vulnerability-management-resources VS SSVC

Microsoft lists zero-day vulnerabilities their patches will fix each Patch Tuesday, but tracking down other zero-days doesn’t seem as easy. I’ve looked at the resources listed here but none seem to explicitly notate and filter for zero-days. The Tenable plugins search doesn’t allow filtering of zero-days, either. I could set up a news search or Twitter search each day, but if there’s one resource out there somewhere that keeps track of them all, that’d be extremely helpful.

For other vulnerability related resources check: https://github.com/nickpieper/vuln-management-resources

so on this point i disagree with the author. depending on what you want to do, two methodologies i've used in the past have worked well for me: - EPSS - exploit predictability scoring system. how likely is this to be exploited? for many a key metric in patching prioritization - SSVC - stakeholder specific vulnerability categorization, comes to one of four outcomes for patching - immediately, emergency window, next scheduled window, or whenever. gets to how severe an impact would be on the business as a whole.