Look for advanced protection technology that proactively protects against zerodayexploits or recognizes lateral movement within a network and blocks it.
Intrusion detection, capable of spotting zerodayexploits, must be deployed to audit and test the recognition and response capabilities of your corporate security defences.