Zero-day vulnerabilities are unknown and unpatched software flaws. Mitigation involves using intrusion detection systems, promptly applying patches, and employing behavior-based security measures.