What is *This Is How They Tell Me the World Ends* about?

*This Is How They Tell Me the World Ends* by Nicole Perlroth investigates the clandestine global market for cyberweapons, particularly zero-day exploits—flaws in software unknown to developers. The book traces how governments and hackers weaponize these vulnerabilities, enabling attacks on critical infrastructure, elections, and corporations. Perlroth blends investigative journalism with firsthand accounts from hackers, spies, and policymakers to expose the escalating cyber arms race and its existential risks.

Who should read *This Is How They Tell Me the World Ends*?

This book is essential for cybersecurity professionals, policymakers, and general readers interested in digital espionage. It offers accessible insights for non-technical audiences while providing deeper context for experts on state-sponsored hacking, zero-day markets, and the fragility of modern infrastructure. Perlroth’s narrative style caters to fans of investigative journalism and true crime.

Is *This Is How They Tell Me the World Ends* worth reading?

Yes—the book is praised for its gripping storytelling and thorough research, though some critics note exaggerated scenarios. It won the 2021 Financial Times Business Book of the Year and was inducted into the Cybersecurity Canon Hall of Fame. Readers gain a sobering perspective on cyber threats, though Perlroth avoids prescribing easy solutions, leaving the conclusion open-ended.

What are zero-day exploits, and why are they dangerous?

Zero-day exploits are undisclosed software vulnerabilities that hackers weaponize before developers can patch them. Perlroth reveals how governments and criminals trade these exploits in secret markets, enabling attacks on power grids, hospitals, and elections. Their unchecked proliferation erodes global security, as seen in incidents like Stuxnet and Russian election interference.

How does Nicole Perlroth critique government roles in cyberweapons?

Perlroth argues that agencies like the NSA prioritized offensive cyber capabilities over defense, inadvertently fueling a global arms race. By stockpiling zero-days instead of disclosing them, governments left critical infrastructure vulnerable to adversaries. She highlights how U.S. policies enabled rivals like China and Russia to replicate these tactics.

What real-world cyberattacks does the book describe?

The book details high-profile attacks, including: - **Stuxnet**: A U.S.-Israeli operation sabotaging Iranian nuclear centrifuges. - **NotPetya**: Russian malware that caused $10B in global damage. - **SolarWinds**: A Russian breach compromising U.S. federal agencies. - **North Korean hacks** on Sony Pictures and healthcare systems.

What criticisms exist about the book’s approach?

Critics argue Perlroth occasionally prioritizes drama over nuance, exaggerating the immediacy of cyber threats. Some note a Eurocentric focus, underplaying attacks in regions like Asia and Africa. Experts also dispute her portrayal of zero-day markets as purely apocalyptic, citing existing defensive measures.

How does the book explain the role of private hackers?

Perlroth profiles "bug hunters" who ethically disclose vulnerabilities and shadowy brokers selling exploits to authoritarian regimes. She contrasts idealists aiming to secure systems with mercenaries monetizing flaws, highlighting the moral ambiguity in cybersecurity’s gray market.

零日漏洞

网络武器军备竞赛

妮可·珀尔罗斯

4.32(10779 Reviews)

《零日漏洞》概述

Nicole Perlroth 的《纽约时报》畅销书揭露了威胁全球安全的恐怖网络武器市场。作为 2021 年《金融时报》年度商业图书奖得主，这本书被 Kara Swisher 称为“100% 扣人心弦”——这是一个令资深安全专家都爱不释手的惊人真相。

选择讲述方式

一本书，多种聆听方式。

来自《零日漏洞》的相同理念。选择适合你的声音、深度和节奏，随时切换。

第 1 章

The Digital Arms Race: Inside the Cyberweapons Market

In a world where we entrust our most intimate secrets to digital devices, a hidden war is unfolding. While we worry about terrorists and nuclear weapons, the most devastating attacks of our lifetime may come not from bombs but from code. Nicole Perlroth's meticulously researched expose has become required reading in Washington and Silicon Valley alike, with Bill Gates calling it "one of the most important books of our time." The book's chilling revelations about the global zero-day exploit market have prompted emergency meetings at the Pentagon and White House, while earning praise from figures ranging from Garry Kasparov to John Kerry. What makes this investigation so compelling is how it transforms an abstract digital threat into a visceral human story-revealing how our own government's pursuit of digital weapons has inadvertently created a marketplace that now threatens the very infrastructure upon which modern life depends.

