HITCON 2016 discovers three real-world zero-day vulnerabilities in one day