Which type of threat will patches NOT effectively combat as a security control?
1) Malware with defined indicators of compromise
2) Discovered software bugs
3) Known vulnerabilities
4) Zero-day attacks