第 2 章

The Birth of a Shadow Industry

The story begins with a simple question that haunted the author after spending weeks examining Edward Snowden's leaked NSA documents in a windowless storage closet at the New York Times: Where did the NSA get all these digital "backdoors" into virtually every major technology product? The answer led her on a seven-year investigation into the murky world of zero-day exploits-software vulnerabilities unknown to manufacturers that allow hackers complete, invisible access to devices and networks. In the early 2000s, a Texas entrepreneur named John Watters pioneered the first formal vulnerability marketplace through his company iDefense. His innovation was simple but revolutionary: pay hackers for finding software bugs, then sell that intelligence to subscribers who needed early warnings about security flaws. What began as a legitimate security service paying a few hundred dollars per bug soon attracted attention from government contractors willing to pay exponentially more-up to $150,000 for the same vulnerabilities-if sellers kept them secret. "Coconspiring with the government to leave gaping holes in core technology used by your customers would destroy my business," Watters explained, rejecting these overtures. But the market forces he unleashed couldn't be contained. By 2005, the same bugs that once earned hackers $400 were commanding $4,000, and Watters sold iDefense to Verisign for $40 million-an extraordinary return on his $10 initial investment to acquire the company just three years earlier. While Watters maintained ethical boundaries, others rushed to fill the void. A shadowy broker code-named "Sabien" began assembling teams to find and sell high-value exploits exclusively to intelligence agencies. "We provided the entire kill chain," he explained, describing how his team delivered complete digital espionage capabilities to government clients. Their most prized discoveries included exploits that could persist even if a computer was wiped and reinstalled, like one that infected video memory card firmware and another targeting HP printers that allowed agencies to capture documents before encryption. As intelligence agencies worldwide recognized the internet's potential as an intelligence goldmine, the market expanded rapidly. Despite overall defense budget cuts in the 1990s, "cybersecurity" funding remained robust, though policymakers had limited understanding of how these funds were used. This created massive duplication as different agencies purchased the same exploits multiple times, sometimes at wildly different prices.

边听边看，每个词都清晰呈现

轻松跟读，《零日漏洞》中的每个词都会随音频实时高亮。

第 3 章

The NSA's Digital Arsenal

Behind the public zero-day market lay an even more expansive arsenal of NSA exploits, available only to elite Tailored Access Operations (TAO) hackers. Their catalog of vulnerabilities granted entry into virtually every corner of the digital universe, from operating systems and browsers to hardware and infrastructure. The TAO unit, operating from a fortified facility in Fort Meade, Maryland, developed sophisticated tools that could penetrate everything from Windows systems to industrial control equipment, often maintaining persistent access for years without detection. After 9/11, everything became fair game in the digital realm. The arrival of Google, Facebook, and especially the iPhone created unprecedented surveillance opportunities. Programs like "Snacks" visualized targets' entire social networks, mapping relationships, communications patterns, and behavioral profiles with stunning precision. "Where's My Node?" tracked movements between cell towers, creating detailed location histories accurate to within meters. The NSA developed specialized tools for each major platform - DROPOUTJEEP for iPhones, GOPHERSET for GSM phones, and WATERWITCH for radio frequency tracking. By 2008, the NSA was removing human decision-making from operations, with the classified "Genie" program embedding implants in routers, switches, and computers worldwide. What began with 85,000 implants grew into plans for millions of automated insertions. These implants could lie dormant for years before being activated, giving the NSA instant access to targeted networks. The program cost $652 million annually and relied on sophisticated AI systems to manage the vast network of compromised devices. Even as the U.S. warned allies about Chinese backdoors in Huawei equipment, the NSA had already penetrated Huawei's headquarters through Operation Shotgiant. The agency stole source code, mapped internal networks, and planted backdoors in Huawei products. The operation, conceived in 2007, initially aimed to uncover ties between Huawei and the People's Liberation Army but expanded into a comprehensive infiltration campaign. The NSA gained access to Huawei's internal emails, including communications from founder Ren Zhengfei, and developed plans to exploit Huawei products globally, particularly in countries actively avoiding American technology. By 2017, NSA implants were embedded in networks across six continents, with many actively collecting data while others remained dormant until needed. The agency had compromised everything from underwater cables to satellite systems. In the post-9/11 rush for total information awareness, few questioned the implications if these operations were discovered. No one considered the potential blowback on American tech companies or the moral hazard of compromising the same technologies Americans relied on for banking, healthcare, and critical infrastructure. The NSA's answer was more secrecy and compartmentalization, operating under the dangerous assumption that they were smarter than everyone else and their operations would never be exposed.

