I assume Apple already knows the hack/vulnerability. Apple should announce they know it, fix it, and give the FBI a big F-U.
Without recalling all iPhones prior to the Secure Enclave, I'm not exactly sure how they would 'fix it'.
It is not only common, but NORMAL for hackers to have unknown exploits before the vendor is aware of them. Where do you think 0-days come from? In fact, there is an annual competition to break these devices with previously unknown attacks at CanSecWest.
Example: http://9to5mac.com/2014/11/13/iphone-5s-samsung-galaxy-s5-ne...