Snehal Antani, @snehalantani, CEO & Co-founder of http://Horizon3.ai, explains why most real hacks are not zero-days. He says attackers usually just log in with stolen creds, then chain misconfigurations until they reach domain admin. "It is the daily grind of an attacker spending their time deeply understanding your network, finding those edge cases in misconfigurations, compromising credentials, chaining things together."