Matt Green, himself no cryptographic slouch, says this is the biggest crypto story of the year: malware that included a new cryptanalytic result in its toolset. Zero-day vulnerabilities are somewhat common in malware; zero-day crypto results in malware are practically unknown.