Lane Thames was interviewed for a Communications of the ACM article examining the risks and realities of zero-day exploits. The piece looks at why these vulnerabilities are so difficult to detect, how attackers take advantage of the time gap before fixes are available, and what security teams can do to better prepare for the unknown.
Originally published in Communications of the ACM.
Excerpt: “The effect and impact might not be directly due to the zero-day, but it can be a result of a zero-day. A zero-day is often a way into the target organization. Once the target has been infiltrated (via a zero-day), the malicious actors can spread throughout the target’s networks and systems, and, from there, they use other techniques or vulnerabilities to achieve the end goals.” – Lane Thames, Principal Cybersecurity Researcher at Fortra.