Hard-to-detect, destructive zero-day threats involve cybercriminals using vulnerabilities no one knows about. One security expert has a way to stop them.