Zero-day attack vectors exploit vulnerabilities in software or systems, unknown to the vendor or public. Attackers leverage these vulnerabilities before patches or updates are available.