I thought this vulnerability had already been reported to Kaseya (privately), and they were working on it. Does that still qualify as a zero-day?