第 4 章

Crossing the Digital Rubicon

In 2007, President Bush confronted an escalating crisis at Iran's Natanz nuclear enrichment facility, a heavily fortified underground complex discovered through satellite imagery. After diplomatic efforts spanning three years had failed to halt Iran's uranium enrichment program, and with military strikes potentially triggering a catastrophic Middle East conflict, Bush faced mounting pressure from Israeli Prime Minister Ehud Olmert, whose military was actively preparing for unilateral airstrikes. NSA Director Keith Alexander presented a revolutionary third option during a classified Situation Room meeting. He proposed leveraging the NSA's sophisticated digital infiltration capabilities to sabotage Iran's nuclear program from within. At Tennessee's Oak Ridge National Laboratory, engineers had meticulously constructed an exact replica of Natanz's enrichment system, including the specific Pakistani-designed P-1 centrifuges Iran had acquired through A.Q. Khan's nuclear proliferation network. Alexander's detailed plan involved compromising the Siemens S7-315 programmable logic controllers (PLCs) that regulated these delicate machines, which needed to spin at precisely 63,000 rpm to enrich uranium. The operation, codenamed "Olympic Games," marked an unprecedented collaboration between five major agencies: the NSA's Tailored Access Operations unit, Israel's elite Unit 8200, CIA's Operations Directorate, Mossad's Caesarea division, and U.S. national energy laboratories. The technical challenges were immense - the code needed to operate undetected for months while causing centrifuges to self-destruct in ways that would appear as random mechanical failures to Iranian engineers. The attack's execution required extraordinary precision. Since Natanz's critical systems were air-gapped, initial penetration likely came through human intelligence - either a compromised contractor or unwitting employee introducing an infected USB drive. The resulting worm was unprecedented in complexity: a 500KB package containing seven zero-day exploits worth millions on the black market. It was programmed to target only PLCs controlling exactly 164 centrifuges - matching Natanz's known configuration of centrifuge cascades. The worm's sophistication reflected years of intelligence gathering. It would passively monitor normal operations for thirteen days, recording typical sensor readings. Then it alternated between commanding the centrifuges to spin at damaging 1,410 Hz frequencies and dramatically slowing them to 2 Hz, all while feeding technicians' monitors false data showing normal operations. By 2009, the attack had destroyed nearly 25% of Iran's enrichment capability, eliminating 2,000 of their 8,700 centrifuges. During the presidential transition, Bush personally briefed Obama on Olympic Games in the Oval Office, emphasizing its strategic importance. While Obama continued and even accelerated the program, he expressed deep concerns about unleashing the first true cyberweapon of mass destruction - essentially opening Pandora's box. His fears materialized in June 2010 when the worm escaped Natanz's confines, spreading to computers worldwide. Security researchers who discovered it named it "Stuxnet," eventually tracing its sophisticated code back to American and Israeli origins, though both governments maintained official silence.

从《零日漏洞》中收获更多

每日获取新洞见，探索 10 万+ 条课程内容
文字实时高亮，与音频同步
保存你的书库，在所有设备上随时访问

第 5 章

The Mercenaries: Selling Digital Weapons to the Highest Bidders

As the zero-day market matured, a new breed of mercenary hackers emerged who sold their skills to the highest bidders in the largely unregulated cyberweapons market. Unlike earlier security researchers motivated primarily by intellectual curiosity, these newer players were driven by profit and operated with few ethical constraints. Sinan Eren's background shaped his complex relationship with hacking. Growing up Kurdish in Turkey during intense persecution, he witnessed his father shot by police and saw thousands of Kurds "disappear." At Istanbul Technical University, he created early warning systems when secret police entered campus, defaced government websites, and hacked university officials' emails to expose their complicity in crackdowns. After escaping to Silicon Valley, Eren joined Dave Aitel at Immunity, developing zero-day exploits. Their business thrived training government contractors, but Eren faced a moral crisis when forced to train a Turkish general - the same military persecuting his people. Eventually, the ethical compromises became unbearable, and Eren left to start his own company with stricter customer standards, only working with governments in "upper right quadrants" of human rights records. The zero-day market was attracting an increasingly mercenary breed of brokers with little concern for ethics or discretion. The Grugq, a South African hacker living in Thailand, flaunted his wealth in Forbes photoshoots. Luigi and Donato from Malta openly advertised exploits for American industrial control systems. Singapore's Thomas Lim sold cyber weapons to governments lacking technical skills but flush with cash. Chaouki Bekrar, the self-styled "Wolf of Vuln Street," taunted tech giants while selling their vulnerabilities to unknown governments. By 2013, the market had exploded to $5 billion from virtually nothing a decade earlier. Nearly every nation except Antarctica had entered the trade. Israel, Britain, Russia, India, and Brazil matched U.S. government prices, while Malaysia and Singapore joined the buying frenzy. Perhaps the most sophisticated player in this market was NSO Group, an Israeli company founded by graduates of Intelligence Unit 8200. Their flagship product, Pegasus, could transform smartphones into comprehensive spy devices, capturing calls, texts, emails, contacts, GPS data, social media conversations, and even activate microphones and cameras for surveillance. Unlike competitors, NSO had perfected "zero-click infection" - the ability to hack phones without requiring targets to click malicious links. They charged premium prices - $500,000 installation fee plus $650,000 to hack just ten phones, with additional targets costing hundreds of thousands more. Despite NSO's claims of only selling to democratic governments for criminal and terrorism investigations, their technology was used to target Mexican nutritionists supporting a soda tax, anti-corruption activists, journalists critical of President Pena Nieto, and even their family members. When confronted with evidence of abuse, NSO executives deflected responsibility: "When you're selling AK-47s, you can't control how they'll be used once they leave the loading docks."

