What steps do we need to take immediately after receiving zero-day exploit alerts for software we use across our department?