A pair of reports from Mandiant and Google found a spike in zero-day vulnerabilities in 2021. The question is, why?