第 6 章

The Resistance: Silicon Valley Awakens

The Chinese hack of Google in December 2009, dubbed "Aurora," became Silicon Valley's wake-up call. When a Google intern detected an unusual digital "blip" triggering security alarms, it soon metastasized into the most sophisticated cyberattack Google had ever faced. The hackers had sent Google employees in Beijing a malicious chat message containing a zero-day exploit for Internet Explorer. The investigation revealed the hackers were targeting Google's source code - the crown jewels of any tech company. Unlike short-term targets like credit card information, source code is the raw matter that tells devices and apps how to behave, and manipulating it can create invisible backdoors. The attackers specifically targeted Gmail accounts belonging to Chinese dissidents. In a historic move, Google publicly attributed the attack to China in January 2010 and announced it would no longer censor search results on Google.cn, effectively withdrawing from the Chinese market. This marked the first time an American company publicly called out China for cyber theft. The attack transformed Google's approach to security. "The attack was proof that serious actors-nation-states-were doing these things, not just kids," explained Heather Adkins, Google's security director. The company began a comprehensive security overhaul while embarking on a mission to harden not just Google but the entire internet from within. Google tapped into the global hacker community by offering financial incentives for discovering vulnerabilities. Their bug bounty program quickly expanded beyond Chromium to cover YouTube, Gmail and other services, eventually raising maximum rewards to $31,337 (a nod to "eleet" hackers). The program attracted diverse participants worldwide who used bounties to transform their lives, buy homes, fund startups, and support charities. Facebook soon followed, led by self-proclaimed hacker Mark Zuckerberg. When Dutch hackers Michiel Prins and Jobert Abma demonstrated they could take over all Facebook accounts, COO Sheryl Sandberg immediately printed their email and rushed it to security head Alex Rice. Within two years, Facebook had paid $1.5 million to researchers for 687 bugs, 41 of which could have severely compromised the platform. Microsoft took longer to embrace bug bounties. Katie Moussouris, Microsoft's hacker outreach lead, faced the Herculean task of convincing executives to pay hackers despite concerns about competing with government prices and creating perverse incentives. After collecting two years of data showing declining bug reports, and with the Snowden leaks creating a crisis of trust for tech companies, Microsoft finally launched a bounty program in June 2013. The Snowden revelations in 2013 pushed tech companies into full battle mode, especially after leaks revealed the NSA and GCHQ were directly hacking Google and Yahoo's data centers. A hand-scribbled diagram with a triumphant smiley face emoji drove Google engineers into fury, with one declaring "Fuck these guys." In response, companies sealed every crack and implemented stronger encryption. Google's security chief Eric Grosse was clear about his mission: "No hard feelings, but my job is to make their job hard."

边听边看，每个词都清晰呈现

轻松跟读，《零日漏洞》中的每个词都会随音频实时高亮。

第 7 章

When America's Weapons Boomerang Back

In August 2016, amid the DNC leaks and Russian election interference, a mysterious Twitter account @shadowbrokerss appeared, claiming to have hacked the NSA and offering to auction its cyberweapons online. Security experts quickly confirmed these were authentic NSA tools-"the keys to the kingdom" that could break into government agencies and corporate networks worldwide. The Shadow Brokers released their most damaging leak on April 14, 2017 - twenty of the NSA's most coveted zero-day exploits, including the powerful "EternalBlue" that could invisibly penetrate millions of Windows machines. Despite Microsoft having quietly patched the vulnerabilities a month earlier, hundreds of thousands of unpatched systems remained vulnerable. The first sign that America's cyberweapons were boomeranging back came on May 12, 2017, when nearly fifty British hospitals were hit by ransomware attacks. Within 24 hours, the ransomware dubbed "WannaCry" had infected 200,000 organizations across 150 countries. The attacks spread with unprecedented speed because they utilized EternalBlue, the stolen NSA exploit. Just six weeks later, an even more destructive attack struck. What researchers initially thought was Petya ransomware was actually a far more sophisticated attack dubbed NotPetya. Using two stolen NSA tools-EternalBlue and EternalRomance-plus the password-stealing MimiKatz exploit, the attack spread globally after Russian hackers compromised a Ukrainian tax software company. Unlike genuine ransomware, NotPetya's encryption couldn't be reversed; it was designed purely for destruction. What Russia likely intended as a targeted attack on Ukraine quickly spread worldwide, paralyzing Merck, DLA Piper, FedEx, Maersk shipping, hospitals, and even Cadbury's chocolate factory in Tasmania. The damage ultimately reached $10 billion, making it history's most destructive cyberattack. Three years after the NSA lost control of its tools, EternalBlue had become a permanent fixture in cyberattacks on American towns and cities. In Allentown, Pennsylvania, malware spread across city networks, wiping police databases and freezing surveillance systems. By May 2019, Baltimore was hit with ransomware that disrupted essential services and cost $18 million in damages. When journalists reported EternalBlue's involvement, the NSA denied responsibility through careful wordsmithing, infuriating Microsoft executives who were cleaning up the aftermath nationwide. Former NSA Director Michael Rogers showed no remorse, comparing the situation to Toyota not being responsible when someone weaponizes their trucks-an analogy Microsoft executives vehemently rejected, noting exploits were "already bombs."

