An e$-$commerce company recently identified suspicious activity on its web$-$based application, suggesting a zero$-$day exploit. The security team suspects that a vulnerability in the application might be under active exploitation by malicious actors before the company identified and patched it$.$ With no known fixes available for a zero$-$day exploit, what should be the initial course of action for the security team to minimize potential damage and safeguard the application and its users?