“Nobody but us” (NOBUS) is one of the NSA’s deciding factors for determining whether or not to disclose or hoard vulnerabilities which could be used for zero-day attacks. For vulnerabilities that are thought to be unlikely to be independently discovered by other parties, the NSA prefers to hoard. For those that they consider to be likely to be independently discovered, they are likely to be disclosed and receive software updates to plug those vulnerabilities.


Last updated: 4 September 2017