第 8 章

The Gathering Storm: Our Vulnerable Future

By 2020, the situation had become increasingly precarious, with foreign adversaries deeply embedded throughout American networks and critical infrastructure systems. Between 2019-2020, over 600 American towns, cities and counties were crippled by sophisticated ransomware attacks, generating billions for Russian cybercriminals. The demands escalated dramatically - from initial hundreds of dollars to multimillion-dollar extortion attempts. Notable attacks included Baltimore ($76 million in damages), Atlanta ($17 million to recover), and smaller cities like Lake City, Florida, which paid $460,000 in Bitcoin to recover their systems. Intelligence officials found it "inconceivable" that the Kremlin wasn't aware of these criminal operations, given their scale and sophistication. Through detailed forensic analysis, they discovered Russian cybercriminals were meticulously following Putin's explicit rule against hacking inside Russia - their malware contained sophisticated code that specifically avoided computers with Cyrillic keyboard settings or IP addresses originating from former Soviet states. In several high-profile cases, cybercrime leaders weren't just working with Russian intelligence - they were active FSB agents operating under official cover, using criminal enterprises as a facade for state-sponsored operations. "There's a pax mafiosa between the Russian regime and its cyber cartels," explained Tom Kellermann, head of cybersecurity strategy at VMware. "Russia's cybercriminals are treated as a national asset who provide the regime free access to victims of ransomware and financial crime. And in exchange, they get untouchable status, operating freely from luxury apartments in Moscow and St. Petersburg." Meanwhile, Russian hackers had achieved something even more alarming - penetrating America's nuclear infrastructure. In July 2017, the DHS and FBI issued an urgent alert that Russian operatives had breached Wolf Creek, a 1200-megawatt nuclear power plant in Burlington, Kansas. Forensic analysis revealed they weren't just conducting espionage - they were methodically mapping networks for a potential future attack, compromising engineers with direct access to critical reactor controls. Similar intrusions were later discovered at multiple other nuclear facilities across the country. Under General Paul Nakasone's leadership, U.S. Cyber Command began "defending forward," implementing a more aggressive strategy that included planting crippling malware inside Russian systems with unprecedented depth and sophistication. This was designed as an unmistakable message: if Russia dared to activate their implants in American infrastructure, the U.S. would immediately reciprocate with devastating consequences. The strategy included establishing persistent presence in adversary networks and conducting preemptive disruption of hacking infrastructure before it could be used against U.S. targets. While many national security experts viewed these counterattacks as long overdue deterrence, others worried that explicitly targeting civilian infrastructure, even as a defensive measure, would legitimize power grids and other critical systems as acceptable military targets, potentially escalating future conflicts into dangerous new territory.

