The exploit gap is closing, and your patch cycle wasn’t built for this