White hat hackers at Google Project Zero are tracking cyber attacks exploiting zero-day vulnerabilities before the vendor released security fixes.