“Most successful technical cyber attacks exploit known, unpatched vulnerabilities rather than zero-day exploits.”