Zero-day exploits used in attacks may be long lasting, sometimes remaining on infected systems for more than two years, but the dangerous threat is typically used in highly targeted attacks making widespread impact a rare occurrence, according to a scientific study released this week.