Comment by DetroitThrow

There's a lot of smoke being blown by companies with a financial stake in coming off as "security-minded" or something.

There's apparently _some_ exploit usage in the wild before the embargo breaking, but it very much looks like they didn't even achieve RCE, or if they did it was not widespread at all. It doesn't mean it wasn't possible by a group more sophisticated, it just didn't happen thankfully.

After the embargo was broken, RCEs were still not widespread, especially not before a huge number of sites patched themselves.

So, no, the narrative that skids with agents were busting down doors as soon as the embargo was broken is not accurate. But breaking the embargo before a patch was ready only hurt the situation for defenders.