从《零日漏洞》中收获更多

每日获取新洞见，探索 10 万+ 条课程内容
文字实时高亮，与音频同步
保存你的书库，在所有设备上随时访问

第 9 章

Securing Our Digital Future

For years, intelligence agencies justified concealing digital vulnerabilities as critical to national security. But this reasoning ignores our interconnected reality - vulnerabilities that affect one affect all. While America's cyber capabilities were initially far ahead (the "NOBUS" principle - "nobody but us"), that advantage has eroded. We must lock down the code at the foundation level. Nobody will invest in securing higher layers if our basic foundations remain weak. While we can't rebuild the internet or replace the world's code, we can significantly raise barriers for cybercriminals and hostile nations. Our economy currently rewards those first to market with the most features, but speed has always been security's enemy. We need to fundamentally rethink our machines' architecture by identifying and compartmentalizing critical systems from non-critical ones. As cybersecurity entrepreneur Casey Ellis says, "build it like it's broken" - companies must assume compromise and limit the potential damage radius. Apple's app sandboxing demonstrates this approach, significantly raising costs for attackers. Our elections cannot be conducted online under any circumstances. Despite pandemic-driven experiments with online voting in several states, security experts consistently demonstrate these systems can be hacked. If academics can manipulate these systems to elect their chosen candidates, so can foreign adversaries. The United States needs to reestablish a national cybersecurity coordinator position that was eliminated in 2018. While regulation alone won't solve our cybersecurity problems, mandating basic security requirements for critical infrastructure operators would significantly improve resilience. The United States must use its immense spending power to create an arms race for the common good, having spawned the cyberarms market for vulnerabilities. We should consider tax credits for secure software development, expand bug bounty programs beyond federal networks to critical infrastructure, and create a Project Zero-style initiative deploying top hackers to find and patch vulnerabilities. The government's offensive exploitation programs have worsened the trust deficit. Though Rob Joyce released details about the Vulnerabilities Equities Process (VEP) in 2017, the NSA's handling of EternalBlue - holding a severe vulnerability in widely-used software for five years - contradicted the VEP's stated principles. Despite claims that zero-days are held only "for a limited time," evidence from Shadow Brokers leaks showed the NSA kept critical vulnerabilities for years. These cybersecurity challenges may seem impossible, but America has overcome existential threats before by mobilizing our scientific community, government, industry, and citizens. Writing during the COVID-19 pandemic, Perlroth sees parallels in our unpreparedness: inadequate testing, protective gear, warning systems, and recovery plans apply to both domains. We don't have to wait for "the Big One" to take action. As Greg McManus's t-shirt read: SOMEONE SHOULD DO SOMETHING.

★★★★★

你已读完《零日漏洞》

深受 100 万+ 学习者喜爱

“坚持使用 23 天了，我每天都会打开它。它现在已经成为我的日常习惯。”

jayallen

《零日漏洞》核心主题

zero-day exploits
cyber warfare
digital surveillance state
vulnerability marketplace
national security infrastructure

《零日漏洞》经典语录

We provided the entire kill chain.
The NSA's answer was more secrecy.
Cybersecurity funding remained robust.
The most devastating attacks may come not from bombs but from code.

《零日漏洞》主要人物

Nicole PerlrothAuthor and New York Times investigative reporter
John WattersTexas entrepreneur who founded iDefense
SabienShadowy broker of high-value digital exploits
Edward SnowdenFormer NSA contractor who leaked classified docs
Ren ZhengfeiFounder of Huawei and target of NSA surveillance

关于作者

Nicole Perlroth 是《纽约时报》畅销书《这就是世界末日的方式：网络武器军备竞赛》（This Is How They Tell Me The World Ends: The Cyberweapons Arms Race）的作者，也是一位屡获殊荣的网络安全记者，因其对国家级黑客攻击和数字间谍活动的调查工作而闻名。

Perlroth 毕业于普林斯顿大学和斯坦福大学，曾在《纽约时报》担任网络安全记者十余年。期间，她对俄罗斯干预选举、朝鲜网络攻击以及中国渗透关键基础设施的揭露，促使美国对外国特工提起诉讼，并为她赢得了普利策奖提名。

她的著作是一部引人入胜的非虚构作品，探索了阴影中的网络武器贸易。该书源于她追踪零日漏洞的第一手经验，以及对黑客、间谍和决策者的采访。Perlroth 定期在斯坦福大学商学院任教，并担任美国网络安全和基础设施安全局（CISA）的顾问。她的作品已被翻译成九种语言，并被授权改编为电视剧。

她目前为网络安全初创公司提供咨询，并担任 Ballistic Ventures 的风险合伙人，将其洞察力转化为应对新兴数字威胁的力量。

下载《零日漏洞》摘要

免费获取《零日漏洞》摘要的 PDF 或 EPUB 版本。可打印或随时离线阅读。

用户还喜欢

Future Crimes

Marc Goodman

End of the World Is Just the Beginning

Peter Zeihan

Jamie Bartlett

James Bridle

Samuel Woolley

John Robb

What Kind of Paradise

Janelle Brown

Chaos Machine

Max Fisher

关于本书的常见问题

该学习计划的一部分

学习计划

Becoming an ethical hacker

5 h 47 m•5 集数

发现更多

学习计划

Think like Nassim taleb

In an increasingly volatile world, traditional linear thinking often leads to catastrophic failure. This plan is essential for decision-makers, investors, and strategists who want to move beyond mere resilience and learn to profit from uncertainty.

5 h 30 m•4 章节

学习计划

The New Metabolic World Order

As the global economy pivots from carbon to electrons, understanding the intersection of energy and geopolitics is essential for strategic decision-making. This plan is designed for policy analysts, energy investors, and global strategists looking to navigate the transition to a green-energy-backed financial order.

1 h 36 m•3 章节

学习计划

The World's Most Audacious Heists

This plan offers a deep dive into the intersection of high-stakes crime, security engineering, and criminal psychology. It is ideal for true crime enthusiasts, security professionals, and art historians looking to understand the mechanics of the world's most sophisticated thefts.

