Zero-day, but not zero-risk

August's Black Hat event heard that zero-day vulnerabilities can be reverse-engineered. Cath Everett assesses the damage