How to combat the long lives of zero-day vulnerabilities

I just read this article today called How to combat the long lives of zero-day vulnerabilities and I didn’t know vulnerabilities can last 6 to 9 years if not patched. This is something I’ve never known before and I didn’t think it was this bad. This was definitely something I thought we should pass along.