Which of the following statements are true for a zero-day attack? [Choose all that apply.]

A. A zero-day vulnerability can be example of an unknown threat

B. A zero-day attack is impossible to detect as it exploits the unknown vulnerabilities

C. A zero-day vulnerability can only exist within the operating systems

D. A zero-day vulnerability can only be discovered when the software is deployed