Hafnium și dilema vulnerabilităților 0-day. Cooperarea public-privat în Cyber Threat Intelligence
Hafnium and the zero-day dilemma. Public-private cyber threat intelligence cooperation

Summary/Abstract: Cyber Threat Intelligence (CTI) represents an essential component in reducing cybersecurity risks, with a particular focus on identifying and mitigating 0-day vulnerabilities. While academic literature, specialized reports, and normative documents indicate broad support for cooperation between public and private entities in the development of cybersecurity, there are several systemic challenges that affect the real-time exchange of information on threats, such as those generated by 0-day vulnerabilities. This article evaluates the dynamics of public–private collaboration in CTI, with a focus on the obstacles that hinder the further development of cooperation, such as trust deficiencies, legal limitations, financial and reputational risks, and divergent strategic interests. Through a qualitative analysis of existing literature and by using the Hafnium cyber campaign as a case study, the article highlights the difficulty of disclosing 0-day vulnerabilities and the limitations of existing cooperation formats. The results indicate that, although structured mechanisms for information sharing exist, real-time collaboration against 0-day vulnerabilities remains constrained by competitive motivations, whose resolution is difficult.

• Details
• Contents