Guillermo Rauch: "We've confirmed a KVM 0day through our Vercel bounty program"