The zero-day timeline just collapsed. Here’s what security leaders do next