How Zero-Day Hacks Work (and Why They're So Scary)