Just because it wasn't publicly disclosed ...
doesn't mean others didn't know about it, nor were using this for their own purposes.
It is ideal for things to be patched before disclosing them, since that allows the fix to be put in place before people start the mass exploitation that happens.
Biting the hand that feeds IT
