Zero-day Exploitation and Responsible Disclosure