A Windows kernel zero-day spent five weeks inside defense firms before Microsoft patched it. Two hundred sixty-seven Zimbra servers fell to a flaw that…