“Bracing for ‘holy crap,’ zero-day exploits”