Just a rumour of a bug is enough to find a security exploit these days
Source
simonwillison.net
Date
Why it matters
The gap between a public hint of a bug and a working exploit is now minutes, because coding agents close it. Open source embargo and release timing were designed for a window that no longer exists.