you just better be sure they initially exploited the only vulnerability they found the first time.