1 h 30 m•3 章节

学习计划

Neon Shadows: The Netrunner's Path

This path is essential for aspiring cybersecurity professionals who want to bridge the gap between offensive exploitation and proactive threat hunting. It is ideal for red teamers and security analysts looking to master stealthy network operations and automation.

1 h 36 m•4 章节

学习计划

Billionaires, Bots, and the Ballot

In an era where tech giants and high-net-worth individuals wield unprecedented power, understanding the mechanics of modern democracy is essential. This plan is ideal for political analysts, tech policy advocates, and concerned citizens looking to navigate the intersection of private capital and state machinery.

1 h 30 m•3 章节

学习计划

Surviving the Algorithmic Age

In an era where algorithms dictate our reality, understanding the mechanics of digital influence is essential for mental autonomy. This plan is designed for students, professionals, and daily internet users who want to move beyond passive scrolling and master their information environment.

1 h 30 m•3 章节

学习计划

The Hacker Mindset: Security as a Trade-off

In an era of increasing data breaches, understanding the adversarial perspective is essential for building robust defenses. This plan is ideal for aspiring security professionals and developers who want to master authentication, encryption, and network protection.

1 h 30 m•3 章节

学习计划

The Biology of Human Empire

This plan bridges the gap between evolutionary biology and historical geopolitics to explain why human societies rise and fall. It is ideal for history buffs, sociologists, and strategists looking to understand the primal drivers of power and systemic collapse.

1 h 30 m•3 章节

由哥伦比亚大学校友在旧金山创建

LOVED BY

1,000,000+ curious minds.

4.7

avg rating

1M+ learners

"Instead of endless scrolling, I just hit play on BeFreed. It saves me so much time."

@Moemenn

"I never knew where to start with nonfiction—BeFreed’s book lists turned into podcasts gave me a clear path."

@Chloe, Solo founder, LA

117

"Perfect balance between learning and entertainment. Finished ‘Thinking, Fast and Slow’ on my commute this week."

@Raaaaaachelw

"Crazy how much I learned while walking the dog. BeFreed = small habits → big gains."

@Matt, YC alum

108

"Reading used to feel like a chore. Now it’s just part of my lifestyle."

@Erin, Investment Banking Associate , NYC

254

"Feels effortless compared to reading. I’ve finished 6 books this month already."

@djmikemoore

"BeFreed turned my guilty doomscrolling into something that feels productive and inspiring."

@Pitiful

4.5K

"BeFreed turned my commute into learning time. 20-min podcasts are perfect for finishing books I never had time for."

@SofiaP

"BeFreed replaced my podcast queue. Imagine Spotify for books — that’s it. 🙌"

@Jaded_Falcon

201

"It is great for me to learn something from the book without reading it."

@OojasSalunke

"The themed book list podcasts help me connect ideas across authors—like a guided audio journey."

@Leo, Law Student, UPenn

483

"Makes me feel smarter every time before going to work"

@Cashflowbubu

查看更多网络上关于 BeFreed 的讨论

由哥伦比亚大学校友在旧金山创建

LOVED BY

1,000,000+ curious minds.

4.7

avg rating

1M+ learners

"Instead of endless scrolling, I just hit play on BeFreed. It saves me so much time."

@Moemenn

"I never knew where to start with nonfiction—BeFreed’s book lists turned into podcasts gave me a clear path."

@Chloe, Solo founder, LA

117

"Perfect balance between learning and entertainment. Finished ‘Thinking, Fast and Slow’ on my commute this week."

@Raaaaaachelw

"Crazy how much I learned while walking the dog. BeFreed = small habits → big gains."

@Matt, YC alum

108

"Reading used to feel like a chore. Now it’s just part of my lifestyle."

@Erin, Investment Banking Associate , NYC

254

"Feels effortless compared to reading. I’ve finished 6 books this month already."

@djmikemoore

"BeFreed turned my guilty doomscrolling into something that feels productive and inspiring."

@Pitiful

4.5K

"BeFreed turned my commute into learning time. 20-min podcasts are perfect for finishing books I never had time for."

@SofiaP

"BeFreed replaced my podcast queue. Imagine Spotify for books — that’s it. 🙌"

@Jaded_Falcon

201

"It is great for me to learn something from the book without reading it."

@OojasSalunke

"The themed book list podcasts help me connect ideas across authors—like a guided audio journey."

@Leo, Law Student, UPenn

483

"Makes me feel smarter every time before going to work"

@Cashflowbubu

"Instead of endless scrolling, I just hit play on BeFreed. It saves me so much time."

@Moemenn

"I never knew where to start with nonfiction—BeFreed’s book lists turned into podcasts gave me a clear path."

