Such exploits sell for up to $10 million, making them the single most valuable commodity in the cybercrime underworld.