The process was, Daniel conceded, more art than science. He would never say it, but given the vast resources U.S. intelligence agencies were now pouring into offense, and the intelligence a zero-day could render on imminent terrorist attacks or North Korean missile launches, the process would always weigh more heavily on hoarding a zero-day than turning it over for patching. But as more hospitals, nuclear plants, stock exchanges, airplanes, cars, and parts of the grid came online, the VEP discussions could get ruthless.

