An attack that exploits a previously unknown software vulnerability before the vendor becomes aware of it or releases a fix, making it extremely dangerous and difficult to defend against.