Undercover Exploits

Pete Lindstrom over at Spire has a good article up on Undercover Vulnerabilities and Exploits which he defines as:

Undercover Vulnerability: A vulnerability that was generally unknown (e.g. not published on any lists, not discussed by "above ground" security folks) until it was actively exploited in the wild. The vulnerability was discovered through evidence of tampering or other means, not through the usual bugfinding ritual.

Undercover Exploit: The event and/or code used to compromise a resource running the vulnerable software in the wild.

I think this gets to something I was trying to say in the zero day stuff prior.  Pete has a good list of up of real undercover examples and their dates.  I am going to put my thoughts together and put something out on how I view the whole zero day thing this week.