Zero-day response now has to happen before a stable patch or public exploit exists. PaperCut shows why exploitability validation, control testing, and agentic pentesting must close gaps in hours, not weeks. #PaperCut #PicusSecurity #Iran