zero-day

What makes a vulnerability a “zero-day”, and what defenders can do before a patch exists.