Patching won’t be able to keep up with discovery, said Rob Joyce, who once led the National Security Agency's elite hacking team.