There is a dilemma when government agencies discover or purchase “zero day” vulnerabilities. These vulnerabilities are software weaknesses that are unknown to the software’s developer or users.

They get the name because when discovered by a third party, the developer literally has had “zero days” to develop a patch, and users have had “zero days” to implement the patch or take other protective measures.