This time, the crooks got there first – only 1 security hole patched, but it’s a zero-day.