The Strange Journey of an NSA Zero-Day Vulnerability—Into Multiple Enemies’ Hands

The notion of a so-called zero-day vulnerability in software is supposed to mean, by definition, that it’s secret. The term refers to a hackable flaw in code that the software’s maker doesn’t know about, but that a hacker does—in some cases offering that hacker a powerful, stealthy skeleton key into the hearts of millions of …