A “zero-day attack” is when a vulnerability is known — potentially by hackers — before it has been fixed, and that recently occurred with Windows. Microsoft has updated the software to address these recent vulnerabilities, but it’s up to users to update their systems.