It is very common for attacks to use previously unknown malware.

A zero-day vulnerability is defined as a security flaw of which the vulnerable product's vendor has no prior awareness.

It is impractical to protect against zero-day attacks.

A zero-day vulnerability is defined as a security flaw of which the vulnerable product's customers have no prior awareness.

Endpoints are sometimes operated by their users outside the corporate network perimeter.

ESM servers send information about threats directly to Palo Alto Networks firewalls.

Traps endpoints send information about threats directly to Palo Alto Networks firewalls.

Information about threats from both Palo Alto Networks firewalls and Traps endpoints flows into a shared threat intelligence cloud.

Exploits typically target vulnerabilities for which there are no patches.

Targeted attacks typically employ a combination of software exploits and malware.

Computer users can protect themselves effectively against targeted attacks by keeping their systems fully patched and their antivirus signature databases up to date.

Attackers may gather information about their intended victims using social media.