalgary.ca\/isec-601-f21\/2022\/02\/03\/the-dangers-of-zero-days\/","title":{"rendered":"The Dangers of Zero-Days"},"content":{"rendered":"\n

Recently, Apple has patched two zero-day vulnerabilities in iOS by releasing security updates for users to protect themselves. The first zero-day bug was founded by an anonymous researcher, Meysam Firouzi, and the second one founded by Siddharth Aeri.[1]<\/sup> Both of these zero-day attacks have posed a risk to all iOS users, the first one was a memory corruption bug in the IOMobileFrameBuffer which has affected the iOS system, iPadOS, and macOS Monterey. The second one was a Safari WebKit bug in iOS systems and iPadOS where websites were able to track your browsing activity and possibly reveal users\u2019 identities. Additionally, the zero-day vulnerabilities left the opportunity for Pegasus spyware on iPhones to be installed. Which allowed hackers to gain access to users\u2019 information that is stored on their phones.[1]<\/sup><\/p>\n\n\n\n

\"\"
ZERO DAY rays volume light concept 3d illustration<\/a><\/figcaption><\/figure>\n\n\n\n

What is Zero-day?<\/strong><\/h2>\n\n\n\n

A zero-day exploit is a complex cyberattack[2]<\/sup> in which hackers could take advantage of a software security system due to a flaw in it. This flaw is not noticeable to any software developers and only noticeable to hackers. A zero-day is executed in three steps, first hackers will notice a flaw in the software system, this is known as a zero-day vulnerability. Secondly, hackers will take advantage of the software system, this could be done by the use of malware. Lastly, hackers will follow through with a zero-day attack, this is where hackers will leverage their zero-day exploit to carry out a cyberattack[3]<\/sup>. This could lead to an invasion of privacy, such as identity theft where hackers will be able to steal the identities of individuals.<\/p>\n\n\n\n

\"\"
Different types of zero-day[3]<\/sup><\/figcaption><\/figure>\n\n\n\n

What Hackers look for in a Target<\/strong><\/h2>\n\n\n\n

Oftentimes, hackers will look for many targets with the most vulnerable system, these systems with potential vulnerabilities include; operating systems, web browsers, office applications, open-source components, hardware and firmware, and the internet of things (IoT)[6]<\/sup>. Along with vulnerable systems as a target, hackers will also look for vulnerable individuals. These victims can include those who use a browser or operating system that was already vulnerable, to begin with, those with valuable confidential data, government agencies, political targets and\/or national security threats, and large businesses[6]<\/sup>.<\/p>\n\n\n\n

In-depth Process of Zero-Days (how it works)<\/strong><\/h2>\n\n\n\n

Hackers will first discover that there is a flaw in the software system that developers never noticed before. Next, the hacker will write a code that will implement an exploit while the vulnerability is present, this is when developers are in trouble because they are too late to fix it meaning they have \u2018zero-days\u2019 to fix it. Researchers will become aware of this vulnerability in the system and announce it to the public, telling them that their personal information may be at risk. Researchers will also release antivirus signatures, but this will only help if the hackers used malware to target the vulnerability in the system. The antivirus signature helps researchers and developers to identify the virus and quickly implement a security patch to eliminate the virus. Lastly, once the security patch is released users\u2019 will need to download this patch onto their device[5]<\/sup>.<\/p>\n\n\n\n

How do you avoid these attacks?<\/strong><\/h2>\n\n\n\n

Zero-day vulnerabilities are threatening and are often detected when it is too late (which is where the name \u201czero-day\u201d came from because you have zero days to fix the problem) but there are ways to protect yourself from these attacks despite the software system itself having a flaw in it. Down below are a few ways to protect your data and identity.[3][4][5]<\/sup><\/p>\n\n\n\n