@Chloe, Solo founder, LA

117

"Perfect balance between learning and entertainment. Finished ‘Thinking, Fast and Slow’ on my commute this week."

@Raaaaaachelw

"Crazy how much I learned while walking the dog. BeFreed = small habits → big gains."

@Matt, YC alum

108

"Reading used to feel like a chore. Now it’s just part of my lifestyle."

@Erin, Investment Banking Associate , NYC

254

"Feels effortless compared to reading. I’ve finished 6 books this month already."

@djmikemoore

"BeFreed turned my guilty doomscrolling into something that feels productive and inspiring."

@Pitiful

4.5K

"BeFreed turned my commute into learning time. 20-min podcasts are perfect for finishing books I never had time for."

@SofiaP

"BeFreed replaced my podcast queue. Imagine Spotify for books — that’s it. 🙌"

@Jaded_Falcon

201

"It is great for me to learn something from the book without reading it."

@OojasSalunke

"The themed book list podcasts help me connect ideas across authors—like a guided audio journey."

@Leo, Law Student, UPenn

483

"Makes me feel smarter every time before going to work"

@Cashflowbubu

"Instead of endless scrolling, I just hit play on BeFreed. It saves me so much time."

@Moemenn

"I never knew where to start with nonfiction—BeFreed’s book lists turned into podcasts gave me a clear path."

@Chloe, Solo founder, LA

117

"Perfect balance between learning and entertainment. Finished ‘Thinking, Fast and Slow’ on my commute this week."

@Raaaaaachelw

"Crazy how much I learned while walking the dog. BeFreed = small habits → big gains."

@Matt, YC alum

108

"Reading used to feel like a chore. Now it’s just part of my lifestyle."

@Erin, Investment Banking Associate , NYC

254

"Feels effortless compared to reading. I’ve finished 6 books this month already."

@djmikemoore

"BeFreed turned my guilty doomscrolling into something that feels productive and inspiring."

@Pitiful

4.5K

"BeFreed turned my commute into learning time. 20-min podcasts are perfect for finishing books I never had time for."

@SofiaP

"BeFreed replaced my podcast queue. Imagine Spotify for books — that’s it. 🙌"

@Jaded_Falcon

201

"It is great for me to learn something from the book without reading it."

@OojasSalunke

"The themed book list podcasts help me connect ideas across authors—like a guided audio journey."

@Leo, Law Student, UPenn

483

"Makes me feel smarter every time before going to work"

@Cashflowbubu

查看更多网络上关于 BeFreed 的讨论

开启你的学习之旅，就是现在

第 4 章

零日漏洞

概述《零日漏洞》概述

一本书，多种聆听方式。

The Digital Arms Race: Inside the Cyberweapons Market

The Birth of a Shadow Industry

边听边看，每个词都清晰呈现

The NSA's Digital Arsenal

Crossing the Digital Rubicon

从 《零日漏洞》中收获更多

The Mercenaries: Selling Digital Weapons to the Highest Bidders

The Resistance: Silicon Valley Awakens

边听边看，每个词都清晰呈现

When America's Weapons Boomerang Back

The Gathering Storm: Our Vulnerable Future

从 《零日漏洞》中收获更多

Securing Our Digital Future

你已读完 《零日漏洞》

《零日漏洞》核心主题

《零日漏洞》经典语录

《零日漏洞》主要人物

关于作者

下载《零日漏洞》摘要

用户还喜欢

关于本书的常见问题

What is This Is How They Tell Me the World Ends about?

Who should read This Is How They Tell Me the World Ends?

Is This Is How They Tell Me the World Ends worth reading?

What are zero-day exploits, and why are they dangerous?

该学习计划的一部分

Becoming an ethical hacker

发现更多

1,000,000+ curious minds.

1,000,000+ curious minds.

一本书，多种聆听方式。

The Digital Arms Race: Inside the Cyberweapons Market

The Birth of a Shadow Industry

边听边看，每个词都清晰呈现

The NSA's Digital Arsenal

Crossing the Digital Rubicon

从 《零日漏洞》中收获更多

The Mercenaries: Selling Digital Weapons to the Highest Bidders

The Resistance: Silicon Valley Awakens

边听边看，每个词都清晰呈现

When America's Weapons Boomerang Back

The Gathering Storm: Our Vulnerable Future

从 《零日漏洞》中收获更多

Securing Our Digital Future

你已读完 《零日漏洞》

用户还喜欢

该学习计划的一部分

Becoming an ethical hacker

发现更多

《零日漏洞》概述

从《零日漏洞》中收获更多

从《零日漏洞》中收获更多

你已读完《零日漏洞》

从《零日漏洞》中收获更多

从《零日漏洞》中收获更多

你已读完《零日漏洞》