Zero-day attacks exploit new security vulnerabilities that haven’t been patched yet. Advanced Threat Protection uses advanced scanning techniques, including sandboxing suspicious attachments in a secure environment, to spot harmful behavior even from previously unknown threats. This means dangerous emails are stopped before they reach inboxes — even if the attack is brand new.