Unverified50% confidenceFactExact time
Zero-click vulnerabilities are worth millions of dollars on the black market and are the core asset of commercial spyware companies.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/24/2026
First Seen
Valid until: 1/22/2027
Sources
Related Entities
Related Claims
VerifiedA zero-day vulnerability is a security flaw that has not yet been discovered or patched by the software vendor; the trading price of high-value zero-day vulnerabilities on underground markets can reach millions of dollars.72% similarUnverified美国国家安全局泄露的永恒之蓝漏洞利用工具流入黑市并被用于WannaCry勒索软件攻击67% similarUnverifiedMainstream bug bounty platforms include HackerOne, Bugcrowd, and Intigriti, with participating companies spanning Google, Meta, and Microsoft.67% similarUnverifiedIn historical reports on mainstream bug bounty platforms such as HackerOne and Bugcrowd, exposed configuration files and .git directories are among the most frequently rewarded high-value vulnerability types.65% similarUnverified零信任架构能有效遏制攻击者入侵后的横向移动，这是勒索软件蔓延至全网并加密大量数据的关键步骤64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1092205API
curl https://kongchang.com/api/v1/knowledge/claims/1092205MCP
get_claim(id=1092205)