RAND Study Examines 200 Real-World 'Zero-Day' Software Vulnerabilities

Many highlights in this thread on Twitter:

https://twitter.com/dguido/status/839843696078127104